Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/9dhsthoaXaPoBrSTrsvgSExWIoY.roa
File: 9dhsthoaXaPoBrSTrsvgSExWIoY.roa (raw, json)
Hash identifier: cPZPgZXAovCO9mUbAk5QA1zMCmKikIe24abH78kDWls=
Subject key identifier: F5:D8:6C:B6:1A:1A:5D:A3:E8:06:B4:93:AE:CB:E0:48:4C:56:22:86
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01A0906C3BB9764C4AF01A5B592F9EBBCD74
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/9dhsthoaXaPoBrSTrsvgSExWIoY.roa
Signing time: Fri 11 Sep 2026 12:23:27 +0000
ROA not before: Fri 11 Sep 2026 12:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 84.55.8.0/22 maxlen: 24
88.223.46.0/24 maxlen: 24
88.223.168.0/24 maxlen: 24
95.173.46.0/24 maxlen: 24
95.173.48.0/24 maxlen: 24
95.173.49.0/24 maxlen: 24
95.173.58.0/24 maxlen: 24
95.173.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:6c:3b:b9:76:4c:4a:f0:1a:5b:59:2f:9e:bb:cd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Sep 11 12:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5d86cb61a1a5da3e806b493aecbe0484c562286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:1f:ae:f5:18:23:0c:a1:36:90:64:97:6a:
6a:36:6b:77:91:26:8b:7e:b5:b5:24:17:b1:ee:aa:
1d:21:8f:f2:14:cf:6d:5c:63:09:66:7d:f5:84:c3:
2b:24:27:32:22:cf:e8:28:00:93:c0:30:7f:65:dc:
33:9a:45:e7:fa:51:34:1b:f6:1e:31:e8:4b:d6:99:
9d:ce:a9:35:97:e8:24:82:53:57:9f:ed:98:ee:5a:
ca:f3:db:25:77:43:0e:a2:38:89:a6:89:b1:42:05:
39:9a:af:0a:a2:f2:2c:01:10:b9:8e:2b:ef:0e:9f:
5c:0f:fe:e4:e3:ac:75:33:b5:bd:a9:ee:bc:3c:8a:
20:f9:33:65:e1:af:fa:09:3e:91:08:cc:49:7f:8a:
bc:b5:ba:5f:68:52:49:c1:0e:1a:63:23:21:ee:8d:
05:d2:d6:06:58:09:8c:90:8c:e4:61:0b:c3:91:24:
36:d3:a0:71:50:47:78:21:cc:4f:36:bf:a3:13:48:
07:8d:c3:8e:e6:a7:02:ae:43:49:ea:ad:8f:a9:4f:
c8:6a:4d:70:d7:a0:1f:b0:67:82:1f:be:02:ed:75:
6c:54:19:82:59:c0:f5:1b:ea:75:27:04:17:b6:37:
16:c2:e5:4b:0c:ef:4b:e7:ab:c1:71:a9:fe:03:2c:
84:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D8:6C:B6:1A:1A:5D:A3:E8:06:B4:93:AE:CB:E0:48:4C:56:22:86
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/9dhsthoaXaPoBrSTrsvgSExWIoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.8.0/22
88.223.46.0/24
88.223.168.0/24
95.173.46.0/24
95.173.48.0/23
95.173.58.0/24
95.173.60.0/24
Signature Algorithm: sha256WithRSAEncryption
45:95:cb:f6:50:19:4e:76:af:6c:17:6d:cb:11:39:f3:82:e3:
67:47:da:3f:3e:ee:72:6d:82:c8:26:55:6a:69:b0:88:6b:53:
69:fe:d0:4c:d5:00:ec:20:c3:f4:8a:ef:b9:e5:c1:43:4d:ea:
60:13:e4:0e:16:33:b9:ca:79:cd:2b:b9:53:a3:40:69:e4:59:
1b:5c:03:74:1b:c1:bf:4f:65:c6:15:21:32:8d:22:59:7f:bf:
67:8b:49:07:3b:7d:f6:95:c4:f4:95:87:f1:20:0a:0d:26:03:
6a:ac:1a:3d:5f:cd:55:4e:5e:b6:7c:f2:14:3a:36:4d:fa:6a:
78:e2:53:f6:8f:fa:0d:89:ce:8c:06:61:b8:02:2a:1e:b3:bd:
59:14:b4:2e:bf:97:01:bd:59:30:26:11:b3:4d:ad:96:36:dd:
30:a2:b1:61:37:b0:4a:6a:28:4c:b1:2b:21:6e:0d:77:14:84:
bb:47:13:dd:4e:22:f6:3c:7a:95:c9:72:06:9e:38:1b:11:08:
22:fc:b0:c6:04:e7:52:7f:79:1d:ea:47:92:8e:ea:43:80:03:
ad:3b:de:30:ba:79:5b:e2:77:c2:fb:c1:ee:c7:d0:4f:30:84:
e6:79:57:5b:f1:40:7a:73:31:2c:38:7c:e4:1f:09:80:7a:59:
27:83:ed:87
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAaCQbDu5dkxK8BpbWS+eu810MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjYwOTExMTIyMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWQ4NmNiNjFhMWE1ZGEzZTgwNmI0OTNhZWNiZTA0ODRjNTYyMjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvucfrvUYIwyhNpBkl2pqNmt3kSaL
frW1JBex7qodIY/yFM9tXGMJZn31hMMrJCcyIs/oKACTwDB/ZdwzmkXn+lE0G/Ye
MehL1pmdzqk1l+gkglNXn+2Y7lrK89sld0MOojiJpomxQgU5mq8KovIsARC5jivv
Dp9cD/7k46x1M7W9qe68PIog+TNl4a/6CT6RCMxJf4q8tbpfaFJJwQ4aYyMh7o0F
0tYGWAmMkIzkYQvDkSQ206BxUEd4IcxPNr+jE0gHjcOO5qcCrkNJ6q2PqU/Iak1w
16AfsGeCH74C7XVsVBmCWcD1G+p1JwQXtjcWwuVLDO9L56vBcan+AyyEOQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFPXYbLYaGl2j6Aa0k67L4EhMViKGMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvOWRoc3Rob2FYYVBvQnJTVHJzdmdTRXhXSW9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCVDcIAwQA
WN8uAwQAWN+oAwQAX60uAwQBX60wAwQAX606AwQAX608MA0GCSqGSIb3DQEBCwUA
A4IBAQBFlcv2UBlOdq9sF23LETnzguNnR9o/Pu5ybYLIJlVqabCIa1Np/tBM1QDs
IMP0iu+55cFDTepgE+QOFjO5ynnNK7lTo0Bp5FkbXAN0G8G/T2XGFSEyjSJZf79n
i0kHO332lcT0lYfxIAoNJgNqrBo9X81VTl62fPIUOjZN+mp44lP2j/oNic6MBmG4
Aioes71ZFLQuv5cBvVkwJhGzTa2WNt0worFhN7BKaihMsSshbg13FIS7RxPdTiL2
PHqVyXIGnjgbEQgi/LDGBOdSf3kd6keSjupDgAOtO94wunlb4nfC+8Hux9BPMITm
eVdb8UB6czEsOHzkHwmAelkng+2H
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:56:18 2026 by rpki-client