Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/hFSKk4IzyF4-Efez0nBa5DaBlCw.roa
File: hFSKk4IzyF4-Efez0nBa5DaBlCw.roa (raw, json)
Hash identifier: /+dt5HzgoetNaRHNPjUjcWY8nK9kYFZMD5NG+vs6XGE=
Subject key identifier: 84:54:8A:93:82:33:C8:5E:3E:11:F7:B3:D2:70:5A:E4:36:81:94:2C
Certificate issuer: /CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee
Certificate serial: 019E871F7811E99FC9F19B5CDE28749D4640
Authority key identifier: F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/hFSKk4IzyF4-Efez0nBa5DaBlCw.roa
Signing time: Tue 02 Jun 2026 06:57:26 +0000
ROA not before: Tue 02 Jun 2026 06:57:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31726
IP address blocks: 31.204.72.0/21 maxlen: 21
94.139.64.0/19 maxlen: 19
109.109.64.0/19 maxlen: 19
109.109.80.0/21 maxlen: 21
109.109.88.0/23 maxlen: 23
109.109.91.0/24 maxlen: 24
109.109.93.0/24 maxlen: 24
109.109.94.0/24 maxlen: 24
185.211.72.0/22 maxlen: 22
2a00:1680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:1f:78:11:e9:9f:c9:f1:9b:5c:de:28:74:9d:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee
Validity
Not Before: Jun 2 06:57:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84548a938233c85e3e11f7b3d2705ae43681942c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:b3:4d:48:8d:fe:6b:d6:25:e2:49:76:ac:
82:df:0e:90:03:69:87:62:d3:ed:98:b8:5c:9d:c5:
a2:26:9c:b4:46:7f:db:39:f7:90:bc:70:e1:d8:f5:
d2:02:1e:07:38:82:7c:e4:25:31:af:cd:b2:84:9b:
17:08:8d:39:39:c2:52:c6:39:e7:aa:b4:9e:33:9f:
3f:2c:3d:ac:eb:67:bb:1a:45:52:5d:d9:cb:9d:04:
a4:bb:08:c3:e9:2a:8c:58:e8:4b:d4:77:c5:2a:6b:
d9:13:36:05:4b:ee:ed:4f:2c:f9:91:3e:14:39:0e:
37:10:02:ee:5b:3c:73:66:23:a3:40:fd:07:a5:4b:
5e:fc:1f:a4:52:1b:4a:27:59:6b:c5:80:6d:68:e7:
6f:5f:1d:e8:89:53:31:f8:ac:c6:72:e2:85:eb:c6:
49:ad:6e:ca:60:9d:d4:ba:5d:d5:cc:68:b2:1d:2e:
09:97:c1:c3:a7:ad:ff:8a:5c:77:91:e0:cd:9c:b4:
49:0a:3a:a6:49:bf:4f:85:79:85:19:7e:cc:23:ba:
4e:62:5c:8d:07:8c:66:7d:fe:cc:c6:0b:d6:1b:04:
f1:6e:63:94:5b:d1:7f:36:eb:33:ac:f1:f4:92:9e:
6d:6c:cc:83:99:cb:1b:4c:cd:d3:6c:40:68:ac:a6:
7d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:54:8A:93:82:33:C8:5E:3E:11:F7:B3:D2:70:5A:E4:36:81:94:2C
X509v3 Authority Key Identifier:
keyid:F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/hFSKk4IzyF4-Efez0nBa5DaBlCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.72.0/21
94.139.64.0/19
109.109.64.0/19
185.211.72.0/22
IPv6:
2a00:1680::/32
Signature Algorithm: sha256WithRSAEncryption
40:c6:25:30:8a:65:7e:a8:46:6a:25:6c:d5:09:5f:25:c8:fc:
48:b9:4e:c9:ce:96:b6:8b:c7:f0:a1:2b:7e:c2:51:3c:11:99:
bb:f7:9c:93:28:13:23:00:e0:04:ff:db:4f:f0:07:78:40:36:
0c:c5:21:89:a4:82:86:7a:44:43:b3:01:3b:14:63:02:7c:f0:
ca:5c:6a:eb:38:b9:79:21:09:7a:65:48:d8:89:15:1d:2a:87:
b6:4b:e9:6d:3d:28:d4:f8:33:8b:c3:34:18:39:9f:58:78:45:
2e:05:60:15:9e:ec:57:de:a5:25:88:0a:1b:78:92:90:9a:0a:
a4:14:46:d5:6b:89:0f:34:92:22:3d:02:05:94:fd:87:6c:17:
1d:ea:e4:e1:fa:12:be:6e:97:21:9a:bb:e6:8a:a1:7b:ba:a4:
02:11:51:90:86:fd:9d:d2:97:c4:14:78:63:15:4b:c3:ac:1a:
6d:a4:15:59:2d:37:c3:e7:b5:6a:cd:39:e9:5c:6e:61:d5:62:
d5:ae:09:76:1e:c6:6b:7f:12:96:6a:2d:2b:42:44:0b:24:49:
ee:30:8c:21:0e:42:ee:0f:f2:7d:0c:08:47:76:e0:7b:a1:c1:
d2:f6:36:55:ca:2d:b2:1d:e8:4c:3e:3b:4e:e4:07:fb:e1:9c:
88:19:d4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:15:09 2026 by rpki-client