Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/IDaB4QRCh7bNLOMPnckPg5zcOzM.roa
File: IDaB4QRCh7bNLOMPnckPg5zcOzM.roa (raw, json)
Hash identifier: xXBnKlpTinvrp0RhxiHrGrTuEu3qhcErapcrqhwSfb0=
Subject key identifier: 20:36:81:E1:04:42:87:B6:CD:2C:E3:0F:9D:C9:0F:83:9C:DC:3B:33
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019D90E1A4CBD3C1E6E4AA2096F713243A4F
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/IDaB4QRCh7bNLOMPnckPg5zcOzM.roa
Signing time: Wed 15 Apr 2026 11:23:20 +0000
ROA not before: Wed 15 Apr 2026 11:23:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209183
IP address blocks: 72.56.42.0/23 maxlen: 24
72.56.44.0/23 maxlen: 24
72.56.46.0/24 maxlen: 24
72.56.47.0/24 maxlen: 24
72.56.48.0/24 maxlen: 24
72.56.49.0/24 maxlen: 24
72.56.50.0/24 maxlen: 24
72.56.51.0/24 maxlen: 24
72.56.56.0/24 maxlen: 24
72.56.57.0/24 maxlen: 24
72.56.59.0/24 maxlen: 24
72.56.60.0/24 maxlen: 24
72.56.61.0/24 maxlen: 24
72.56.216.0/24 maxlen: 24
72.56.217.0/24 maxlen: 24
72.56.222.0/24 maxlen: 24
72.56.223.0/24 maxlen: 24
72.56.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:e1:a4:cb:d3:c1:e6:e4:aa:20:96:f7:13:24:3a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Apr 15 11:23:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=203681e1044287b6cd2ce30f9dc90f839cdc3b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:01:7b:6f:e9:01:b6:1e:dc:71:3a:ae:80:
0f:e2:a9:c6:c8:9c:6f:d8:40:e5:3d:8f:35:9a:ef:
f6:0c:2d:ba:75:54:55:58:eb:05:c6:23:78:59:8e:
b2:56:c1:2b:64:68:d2:f1:2f:de:f6:0a:8f:81:aa:
6c:b3:f9:57:19:c6:d6:7f:db:2a:76:43:5d:89:fe:
69:7e:22:a7:bf:cf:7c:2a:f1:b1:f1:51:6f:8c:e5:
1a:0d:e9:ad:5f:c3:4f:17:a4:33:a1:25:68:b0:29:
70:5a:75:79:da:84:ba:8c:a2:0c:59:db:d1:03:15:
41:e1:81:09:a0:25:24:c3:9f:53:20:c5:fb:8b:f7:
12:01:ff:d4:df:f8:bd:74:94:f6:b8:4a:fb:31:d0:
3d:97:0e:e4:df:db:99:87:05:23:af:2d:9c:eb:fd:
7f:f6:9b:dd:20:ec:0f:75:38:15:70:2d:5f:e4:86:
93:3a:3a:fd:b3:90:ef:fe:e8:0b:e4:07:af:5f:a2:
e9:d4:c1:d4:05:ee:93:96:1c:35:69:2b:f9:0c:47:
82:6f:56:c2:32:d3:82:88:bc:69:e4:5a:65:57:10:
3f:1b:e7:78:dd:f0:ea:6d:62:df:a3:69:e1:2f:2a:
b3:52:7c:20:c4:82:2a:bf:59:78:d9:92:f9:3b:a9:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:36:81:E1:04:42:87:B6:CD:2C:E3:0F:9D:C9:0F:83:9C:DC:3B:33
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/IDaB4QRCh7bNLOMPnckPg5zcOzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.42.0-72.56.51.255
72.56.56.0/23
72.56.59.0-72.56.61.255
72.56.216.0/23
72.56.222.0/23
72.56.254.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:a8:36:30:dc:4f:18:19:40:c5:03:46:2c:d4:a3:a8:b3:42:
1d:49:b6:9a:3a:ad:37:61:11:e7:8f:62:6b:2c:cb:1d:87:09:
cb:25:38:af:fc:73:42:c8:a2:92:4b:6f:0c:2c:4e:be:48:6e:
59:cf:84:e7:17:6e:0e:93:5d:76:15:4f:16:e1:bd:64:57:d6:
62:19:13:36:c7:d7:b4:92:08:c0:10:31:42:dc:14:17:45:df:
48:21:b0:22:18:d5:4e:99:56:4b:6d:0b:9c:18:37:cb:a4:47:
88:b2:92:fb:5e:df:ba:4c:dd:b5:6a:f0:84:48:21:9f:bf:f7:
7a:dc:e5:c1:e1:72:e4:9e:62:9c:8b:14:8d:e8:17:27:2a:ed:
fe:e0:e6:c2:d0:15:96:96:ed:60:c1:b1:9f:b2:36:3d:38:5a:
96:4d:d1:e5:c8:34:52:28:ac:2f:9a:4d:19:c5:a8:5a:7f:10:
f0:b8:9a:46:0e:26:05:9f:c1:f5:26:6c:b7:ed:ab:3f:a7:87:
b2:4e:25:06:4c:5c:a5:7b:d1:f1:e3:a0:06:da:03:60:5b:e6:
32:05:b3:fd:ba:73:2c:9d:37:0f:48:4c:44:30:ae:3c:59:b0:
86:bd:22:36:ab:5e:f1:36:3d:e6:7e:1d:d6:30:7c:da:58:ed:
15:7f:15:03
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAZ2Q4aTL08Hm5KoglvcTJDpPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0
MjVjYWQwHhcNMjYwNDE1MTEyMzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDM2ODFlMTA0NDI4N2I2Y2QyY2UzMGY5ZGM5MGY4MzljZGMzYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwgBe2/pAbYe3HE6roAP4qnGyJxv
2EDlPY81mu/2DC26dVRVWOsFxiN4WY6yVsErZGjS8S/e9gqPgapss/lXGcbWf9sq
dkNdif5pfiKnv898KvGx8VFvjOUaDemtX8NPF6QzoSVosClwWnV52oS6jKIMWdvR
AxVB4YEJoCUkw59TIMX7i/cSAf/U3/i9dJT2uEr7MdA9lw7k39uZhwUjry2c6/1/
9pvdIOwPdTgVcC1f5IaTOjr9s5Dv/ugL5AevX6Lp1MHUBe6Tlhw1aSv5DEeCb1bC
MtOCiLxp5FplVxA/G+d43fDqbWLfo2nhLyqzUnwgxIIqv1l42ZL5O6mbPQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFCA2geEEQoe2zSzjD53JD4Oc3DszMB8GA1UdIwQY
MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt
ZTg3MWIyMTc5MGRlLzEvSURhQjRRUkNoN2JOTE9NUG5ja1BnNXpjT3pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl
LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBAFIOCoD
BAJIODADBAFIODgwDAMEAEg4OwMEAUg4PAMEAUg42AMEAUg43gMEAUg4/jANBgkq
hkiG9w0BAQsFAAOCAQEAe6g2MNxPGBlAxQNGLNSjqLNCHUm2mjqtN2ER549iayzL
HYcJyyU4r/xzQsiikktvDCxOvkhuWc+E5xduDpNddhVPFuG9ZFfWYhkTNsfXtJII
wBAxQtwUF0XfSCGwIhjVTplWS20LnBg3y6RHiLKS+17fukzdtWrwhEghn7/3etzl
weFy5J5inIsUjegXJyrt/uDmwtAVlpbtYMGxn7I2PThalk3R5cg0UiisL5pNGcWo
Wn8Q8LiaRg4mBZ/B9SZst+2rP6eHsk4lBkxcpXvR8eOgBtoDYFvmMgWz/bpzLJ03
D0hMRDCuPFmwhr0iNqte8TY95n4d1jB82ljtFX8VAw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:02:56 2026 by rpki-client