Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/SpTT9-sbWMhVBDjsZYsqJNdl4z4.roa
File: SpTT9-sbWMhVBDjsZYsqJNdl4z4.roa (raw, json)
Hash identifier: DetJ0LlDZnlGmwIXOCXqSyycEMtjT8ysire41FdrJY0=
Subject key identifier: 4A:94:D3:F7:EB:1B:58:C8:55:04:38:EC:65:8B:2A:24:D7:65:E3:3E
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 01A085677EA4EE9855FCFB9FAC25581612F5
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/SpTT9-sbWMhVBDjsZYsqJNdl4z4.roa
Signing time: Wed 09 Sep 2026 09:02:27 +0000
ROA not before: Wed 09 Sep 2026 09:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200484
IP address blocks: 1.179.120.0/21 maxlen: 24
77.32.128.0/18 maxlen: 24
77.32.192.0/19 maxlen: 24
94.143.16.0/21 maxlen: 24
153.92.224.0/19 maxlen: 24
172.246.0.0/16 maxlen: 24
172.246.0.0/18 maxlen: 24
172.246.64.0/22 maxlen: 24
172.246.239.0/24 maxlen: 24
172.246.240.0/20 maxlen: 24
185.24.144.0/22 maxlen: 24
185.41.28.0/22 maxlen: 24
185.107.232.0/22 maxlen: 24
212.146.192.0/18 maxlen: 24
213.32.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:67:7e:a4:ee:98:55:fc:fb:9f:ac:25:58:16:12:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Sep 9 09:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a94d3f7eb1b58c8550438ec658b2a24d765e33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:c2:86:7a:4a:e2:ae:7b:ad:6c:fd:f8:20:
53:48:a0:de:2a:3a:99:23:4c:01:1f:65:08:8f:b0:
47:12:4c:39:70:a9:3d:d4:b6:4b:a8:0a:c7:fd:0f:
22:53:37:d7:38:b8:93:cd:b7:b0:0c:46:47:2d:72:
72:fe:02:ec:81:35:5f:cf:1f:01:13:b2:69:cb:be:
e3:e0:b7:e4:0e:b7:7a:47:2d:0b:68:8c:d1:9d:9c:
0b:38:55:ba:e1:aa:a8:99:86:14:07:80:d9:c4:aa:
2e:2d:71:0e:4f:57:b4:78:ea:30:82:f9:99:7d:f2:
c3:a0:80:cb:1f:1a:a7:bb:99:15:4a:1b:24:e4:74:
f7:6a:71:59:af:2f:8e:77:14:e4:6f:32:86:83:82:
52:0a:fa:75:eb:3e:f1:67:82:5e:2b:d2:c4:a1:e4:
e0:e2:1d:30:f7:85:bd:15:25:03:21:ae:d1:9e:95:
52:8d:00:c9:b2:26:8d:5b:24:2e:fd:f5:07:78:cc:
aa:13:09:1d:7a:15:f7:b7:d4:fc:cf:70:1a:24:9b:
54:2c:05:78:cf:c7:9c:f3:68:97:d3:31:79:c3:a3:
f7:dc:58:66:bc:5c:d5:fe:27:42:bd:a8:16:82:51:
1c:62:b0:a3:cb:5c:d0:99:0a:b5:be:a3:eb:ad:48:
24:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:D3:F7:EB:1B:58:C8:55:04:38:EC:65:8B:2A:24:D7:65:E3:3E
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/SpTT9-sbWMhVBDjsZYsqJNdl4z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.179.120.0/21
77.32.128.0-77.32.223.255
94.143.16.0/21
153.92.224.0/19
172.246.0.0/16
185.24.144.0/22
185.41.28.0/22
185.107.232.0/22
212.146.192.0/18
213.32.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a0:98:32:5f:da:db:e8:31:3f:ab:51:54:9a:39:df:5b:76:9e:
2e:89:1e:a7:8b:44:72:49:b6:b7:08:5e:1f:45:0c:18:a7:f2:
1e:83:6e:29:96:db:b1:b9:ef:23:c6:ee:e0:e7:72:73:db:f0:
1c:e2:99:8f:2a:49:d1:97:48:a8:48:91:23:d2:70:26:96:0c:
4a:5c:ae:ff:d0:33:64:12:75:a4:04:af:34:34:4a:f1:b3:0d:
59:3e:6a:b3:e3:03:24:fe:2b:c1:d3:8b:85:8e:e3:d7:a0:07:
9d:57:a5:f0:ae:0f:16:ca:66:0e:d3:31:93:0d:cd:ce:bf:f3:
cf:c5:f8:b6:64:35:3d:76:95:ae:ef:a7:4e:d2:fa:07:5d:44:
bf:56:6f:43:4b:55:06:68:5d:b6:60:de:a7:1f:d8:58:78:88:
5b:3a:3e:50:eb:42:ad:a2:76:08:92:62:0a:7d:2a:db:e4:38:
52:f0:df:0b:61:c4:13:59:eb:5a:aa:3a:fc:f5:74:7b:d3:5b:
a0:f8:9a:60:34:76:56:41:1a:23:2a:4e:10:67:4d:3b:72:37:
ab:a8:fd:3d:e8:ca:94:14:bf:2b:ee:11:75:d1:ea:c3:23:01:
c0:ac:c0:bb:57:c6:59:d2:c4:4f:b3:cd:a5:cc:f5:85:bd:26:
eb:de:54:a1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:07 2026 by rpki-client