Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/9qwf6-Dqoc3yJJecKnCaJyAyhZ4.roa
File: 9qwf6-Dqoc3yJJecKnCaJyAyhZ4.roa (raw, json)
Hash identifier: /C2CSaK00NB+/TpXiHAeWUhtWjQTZ45pzq0LkkZy9eA=
Subject key identifier: F6:AC:1F:EB:E0:EA:A1:CD:F2:24:97:9C:2A:70:9A:27:20:32:85:9E
Certificate issuer: /CN=b220d91b4e9d70f034fa16a16a887d4255792ade
Certificate serial: 019D500DF6E2525A5A638B173D16C49E16BC
Authority key identifier: B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/9qwf6-Dqoc3yJJecKnCaJyAyhZ4.roa
Signing time: Thu 02 Apr 2026 21:16:25 +0000
ROA not before: Thu 02 Apr 2026 21:16:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42010
IP address blocks: 5.28.48.0/21 maxlen: 24
91.103.184.0/21 maxlen: 24
128.65.96.0/21 maxlen: 21
128.65.96.0/24 maxlen: 24
128.65.97.0/24 maxlen: 24
128.65.98.0/23 maxlen: 23
128.65.100.0/22 maxlen: 22
128.65.103.0/24 maxlen: 24
185.91.20.0/22 maxlen: 24
185.135.168.0/23 maxlen: 23
185.135.170.0/23 maxlen: 23
2a03:7f80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:50:0d:f6:e2:52:5a:5a:63:8b:17:3d:16:c4:9e:16:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b220d91b4e9d70f034fa16a16a887d4255792ade
Validity
Not Before: Apr 2 21:16:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6ac1febe0eaa1cdf224979c2a709a272032859e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2a:95:05:f2:e7:d1:dd:18:26:cd:53:5f:63:
9a:71:ce:97:48:fc:9b:1a:49:8c:73:a2:fb:85:bc:
8c:a5:4b:80:42:b9:4f:5c:79:20:91:1b:d2:42:1d:
82:87:07:a3:74:93:23:ae:0b:2a:7a:47:34:21:df:
d4:6f:dd:e2:c6:87:86:79:b0:cd:c1:bd:80:2f:9a:
56:25:27:b6:9a:fa:c6:6b:b8:57:18:fc:21:e0:ed:
07:aa:58:1a:2e:91:f5:7e:b4:e6:a8:dc:c9:dc:59:
14:cd:06:81:9d:6d:9a:5d:eb:5f:1a:3c:13:fd:65:
51:6f:d0:a1:df:79:92:aa:fe:4d:3f:c1:69:a7:74:
52:38:95:73:01:0c:4e:24:a6:35:12:77:5e:61:1f:
72:d8:45:d7:20:a3:f9:5e:15:a0:57:a3:d4:c0:c4:
7d:41:94:34:2a:3a:1d:18:e7:54:1c:53:09:f9:c4:
a3:07:56:2e:a6:5b:1a:82:51:b1:f5:a8:c1:7e:25:
50:a9:f7:c6:12:d5:d4:b2:9b:42:9a:52:50:16:bf:
f3:a8:26:b8:d0:56:5e:b1:03:16:e5:7c:db:ba:5a:
86:dd:4b:91:f5:44:eb:e9:25:45:2c:59:f6:28:f0:
30:b5:b6:85:73:c9:82:1f:31:0e:14:55:84:dd:ea:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AC:1F:EB:E0:EA:A1:CD:F2:24:97:9C:2A:70:9A:27:20:32:85:9E
X509v3 Authority Key Identifier:
keyid:B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/9qwf6-Dqoc3yJJecKnCaJyAyhZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.28.48.0/21
91.103.184.0/21
128.65.96.0/21
185.91.20.0/22
185.135.168.0/22
IPv6:
2a03:7f80::/32
Signature Algorithm: sha256WithRSAEncryption
5c:2e:dc:aa:ed:ba:43:de:36:ac:a4:c4:be:12:1f:f2:70:84:
c4:25:b2:4b:5d:77:3d:09:c0:c5:22:69:d8:64:ab:e7:5d:25:
52:bb:e2:3d:0c:57:f3:51:8f:2b:f0:33:53:56:ba:aa:b7:37:
3e:1c:cf:6f:d7:b9:76:ae:bc:b0:06:57:8d:df:45:25:60:99:
bf:42:09:5d:41:7a:39:18:d5:eb:84:3e:85:6b:c7:c6:d8:04:
e9:89:38:91:85:8f:9d:8d:71:5d:6d:a4:24:ff:d3:c9:0a:fa:
fc:3e:f1:e6:1c:21:55:fd:36:7f:68:30:78:de:c4:e7:7d:6b:
84:79:a7:fc:d8:a2:d5:e3:db:04:c4:d5:00:fc:ff:de:cb:69:
a8:4c:37:55:8a:44:98:20:46:92:d5:35:04:ca:0d:3b:cf:71:
2f:7b:ea:e1:3f:d4:63:31:b9:70:1c:73:95:41:bf:b8:38:c0:
be:a6:10:40:24:b3:8c:5b:e7:e2:46:aa:01:2f:a2:4b:97:93:
ac:b5:67:a5:b3:88:45:6d:8a:94:be:3f:0f:44:89:d7:0a:65:
8a:c7:45:4e:71:bb:d4:ab:16:06:7c:ea:fa:f1:94:6f:82:09:
62:28:e6:69:c7:fe:2c:77:ab:83:4f:94:24:26:4c:4e:55:b6:
6b:f7:5c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:39:11 2026 by rpki-client