Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/9KtcCJssA7VEFOfkZhEwt-nCZW4.roa
File: 9KtcCJssA7VEFOfkZhEwt-nCZW4.roa (raw, json)
Hash identifier: j3u+N8kCJRmuv2zhaNserTw/6cAR6T0TMUl0BASzttg=
Subject key identifier: F4:AB:5C:08:9B:2C:03:B5:44:14:E7:E4:66:11:30:B7:E9:C2:65:6E
Certificate issuer: /CN=33a924ad59b459357a19ee0a47f379530e2d244c
Certificate serial: 019B797EEA55D79CBA04D2D269B080C1ED9A
Authority key identifier: 33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/9KtcCJssA7VEFOfkZhEwt-nCZW4.roa
Signing time: Thu 01 Jan 2026 12:18:39 +0000
ROA not before: Thu 01 Jan 2026 12:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51104
IP address blocks: 185.26.85.0/24 maxlen: 24
185.169.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:ea:55:d7:9c:ba:04:d2:d2:69:b0:80:c1:ed:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a924ad59b459357a19ee0a47f379530e2d244c
Validity
Not Before: Jan 1 12:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4ab5c089b2c03b54414e7e4661130b7e9c2656e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:37:9e:f1:e4:04:f5:53:87:71:20:e0:a3:
0e:4d:87:18:96:37:2d:bf:2f:5d:19:ab:b7:99:c7:
dc:c2:7f:3c:8c:3b:18:08:8d:69:97:c6:bd:65:19:
5a:2f:55:69:28:86:c5:5e:5f:f4:a2:ba:7c:5c:94:
68:33:78:02:49:7b:21:5b:e5:55:ec:43:63:50:41:
fb:b1:03:ea:49:90:59:0d:59:0d:26:5f:4e:6c:48:
fc:54:c7:f9:68:09:cc:73:16:f4:cb:85:87:e5:09:
2c:7f:f8:66:74:45:34:af:49:6c:b2:da:c7:aa:4a:
5b:31:ab:dc:d4:86:ce:e4:8f:94:77:73:65:dd:40:
4f:3d:9a:ef:14:71:0c:8c:16:50:a7:23:40:f0:e4:
3d:4c:cf:41:c9:ec:ba:e5:1a:cb:b5:71:4b:c4:7c:
82:ba:55:ba:87:15:08:0f:40:87:87:c0:7d:f2:ee:
56:e0:40:ec:b7:0a:2e:b7:cf:bd:2b:e6:78:4e:ce:
b2:96:4e:4f:26:35:e6:4a:ef:51:cb:7d:b4:68:c2:
88:78:8d:52:c0:65:5f:65:2c:6d:14:7c:1e:b3:22:
7a:af:be:40:0a:85:6d:ee:9a:32:a0:1f:94:64:76:
2c:4c:de:8a:5a:35:d5:bd:a8:18:5c:93:24:81:5a:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AB:5C:08:9B:2C:03:B5:44:14:E7:E4:66:11:30:B7:E9:C2:65:6E
X509v3 Authority Key Identifier:
keyid:33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/9KtcCJssA7VEFOfkZhEwt-nCZW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.85.0/24
185.169.7.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:7b:e0:ee:ec:c8:81:3b:c7:b3:42:16:17:42:60:a8:e3:3b:
4f:ae:de:99:ee:e9:c4:d2:59:46:2f:da:c8:0f:64:67:33:0f:
d1:36:c4:46:b4:1d:0a:da:c9:7b:69:55:f0:7f:9e:9e:52:29:
95:1f:b1:85:28:de:fe:03:58:0c:86:86:18:7a:c1:41:7d:1f:
1e:d2:c3:8b:af:0e:05:d1:b2:0c:f9:7b:42:3d:bd:bd:bd:22:
86:ba:0a:be:ac:c2:cc:aa:4a:4b:4e:19:ea:e9:b5:d4:70:9f:
0b:08:e7:39:ec:b0:7e:3b:48:97:e9:6b:11:87:50:0f:c5:b6:
29:df:1c:df:42:8a:e2:34:27:91:8c:ad:fb:da:e3:e0:ff:20:
b9:10:b0:af:9f:9e:e6:3c:f3:a7:4d:bd:66:d2:31:dc:77:c1:
80:c9:f1:5a:d6:71:93:42:71:6c:67:64:2f:d8:5c:f8:06:bd:
d2:6c:2c:5f:c2:f7:51:b0:65:5b:36:5d:97:1f:8d:56:db:f6:
bb:dd:71:f7:b1:4d:d9:f6:d4:61:09:f0:6d:e3:1d:50:d2:02:
a4:0f:e1:95:f2:27:b5:58:fc:56:ec:e4:58:a2:39:12:79:e7:
e8:da:7e:ed:a9:e9:f1:c3:37:f6:ef:48:d0:56:23:77:ce:28:
aa:c9:c8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:05:39 2026 by rpki-client