Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/b8Ey2sxdQs51V3gKO0vje-07bFA.roa
File: b8Ey2sxdQs51V3gKO0vje-07bFA.roa (raw, json)
Hash identifier: UZaQJQ5etJE6BwAFobLDx1zWcHyP6BbNLxrP9XGJXbY=
Subject key identifier: 6F:C1:32:DA:CC:5D:42:CE:75:57:78:0A:3B:4B:E3:7B:ED:3B:6C:50
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019E8F152DEF3807C87412B99F155F8AF4F8
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/b8Ey2sxdQs51V3gKO0vje-07bFA.roa
Signing time: Wed 03 Jun 2026 20:03:10 +0000
ROA not before: Wed 03 Jun 2026 20:03:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209183
IP address blocks: 72.56.42.0/23 maxlen: 24
72.56.44.0/23 maxlen: 24
72.56.46.0/24 maxlen: 24
72.56.47.0/24 maxlen: 24
72.56.48.0/24 maxlen: 24
72.56.49.0/24 maxlen: 24
72.56.50.0/24 maxlen: 24
72.56.51.0/24 maxlen: 24
72.56.56.0/24 maxlen: 24
72.56.57.0/24 maxlen: 24
72.56.59.0/24 maxlen: 24
72.56.60.0/24 maxlen: 24
72.56.61.0/24 maxlen: 24
72.56.216.0/24 maxlen: 24
72.56.217.0/24 maxlen: 24
72.56.222.0/24 maxlen: 24
72.56.223.0/24 maxlen: 24
72.56.225.0/24 maxlen: 24
72.56.226.0/24 maxlen: 24
72.56.227.0/24 maxlen: 24
72.56.228.0/24 maxlen: 24
72.56.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8f:15:2d:ef:38:07:c8:74:12:b9:9f:15:5f:8a:f4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Jun 3 20:03:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fc132dacc5d42ce7557780a3b4be37bed3b6c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:97:cc:00:d0:4f:b3:bb:5b:56:b0:53:13:
e2:fb:71:6e:ef:e1:e8:09:37:a8:25:8d:6f:c5:0c:
99:72:e6:1f:c8:3a:28:06:d8:68:da:1d:b2:e6:c1:
38:a7:24:18:f1:62:ab:ba:a5:d7:78:11:f6:4e:3d:
c0:2a:59:48:57:c8:19:19:db:de:cb:f1:17:f5:05:
b3:21:48:1f:6d:74:06:d5:e0:b1:a6:1e:81:64:e5:
00:44:d3:02:1e:85:95:84:2a:88:78:b0:49:da:6f:
65:e8:a0:3f:54:91:c6:92:08:e9:dd:be:50:88:59:
04:54:01:d9:d0:da:d1:46:f4:46:99:b8:ff:a6:14:
06:bd:5c:80:1a:2a:ae:e0:73:f3:ad:da:7e:b2:bd:
ab:c5:e8:bd:fd:66:a0:da:bd:9a:76:ff:87:e0:35:
f5:75:9a:c1:ad:e9:67:6a:e6:6b:e2:89:02:3b:5b:
a8:98:0f:de:fe:95:c9:63:18:3e:15:56:72:ff:aa:
d9:b2:21:3a:57:37:1d:bb:10:e1:01:fe:a6:b5:65:
ca:40:c5:97:e3:93:a1:e0:32:c4:1f:41:4b:5d:18:
c1:87:f5:71:a0:2f:2d:56:69:b7:31:fe:ca:73:db:
09:f1:1b:8c:50:5b:31:47:05:8d:87:0a:5f:51:2c:
3c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C1:32:DA:CC:5D:42:CE:75:57:78:0A:3B:4B:E3:7B:ED:3B:6C:50
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/b8Ey2sxdQs51V3gKO0vje-07bFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.42.0-72.56.51.255
72.56.56.0/23
72.56.59.0-72.56.61.255
72.56.216.0/23
72.56.222.0/23
72.56.225.0-72.56.228.255
72.56.254.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:c4:5b:0e:4f:c7:69:7b:30:77:2d:e9:6d:33:ea:3b:20:cf:
b5:14:28:77:a9:ae:45:7d:f1:01:bd:48:fa:66:45:cd:de:8e:
61:ff:dc:e2:0a:18:e4:e7:48:ba:f2:e3:c2:90:ac:34:ca:2e:
1b:e6:cd:d4:5e:7b:a9:33:56:74:bf:cf:88:a0:c4:47:3f:70:
a3:c4:a8:63:a8:0f:12:c0:63:d8:dc:10:6a:72:9f:a0:7e:0e:
85:e4:37:ce:fb:2d:e1:74:28:1d:59:47:97:ea:96:62:dd:f0:
d8:ec:a8:eb:7f:6f:a3:27:1f:92:00:e3:a8:d8:31:d2:4d:e8:
16:6b:24:29:0e:28:59:af:d3:86:db:7c:8a:6f:63:ab:e6:51:
06:23:82:df:9d:f5:e1:ca:c4:a4:90:ca:f4:b1:b2:65:42:f8:
85:ed:3c:25:fa:98:81:05:f0:34:2e:67:67:dc:2c:d0:98:5f:
94:14:11:d0:6c:37:d9:9b:75:ae:6e:cc:1c:67:c5:a5:3d:e4:
cf:be:b4:c0:79:86:94:60:7c:c8:72:ee:28:84:b6:a4:da:38:
7e:40:17:86:b7:61:b9:f3:a7:2e:8b:ad:57:53:2c:56:54:fb:
26:41:a7:31:01:e2:69:dd:91:d4:ab:e6:5e:ba:16:42:f0:27:
ee:54:fe:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:19:12 2026 by rpki-client