Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/sc2FhAecUe53TLCvtBXPAlXJXIM.roa
File: sc2FhAecUe53TLCvtBXPAlXJXIM.roa (raw, json)
Hash identifier: E7Uzf+BTtrQ4zwZ86xm4BEd5CWBMA2VIf5T230VCzkk=
Subject key identifier: B1:CD:85:84:07:9C:51:EE:77:4C:B0:AF:B4:15:CF:02:55:C9:5C:83
Certificate issuer: /CN=9ebb16bc5cfb9ebec342d85a46aa2dcec7599c74
Certificate serial: 019F2368A24F62A6A0F106EABCF05A7120CD
Authority key identifier: 9E:BB:16:BC:5C:FB:9E:BE:C3:42:D8:5A:46:AA:2D:CE:C7:59:9C:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/sc2FhAecUe53TLCvtBXPAlXJXIM.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61207
IP address blocks: 87.237.208.0/21 maxlen: 21
89.221.240.0/23 maxlen: 23
89.221.243.0/24 maxlen: 24
89.221.247.0/24 maxlen: 24
89.221.248.0/21 maxlen: 21
185.15.120.0/22 maxlen: 22
185.215.196.0/22 maxlen: 22
185.215.196.0/24 maxlen: 24
195.35.82.0/23 maxlen: 23
2a02:fc00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a2:4f:62:a6:a0:f1:06:ea:bc:f0:5a:71:20:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebb16bc5cfb9ebec342d85a46aa2dcec7599c74
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1cd8584079c51ee774cb0afb415cf0255c95c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:e7:cf:a2:22:d0:91:92:eb:28:24:44:2d:
33:cc:95:fa:fe:ca:04:2d:51:12:7e:e4:5d:ad:02:
ba:39:31:cc:a1:f3:52:6c:88:dc:b7:f3:97:b4:94:
cf:59:60:63:b3:80:b9:21:2b:26:6e:0b:0e:47:f2:
9c:79:fa:f1:4b:42:b2:dc:da:c3:63:39:76:05:78:
6e:4d:ee:de:1d:fb:90:8c:f9:bd:0c:55:05:2c:a3:
62:d1:5f:7b:da:7c:b6:70:79:63:2b:1b:bb:68:72:
19:86:59:39:01:95:70:fa:15:64:55:a9:89:f9:b1:
f7:2c:eb:54:8f:a5:72:d8:c4:f1:f7:65:94:b6:3e:
f5:00:c5:da:be:00:54:a5:cf:77:19:38:be:69:49:
3b:b5:0b:30:28:bb:83:ee:43:f3:ca:7a:2d:0b:ad:
6c:70:be:50:47:e1:ec:fe:59:d6:bf:dc:db:07:f7:
3b:10:d4:48:b9:4e:58:54:ea:b9:5b:bf:1a:0a:3a:
94:d5:f6:9f:61:8b:93:7e:a7:71:52:d2:83:19:f2:
0a:50:9b:3c:3d:ec:f0:40:7e:06:74:54:0c:53:34:
5b:84:05:44:97:1c:9d:5b:03:36:ab:1c:08:95:ba:
e9:ee:77:21:71:be:2c:34:1f:f8:a5:f3:82:51:c5:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CD:85:84:07:9C:51:EE:77:4C:B0:AF:B4:15:CF:02:55:C9:5C:83
X509v3 Authority Key Identifier:
keyid:9E:BB:16:BC:5C:FB:9E:BE:C3:42:D8:5A:46:AA:2D:CE:C7:59:9C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/sc2FhAecUe53TLCvtBXPAlXJXIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.208.0/21
89.221.240.0/23
89.221.243.0/24
89.221.247.0-89.221.255.255
185.15.120.0/22
185.215.196.0/22
195.35.82.0/23
IPv6:
2a02:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
5d:2e:dc:90:d1:a0:21:c9:18:e5:0a:5c:50:39:44:ee:f3:6d:
5d:99:b4:30:72:39:12:11:55:9d:64:68:0a:20:eb:6d:e7:8f:
43:51:b9:03:ea:c8:23:b4:1f:89:67:28:75:9f:ce:52:58:08:
f8:61:ad:31:9f:ec:34:9d:03:71:17:5b:00:10:29:34:92:b0:
b1:ea:9f:db:9c:10:c9:67:91:2b:89:9c:f3:f4:19:aa:9a:38:
00:2f:bd:c0:ba:e7:a6:ff:63:ff:36:6e:f1:7d:d4:a4:40:64:
6e:19:be:55:59:1a:1f:57:d2:cd:a7:94:50:a9:01:71:b0:80:
a3:eb:4f:cd:57:0f:9c:8c:3e:98:7e:ab:b3:bc:86:5b:1a:9c:
5a:9e:ba:cd:ff:3f:ac:a0:46:7e:e2:1f:c5:a9:26:d9:5c:6f:
29:93:39:6c:d6:92:8e:02:29:6f:7d:ec:f1:e5:a6:22:48:dc:
fe:cd:b9:f3:23:bb:8f:a8:95:90:5f:a2:83:a8:61:70:37:8c:
18:40:04:e4:34:f7:9c:97:ab:1a:18:7d:9f:6d:38:a1:f7:79:
a3:92:8c:ce:12:fe:52:58:a2:66:42:31:5c:6e:e8:ae:52:de:
a7:46:f7:f7:e3:7b:b6:01:6d:ee:a8:c7:a9:8b:49:b3:d1:82:
2c:7e:3f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:05:46 2026 by rpki-client