Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/9bk9FzgprAvBVf1LHM_MSueKaME.roa
File: 9bk9FzgprAvBVf1LHM_MSueKaME.roa (raw, json)
Hash identifier: 5s6z7jYIqXhvgLEPSXHpNe6iemihHCdMHDOjiBCuX/Y=
Subject key identifier: F5:B9:3D:17:38:29:AC:0B:C1:55:FD:4B:1C:CF:CC:4A:E7:8A:68:C1
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 019E92DB0DF888BCE9487C5A12D17A5C8173
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/9bk9FzgprAvBVf1LHM_MSueKaME.roa
Signing time: Thu 04 Jun 2026 13:38:09 +0000
ROA not before: Thu 04 Jun 2026 13:38:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213929
IP address blocks: 185.127.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:db:0d:f8:88:bc:e9:48:7c:5a:12:d1:7a:5c:81:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Jun 4 13:38:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5b93d173829ac0bc155fd4b1ccfcc4ae78a68c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:0a:c4:fb:a3:0b:8f:26:bc:9f:79:12:6e:
3a:ac:6f:a7:89:a2:7a:8c:b6:5f:2e:4b:0e:6c:15:
5b:5c:5a:34:c7:f5:23:5e:fd:cc:a1:8c:06:86:c0:
02:83:f6:9c:40:fa:73:82:5a:af:cf:a0:7e:6b:85:
4d:f8:39:0e:5e:fc:d5:15:84:59:56:7f:00:8e:a4:
36:30:12:2f:0b:19:be:d1:71:06:94:86:e8:f1:20:
b6:f4:16:5e:3a:c7:ef:fa:9c:fa:a3:aa:c9:66:63:
ee:58:20:9d:88:87:80:73:83:3a:4d:85:d1:fb:91:
48:e2:c2:59:d7:f0:30:3b:a2:88:4e:cc:3e:9c:65:
91:3c:e3:63:d1:fa:f1:5c:06:15:04:38:4b:3f:44:
b1:5c:b9:21:b3:ce:c6:9c:d1:92:d5:a7:c0:d1:fd:
76:70:9c:67:14:fa:f5:57:31:2f:b9:c2:1a:3e:c6:
f3:0a:05:80:70:29:8c:b9:8a:75:2b:77:eb:11:0a:
14:79:15:34:db:6c:11:a9:97:60:23:2e:ea:0f:38:
f5:66:d4:47:9a:2a:0e:e5:f7:54:76:56:dc:dc:a6:
f1:e8:ee:83:7a:45:30:43:04:48:d5:e4:56:d9:1f:
d3:93:3c:c6:0b:84:fa:7e:d2:01:74:e4:40:bd:64:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B9:3D:17:38:29:AC:0B:C1:55:FD:4B:1C:CF:CC:4A:E7:8A:68:C1
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/9bk9FzgprAvBVf1LHM_MSueKaME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.176.0/22
Signature Algorithm: sha256WithRSAEncryption
16:c1:43:20:6b:a1:ae:bf:0b:0c:90:82:2d:d3:e7:fd:47:52:
99:9b:d5:80:f6:7f:d9:e0:db:86:ce:35:6e:cf:54:65:b3:d2:
1d:88:ba:64:70:74:e8:1c:43:05:2e:c1:7b:69:2e:c5:7a:3f:
dd:2a:bc:dd:d4:d4:02:ab:d3:7e:62:18:84:01:8b:65:2b:a0:
64:f3:31:62:07:8b:2b:96:e7:36:bd:58:4e:93:f9:26:82:f2:
c2:5f:ec:6c:5e:83:34:6f:41:93:42:c5:9d:80:b3:de:0b:1c:
22:05:2d:f3:94:69:7f:76:3c:c3:69:ec:e7:7d:0b:f1:13:3b:
86:b6:14:df:42:99:18:61:62:cc:9a:25:95:75:8c:2e:46:f8:
b2:25:6b:ef:75:a4:58:71:ba:92:66:d4:23:85:09:72:8a:54:
13:51:71:2e:4a:14:1d:df:b5:0e:3b:f1:d2:ad:40:37:8b:79:
9b:06:cd:81:a9:9c:5c:de:01:02:d0:10:c4:0a:7a:f1:42:3e:
56:7c:4d:4a:04:64:ca:1f:3c:32:22:f5:29:79:6e:8d:a5:7a:
fc:3c:b4:48:4e:c3:74:e9:54:1e:56:b0:37:3a:23:fa:ea:5d:
a7:16:1a:01:81:f8:ac:41:cd:08:90:a0:8e:eb:95:5d:54:81:
bc:47:75:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:30 2026 by rpki-client