Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/V9AvU1-J1GEKPmtrDYXycfLN7Wk.roa
File: V9AvU1-J1GEKPmtrDYXycfLN7Wk.roa (raw, json)
Hash identifier: uu21sXMMMyhfsxDU3zzrtXgihjX3PJKzctA9l0OnNNk=
Subject key identifier: 57:D0:2F:53:5F:89:D4:61:0A:3E:6B:6B:0D:85:F2:71:F2:CD:ED:69
Certificate issuer: /CN=bfc1e6d59e8e0f12fc3361b17130adf53ce26872
Certificate serial: 019EBC78277D278C186B09C726D51C7997EA
Authority key identifier: BF:C1:E6:D5:9E:8E:0F:12:FC:33:61:B1:71:30:AD:F5:3C:E2:68:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/V9AvU1-J1GEKPmtrDYXycfLN7Wk.roa
Signing time: Fri 12 Jun 2026 15:34:11 +0000
ROA not before: Fri 12 Jun 2026 15:34:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202152
IP address blocks: 185.131.18.0/24 maxlen: 24
185.131.19.0/24 maxlen: 24
2a06:3280::/32 maxlen: 32
2a06:3281::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:78:27:7d:27:8c:18:6b:09:c7:26:d5:1c:79:97:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfc1e6d59e8e0f12fc3361b17130adf53ce26872
Validity
Not Before: Jun 12 15:34:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57d02f535f89d4610a3e6b6b0d85f271f2cded69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:b1:96:75:09:6f:3e:d7:5b:a6:37:3c:bc:
e1:80:0a:ba:60:2c:62:db:c8:fe:19:e7:4a:c8:9c:
45:ad:e3:12:a8:67:b5:63:70:a0:9e:fd:d0:22:8d:
c0:65:2a:3f:f1:00:e2:06:d7:8f:c2:f4:6a:7a:c0:
1c:2e:1a:c9:ae:f1:a5:47:8a:18:31:29:40:83:e8:
b6:40:7b:0f:a5:f5:46:78:f8:e5:8a:fd:c8:8b:7e:
84:9a:c9:97:c2:ad:37:16:3d:77:44:21:38:df:32:
86:63:92:64:40:5c:63:1a:60:b2:e0:ff:7e:2b:c4:
65:cc:86:ae:73:84:34:c4:b6:f5:1f:a4:56:85:64:
60:41:24:b0:71:aa:85:8c:c1:fa:37:1e:f5:aa:fa:
a1:61:2b:c0:74:c8:a6:8a:ab:c5:e5:1b:65:eb:b4:
ff:ff:76:a4:8a:28:da:ce:23:05:16:7a:70:30:ac:
9e:99:0d:15:70:67:41:dd:c6:57:3c:ff:1c:fc:aa:
1e:f5:37:d0:c4:d9:90:9d:0f:96:41:ab:88:40:5c:
10:e8:24:4b:cf:49:2d:2c:17:3e:33:ac:72:64:71:
a8:b7:ae:9d:00:4a:21:e5:2c:da:95:16:1f:05:42:
c8:4e:9d:62:ff:94:67:2e:1f:50:ea:2e:d2:65:7a:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D0:2F:53:5F:89:D4:61:0A:3E:6B:6B:0D:85:F2:71:F2:CD:ED:69
X509v3 Authority Key Identifier:
keyid:BF:C1:E6:D5:9E:8E:0F:12:FC:33:61:B1:71:30:AD:F5:3C:E2:68:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/V9AvU1-J1GEKPmtrDYXycfLN7Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.18.0/23
IPv6:
2a06:3280::/31
Signature Algorithm: sha256WithRSAEncryption
00:fa:2c:c1:08:18:7e:be:e3:01:42:54:a6:63:4b:c9:06:af:
88:45:d5:1e:bc:39:1f:1d:49:5d:41:31:c1:a4:2f:ef:fa:d3:
64:22:9f:42:f0:24:b1:0f:9a:a1:e8:b9:a5:25:41:4b:80:01:
e6:a0:04:40:38:cf:25:8d:ae:32:82:2a:78:35:2b:e6:1b:4b:
61:66:1f:f9:6d:4f:b4:dd:0c:38:2f:3f:c7:ca:16:c4:d6:ed:
ec:a9:4f:44:72:d6:e5:10:52:82:07:2c:a1:de:ee:1f:bd:59:
64:52:c7:1c:6f:6e:2b:42:10:d1:b5:bd:f1:b2:0d:8c:0a:85:
21:a9:8b:d0:fc:75:9a:31:6b:70:6f:19:a4:b6:25:6e:33:3c:
a7:34:c1:88:f6:b1:4a:d6:30:50:ae:f9:68:00:dc:ca:82:c2:
4c:70:52:61:67:43:db:24:6b:5f:f6:39:e7:81:f3:93:84:76:
be:13:e3:cc:e8:48:03:49:ac:78:d0:11:22:c9:6b:d5:3b:3f:
b5:d3:bc:65:75:db:05:d2:6a:91:6f:c3:fc:4e:40:28:ff:89:
f7:13:8a:58:c4:02:fd:b9:b1:3c:d5:5e:19:4c:b3:13:40:d8:
37:8e:00:f2:19:1a:07:32:35:9a:77:1e:5b:e7:f7:77:9f:84:
07:27:be:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:04 2026 by rpki-client