Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/9gJCDoefYLTOALLR7m3uY4ZFTrs.roa
File: 9gJCDoefYLTOALLR7m3uY4ZFTrs.roa (raw, json)
Hash identifier: rDMT0XfW0LmY8GbUzIJRZiwWfpYyUk7Ld0WUStlDnJo=
Subject key identifier: F6:02:42:0E:87:9F:60:B4:CE:00:B2:D1:EE:6D:EE:63:86:45:4E:BB
Certificate issuer: /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Certificate serial: 019C9F1D5B2A37B66B1854D2F892634733B0
Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/9gJCDoefYLTOALLR7m3uY4ZFTrs.roa
Signing time: Fri 27 Feb 2026 12:40:27 +0000
ROA not before: Fri 27 Feb 2026 12:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 145.36.0.0/20 maxlen: 20
145.36.16.0/20 maxlen: 20
145.36.32.0/20 maxlen: 20
145.36.48.0/24 maxlen: 24
145.36.49.0/24 maxlen: 24
145.36.50.0/24 maxlen: 24
145.36.51.0/24 maxlen: 24
145.36.52.0/24 maxlen: 24
145.36.53.0/24 maxlen: 24
145.36.54.0/24 maxlen: 24
145.36.55.0/24 maxlen: 24
145.36.56.0/24 maxlen: 24
145.36.57.0/24 maxlen: 24
145.36.58.0/24 maxlen: 24
145.36.59.0/24 maxlen: 24
145.36.60.0/24 maxlen: 24
145.36.61.0/24 maxlen: 24
145.36.62.0/24 maxlen: 24
145.36.63.0/24 maxlen: 24
145.36.64.0/19 maxlen: 19
145.36.96.0/19 maxlen: 19
145.36.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:1d:5b:2a:37:b6:6b:18:54:d2:f8:92:63:47:33:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Validity
Not Before: Feb 27 12:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f602420e879f60b4ce00b2d1ee6dee6386454ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fb:15:7a:83:ed:53:da:82:d6:ba:45:c5:7c:
9f:d8:60:1c:9a:95:6c:0c:1e:c2:06:ee:54:6e:32:
c7:f0:73:ac:0f:df:55:d9:a2:7d:03:ab:e4:a2:16:
77:22:db:78:49:67:b2:e9:67:0c:92:9e:13:34:ad:
fb:b1:cc:0b:7c:2b:14:74:00:35:7e:e8:5a:94:2f:
6f:59:fb:a8:5e:f5:90:90:59:4d:74:68:30:a7:41:
e5:79:2a:37:78:93:84:2d:7c:53:f0:4f:f7:82:06:
88:7e:49:cc:e5:44:a5:c1:4c:6c:8c:4e:0a:0e:f0:
de:44:c4:fd:24:eb:43:3b:9e:77:93:a9:96:e8:eb:
31:10:fa:c6:39:35:a8:29:14:fd:15:6a:e4:35:a4:
02:02:07:c6:81:5b:61:09:d6:58:d3:00:07:b0:9b:
ea:65:fa:22:85:75:9a:f2:11:16:ea:d3:fb:03:0e:
86:a1:b3:f8:db:cc:26:06:45:ab:66:98:91:da:fb:
53:6a:98:a3:0a:98:4d:e6:39:7e:cc:33:79:b6:3b:
eb:58:22:cc:93:70:80:2c:1c:5c:60:da:7f:44:dd:
b1:40:55:41:21:1b:bd:e5:00:32:b6:b7:d7:86:22:
dd:7f:29:e9:94:c6:d6:09:0d:09:ee:f1:fe:57:3b:
fc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:02:42:0E:87:9F:60:B4:CE:00:B2:D1:EE:6D:EE:63:86:45:4E:BB
X509v3 Authority Key Identifier:
keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/9gJCDoefYLTOALLR7m3uY4ZFTrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.36.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:0e:01:e7:7a:7f:72:c8:cf:d2:c1:40:40:ad:89:87:25:10:
33:e0:64:1a:c9:69:fb:38:fd:db:12:22:6f:92:c0:e7:94:cd:
5e:0c:26:e1:e9:2c:ca:52:33:36:c5:9e:04:50:82:be:4c:17:
c8:2b:18:9b:bb:12:69:f1:ea:fb:be:40:e4:c6:45:87:0c:ad:
2f:a0:b4:1e:b8:ac:da:b0:76:56:f6:bd:ed:df:84:d9:ef:58:
3d:48:a5:7f:cb:4f:a2:a4:1c:3c:3c:2e:85:b3:a1:21:47:cd:
97:b2:63:a7:4f:6a:86:0c:00:5a:2d:aa:5e:ba:33:8b:ce:cd:
87:1c:56:ff:6d:6e:f4:ae:b0:7c:86:7b:ac:f7:97:0b:5d:ee:
9f:96:6d:7a:a2:12:30:c1:d7:8d:5a:11:a2:a3:d2:b7:b3:79:
b8:49:75:58:29:5c:85:05:56:9a:0e:85:cb:d0:dc:2b:36:cb:
c1:e3:a9:39:a3:7f:6d:cf:27:a4:c6:45:4f:bd:a0:d2:8b:21:
e4:2a:c8:ab:63:a4:97:8b:93:50:2f:62:6d:e6:5b:6a:20:df:
49:48:e5:1a:60:16:f7:64:8d:f8:ea:d1:eb:9e:2d:0b:eb:46:
48:84:1e:a8:3c:6c:2c:47:c3:0d:aa:5e:52:35:e2:08:b3:67:
55:49:8a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:47:30 2026 by rpki-client