Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/B99tftJ3bxlYsGehiZLdzdd8F0o.roa
File: B99tftJ3bxlYsGehiZLdzdd8F0o.roa (raw, json)
Hash identifier: kpFT/C5y7FkGP0QbpdYmpJalSgylcnakuAFL8w1Cuvo=
Subject key identifier: 07:DF:6D:7E:D2:77:6F:19:58:B0:67:A1:89:92:DD:CD:D7:7C:17:4A
Certificate issuer: /CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
Certificate serial: 01A0D8886BFD2E4B808CA2D403789C4C4344
Authority key identifier: 94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/B99tftJ3bxlYsGehiZLdzdd8F0o.roa
Signing time: Fri 25 Sep 2026 12:26:54 +0000
ROA not before: Fri 25 Sep 2026 12:26:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36776
IP address blocks: 147.189.21.0/24 maxlen: 24
147.189.22.0/23 maxlen: 23
185.111.40.0/24 maxlen: 24
185.111.41.0/24 maxlen: 24
185.111.42.0/24 maxlen: 24
185.111.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:88:6b:fd:2e:4b:80:8c:a2:d4:03:78:9c:4c:43:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
Validity
Not Before: Sep 25 12:26:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07df6d7ed2776f1958b067a18992ddcdd77c174a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:97:a7:26:3b:09:c6:cf:80:da:e5:36:cd:
95:ef:90:76:a0:19:68:43:84:bf:44:d5:ee:36:1c:
32:39:4a:91:36:e6:a1:d5:bf:67:0e:36:39:e4:1b:
69:f5:e7:84:f6:1e:ae:fc:7c:a0:b1:c0:ab:e9:92:
fb:97:3d:4e:03:dd:b5:88:13:02:34:a8:e4:f4:36:
30:7d:fc:40:2b:fd:c7:cf:06:24:cf:7b:d1:bd:4b:
b0:73:70:f9:dd:a7:af:ad:40:e1:70:ae:a3:4e:cd:
bc:39:5d:86:43:1c:93:2a:73:15:c3:17:f2:6b:22:
3d:9a:0e:7b:62:36:54:c6:9e:63:77:1c:84:c7:ed:
20:5c:70:ac:5e:f4:34:a1:69:59:a5:05:55:4f:30:
d6:54:d1:1b:0b:11:bd:83:6f:ea:84:3c:5c:9d:3d:
b2:96:a5:8c:1e:a9:ab:14:e0:b8:a2:ef:0e:95:ce:
66:8b:14:92:4b:9b:10:e2:ef:2f:12:22:a4:ee:27:
21:bb:8a:01:8f:ce:32:f4:cb:7b:d1:5b:6f:9b:a4:
44:4e:22:2e:03:1d:68:7b:41:de:03:ab:64:93:b9:
f1:a6:39:e0:07:10:ed:d4:7f:07:b7:7f:01:63:59:
f2:f0:d9:86:a3:10:b1:94:0c:41:46:32:b5:9b:53:
b5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DF:6D:7E:D2:77:6F:19:58:B0:67:A1:89:92:DD:CD:D7:7C:17:4A
X509v3 Authority Key Identifier:
keyid:94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/B99tftJ3bxlYsGehiZLdzdd8F0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.21.0-147.189.23.255
185.111.40.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:af:63:0a:2a:fb:52:72:7a:f1:d1:2e:f1:19:16:d5:48:77:
f8:92:5f:44:07:2c:f3:93:86:4e:b2:2c:3e:8a:a8:02:73:9b:
9b:b1:23:33:74:5b:82:bd:65:9f:dd:1c:38:43:27:10:bf:b1:
35:5d:c1:da:d8:46:35:77:68:c2:65:13:22:7d:2d:71:de:56:
52:eb:21:2c:70:c5:f1:7d:88:93:b9:82:a8:4c:ab:9a:71:ce:
a1:a0:50:3e:d5:f9:99:e4:db:b0:c0:19:fc:eb:39:af:73:79:
11:b8:44:2f:91:76:87:67:6a:3e:f2:e7:fe:ae:a0:80:9e:90:
6f:4a:52:9b:fe:47:d8:f5:07:15:11:b8:58:13:64:a8:ab:4f:
21:7e:2f:34:4d:38:5b:3b:07:9d:e7:9f:8e:43:27:3a:ef:51:
6d:10:d0:fe:3c:f9:0b:2f:47:0b:51:e5:6f:ec:3a:5a:96:dd:
ff:ba:81:ba:15:0f:0f:7c:ed:f8:3b:cf:c3:16:de:9b:bd:8f:
0d:db:94:37:e4:ce:23:2d:09:d1:88:ce:b0:7e:ad:9c:6d:a5:
6e:d2:02:ac:35:af:5a:e7:04:6c:80:fb:fb:8e:ab:23:e9:60:
6f:22:64:af:0f:3d:e7:71:65:70:38:1e:83:8c:a4:f7:48:71:
50:8f:14:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:45:55 2026 by rpki-client