Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/H27MD2CieLZp0Gd96y24V6eN1uk.roa
File: H27MD2CieLZp0Gd96y24V6eN1uk.roa (raw, json)
Hash identifier: v0jt11oYg3Kn2bNdyfMBSWovTVFN50C6d1JZmMFdqoQ=
Subject key identifier: 1F:6E:CC:0F:60:A2:78:B6:69:D0:67:7D:EB:2D:B8:57:A7:8D:D6:E9
Certificate issuer: /CN=9ebb16bc5cfb9ebec342d85a46aa2dcec7599c74
Certificate serial: 019F2368A151954AEE1CD3A2EADB2345D301
Authority key identifier: 9E:BB:16:BC:5C:FB:9E:BE:C3:42:D8:5A:46:AA:2D:CE:C7:59:9C:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/H27MD2CieLZp0Gd96y24V6eN1uk.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29024
IP address blocks: 91.189.40.0/21 maxlen: 21
185.3.48.0/22 maxlen: 22
185.187.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a1:51:95:4a:ee:1c:d3:a2:ea:db:23:45:d3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebb16bc5cfb9ebec342d85a46aa2dcec7599c74
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f6ecc0f60a278b669d0677deb2db857a78dd6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:ec:c8:56:fe:ab:e7:5a:2a:bc:f5:f4:22:
d2:72:4f:23:e6:d0:a3:04:82:a7:0a:66:f6:c9:72:
35:59:7e:8f:2e:d9:80:7b:5b:7c:50:dd:4a:91:05:
bf:b6:d4:96:2b:af:60:d4:19:71:a9:33:b7:ad:8c:
8c:23:23:be:57:ed:40:a4:38:b2:56:21:a9:a4:2a:
dc:03:7b:f8:90:3b:d6:cd:82:9d:5f:2d:73:2a:29:
ec:c2:84:16:92:4a:ec:29:a3:f7:57:a5:1a:29:a7:
67:89:5e:4b:71:0b:21:cb:1e:02:8c:49:6e:dc:81:
fa:84:38:dc:07:8c:3e:f1:5f:a4:24:58:ee:07:35:
be:e2:a1:c6:d7:fb:25:f8:62:c4:f7:fb:06:69:bc:
2e:fa:e6:9b:8a:95:ec:5c:97:35:6d:0d:1e:66:8d:
d1:cd:72:23:ae:58:35:d3:1b:f6:f2:3c:2e:b5:1b:
1b:28:13:3b:3f:8f:7c:2a:da:37:e7:5f:c4:92:eb:
53:76:61:85:97:69:46:ec:85:0a:b2:b7:cd:b4:2c:
62:05:ba:e4:76:50:2e:03:65:65:fe:88:d1:1e:0d:
f3:ca:c6:fb:48:d5:29:76:18:5d:d2:a6:9e:b3:10:
ff:b5:29:6e:27:15:17:8b:f9:c8:dd:48:08:1c:fb:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6E:CC:0F:60:A2:78:B6:69:D0:67:7D:EB:2D:B8:57:A7:8D:D6:E9
X509v3 Authority Key Identifier:
keyid:9E:BB:16:BC:5C:FB:9E:BE:C3:42:D8:5A:46:AA:2D:CE:C7:59:9C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/H27MD2CieLZp0Gd96y24V6eN1uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.40.0/21
185.3.48.0/22
185.187.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:13:3c:43:80:4f:cb:29:37:06:55:63:53:c6:53:2f:37:91:
26:6a:8e:2a:c4:35:87:15:7d:f3:93:2d:dc:2c:d5:21:06:8d:
53:84:d6:70:5e:cd:da:77:be:65:82:b2:de:a8:57:fe:d7:0a:
7d:6d:ae:77:42:32:e6:5f:5c:f5:00:53:d0:24:d4:40:2c:8a:
af:14:52:8e:18:04:be:54:6c:34:ed:83:e3:76:dd:91:d8:60:
18:c0:94:9e:55:11:b6:94:f6:3b:85:ef:53:80:9d:d9:3b:8d:
06:f0:d8:89:9a:5d:34:53:7a:70:be:2f:7a:19:93:af:ae:48:
60:08:e9:09:98:e0:62:52:9f:31:d0:0e:e6:a3:48:c5:5d:56:
05:43:1c:23:3e:58:2d:ed:4d:4a:c4:73:0f:e3:7b:4f:c9:3d:
fd:19:bf:c5:10:b5:4d:8d:c1:80:5e:84:20:c9:f9:f0:65:32:
78:92:19:21:a3:a5:fe:ee:df:5a:ac:bb:c4:4e:c5:95:cd:d9:
a2:1b:b9:23:1c:18:a5:df:99:22:ed:f6:73:6c:80:99:f6:9b:
5f:65:7f:e8:da:04:33:cd:38:0f:c3:1a:f8:b2:17:be:af:3a:
bb:9e:1b:0a:97:3e:31:67:aa:a5:65:4c:33:b9:8e:41:28:cf:
77:6f:3e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:19:51 2026 by rpki-client