Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/9mXLft8tWj3ND21SZ2EnzTtS7VU.roa
File: 9mXLft8tWj3ND21SZ2EnzTtS7VU.roa (raw, json)
Hash identifier: aPk5QCp+d6NH9kl7Q2Ikryx7fdjc3+hRQdArIsf7we0=
Subject key identifier: F6:65:CB:7E:DF:2D:5A:3D:CD:0F:6D:52:67:61:27:CD:3B:52:ED:55
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019C965C23F19DE20F146DA2F562F53A3AA0
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/9mXLft8tWj3ND21SZ2EnzTtS7VU.roa
Signing time: Wed 25 Feb 2026 19:52:26 +0000
ROA not before: Wed 25 Feb 2026 19:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203938
IP address blocks: 45.84.89.0/24 maxlen: 24
136.175.222.0/24 maxlen: 24
136.175.223.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
163.123.192.0/24 maxlen: 24
163.123.194.0/24 maxlen: 24
205.178.176.0/24 maxlen: 24
205.220.227.0/24 maxlen: 24
2a11:3a00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:96:5c:23:f1:9d:e2:0f:14:6d:a2:f5:62:f5:3a:3a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Feb 25 19:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f665cb7edf2d5a3dcd0f6d52676127cd3b52ed55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:5f:da:fd:86:14:6d:a8:b4:b8:2f:cc:33:
e4:4a:94:f5:13:f0:91:8b:a9:4b:4e:bb:2d:c8:96:
d8:43:e2:57:36:31:b2:9b:b3:94:be:37:7a:ca:5d:
80:d6:03:e9:df:52:90:a8:e9:cd:80:88:8a:79:b5:
a4:28:f2:73:ab:53:28:29:37:96:c7:c6:84:eb:88:
fe:a8:4d:36:92:a4:f6:d4:c7:3c:30:3b:6c:7f:e8:
b6:79:5f:2e:69:c2:31:13:4e:7b:aa:39:91:62:16:
4f:97:a8:b7:b0:33:4f:a7:67:fb:ee:1e:ef:b8:c4:
ea:9d:b5:57:d5:14:fa:77:f6:bc:b7:95:49:05:f7:
37:1a:07:f2:17:e0:96:4a:87:b0:e3:50:84:07:3f:
24:f1:16:36:1b:08:1c:09:a4:df:26:dd:f3:af:b4:
cc:67:15:8b:e1:4f:02:27:0d:eb:c1:a6:7e:0a:ef:
72:27:c5:68:1e:d1:8f:c4:a5:c2:26:9c:66:66:37:
09:5f:42:cf:c3:09:75:12:72:39:fc:62:e5:42:62:
96:49:b8:46:71:de:66:c5:c2:ac:80:d1:6a:f4:ae:
f7:a2:0f:3c:1e:be:99:f8:f6:f2:ba:e2:e4:0c:16:
b9:ad:05:ae:26:36:67:c6:a6:46:62:42:dc:c7:4f:
77:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:65:CB:7E:DF:2D:5A:3D:CD:0F:6D:52:67:61:27:CD:3B:52:ED:55
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/9mXLft8tWj3ND21SZ2EnzTtS7VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
136.175.222.0/23
141.98.1.0/24
163.123.192.0/24
163.123.194.0/24
205.178.176.0/24
205.220.227.0/24
IPv6:
2a11:3a00::/29
Signature Algorithm: sha256WithRSAEncryption
27:41:af:33:f6:b5:32:22:22:8d:50:9f:86:aa:21:ae:24:91:
44:3b:4a:a4:fa:99:ae:d6:0f:f5:3b:5e:c4:78:17:26:f3:c9:
84:cb:69:19:55:8f:d7:e9:8f:73:1d:ee:40:da:8f:62:66:b0:
a5:19:5e:97:24:31:28:87:29:ee:f4:a0:82:ff:15:ac:0b:30:
a9:2f:a5:57:75:5f:52:a9:aa:ad:68:a1:15:f4:89:b3:d0:49:
fc:9d:c5:71:10:6d:19:4e:47:35:62:32:6d:37:72:cf:52:b1:
c0:76:60:e4:6f:9c:1f:d5:91:65:fb:7b:66:55:74:35:55:1d:
ee:22:d9:60:00:51:0f:8c:9a:90:69:f7:9b:60:24:80:da:45:
97:dd:f0:b9:32:b9:de:3e:e0:fe:19:1e:ac:25:de:b4:bd:a3:
5d:8d:7c:b6:d7:78:93:36:38:fc:b7:c7:ba:13:03:87:1c:07:
7f:39:30:fc:1d:56:f3:32:03:61:66:28:61:d6:a2:84:66:67:
9d:b4:bc:e6:5d:bf:13:ad:7f:cd:e5:ef:a8:35:7e:5b:a9:b8:
2d:75:53:e4:e4:f3:0c:c5:21:4d:c2:3d:63:b6:f0:6b:5e:4e:
fb:2d:a7:23:0b:9a:01:38:5a:83:de:8f:7f:33:0b:7b:de:76:
9a:14:10:df
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZyWXCPxneIPFG2i9WL1OjqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MTcwMzM5YzJiYzY2NGQ2MDBmYTk4YjgwNjEyNjlkNDhl
NGYyYzYwHhcNMjYwMjI1MTk1MjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjY1Y2I3ZWRmMmQ1YTNkY2QwZjZkNTI2NzYxMjdjZDNiNTJlZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM1f2v2GFG2otLgvzDPkSpT1E/CR
i6lLTrstyJbYQ+JXNjGym7OUvjd6yl2A1gPp31KQqOnNgIiKebWkKPJzq1MoKTeW
x8aE64j+qE02kqT21Mc8MDtsf+i2eV8uacIxE057qjmRYhZPl6i3sDNPp2f77h7v
uMTqnbVX1RT6d/a8t5VJBfc3GgfyF+CWSoew41CEBz8k8RY2GwgcCaTfJt3zr7TM
ZxWL4U8CJw3rwaZ+Cu9yJ8VoHtGPxKXCJpxmZjcJX0LPwwl1EnI5/GLlQmKWSbhG
cd5mxcKsgNFq9K73og88Hr6Z+PbyuuLkDBa5rQWuJjZnxqZGYkLcx093ewIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFPZly37fLVo9zQ9tUmdhJ807Uu1VMB8GA1UdIwQY
MBaAFIYXAznCvGZNYA+pi4BhJp1I5PLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMt
NzRkOTFjZGJlMTk1LzEvOW1YTGZ0OHRXajNORDIxU1oyRW56VHRTN1ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMtNzRkOTFjZGJlMTk1
LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQALVRZAwQB
iK/eAwQAjWIBAwQAo3vAAwQAo3vCAwQAzbKwAwQAzdzjMA0EAgACMAcDBQMqEToA
MA0GCSqGSIb3DQEBCwUAA4IBAQAnQa8z9rUyIiKNUJ+GqiGuJJFEO0qk+pmu1g/1
O17EeBcm88mEy2kZVY/X6Y9zHe5A2o9iZrClGV6XJDEohynu9KCC/xWsCzCpL6VX
dV9SqaqtaKEV9Imz0En8ncVxEG0ZTkc1YjJtN3LPUrHAdmDkb5wf1ZFl+3tmVXQ1
VR3uItlgAFEPjJqQafebYCSA2kWX3fC5MrnePuD+GR6sJd60vaNdjXy213iTNjj8
t8e6EwOHHAd/OTD8HVbzMgNhZihh1qKEZmedtLzmXb8TrX/N5e+oNX5bqbgtdVPk
5PMMxSFNwj1jtvBrXk77LacjC5oBOFqD3o9/Mwt73naaFBDf
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:19:29 2026 by rpki-client