Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1B9styCTVWsczRC1tqwyZf248ks.roa
File: 1B9styCTVWsczRC1tqwyZf248ks.roa (raw, json)
Hash identifier: 6CgG5kwZwMfOKuge4EF13e9x6MRpqtL2akqLR15ir4E=
Subject key identifier: D4:1F:6C:B7:20:93:55:6B:1C:CD:10:B5:B6:AC:32:65:FD:B8:F2:4B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0C670FA1C169F2D3E9580868E6D9AB842
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1B9styCTVWsczRC1tqwyZf248ks.roa
Signing time: Tue 22 Sep 2026 00:08:07 +0000
ROA not before: Tue 22 Sep 2026 00:08:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 77.67.32.0/24 maxlen: 24
212.189.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:70:fa:1c:16:9f:2d:3e:95:80:86:8e:6d:9a:b8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 22 00:08:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d41f6cb72093556b1ccd10b5b6ac3265fdb8f24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ef:4a:69:f3:b8:eb:ea:f2:25:94:d6:8f:31:
b6:8e:97:d2:f9:27:07:54:b4:00:01:fa:88:9f:b8:
bf:d6:dd:f5:cb:0e:5f:9e:1c:fe:de:13:4f:b6:be:
34:d7:f1:33:50:3d:1f:91:74:b9:fe:35:21:79:e9:
7e:48:aa:09:4c:13:12:e9:fb:dd:eb:64:65:52:3d:
f1:12:d4:9b:37:e0:3d:5c:a1:2b:0c:95:d5:a3:db:
dd:24:f9:88:da:87:40:05:5f:69:92:23:f7:b7:92:
38:e7:26:2a:2a:1e:d2:c2:34:3e:90:b2:ed:07:ff:
21:a3:25:35:62:b4:35:7a:96:98:62:98:08:99:e1:
d1:91:ce:7b:38:c9:b4:a1:27:1f:85:1f:b3:d5:d6:
af:5f:b6:a9:d0:8a:e9:75:66:d2:53:69:a7:56:b5:
99:e7:1e:1a:6c:37:dd:97:67:70:5a:81:9d:f5:ac:
eb:6d:99:3c:40:34:3c:11:32:93:fd:eb:bf:66:7b:
12:aa:f0:6f:ef:9b:f6:58:69:43:7c:a8:e4:7e:a2:
dc:6f:71:44:2e:9d:44:78:1d:73:2b:47:7a:ab:ab:
e0:fd:83:ad:71:43:8b:a7:a0:ac:c7:f6:eb:1c:39:
74:8f:d8:87:4f:cb:a1:13:cf:53:15:46:ea:9a:d5:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1F:6C:B7:20:93:55:6B:1C:CD:10:B5:B6:AC:32:65:FD:B8:F2:4B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1B9styCTVWsczRC1tqwyZf248ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.32.0/24
212.189.121.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:5e:73:2e:8e:15:b4:e3:be:22:0e:46:41:7a:15:14:cd:b8:
ce:03:f5:80:bb:4a:7d:26:9f:1b:81:ac:0b:26:d0:6d:31:38:
8b:78:11:ef:fc:d0:e6:a3:df:61:48:37:71:18:af:5c:cc:13:
d9:57:b2:43:8d:2f:7c:27:c6:78:e4:99:2a:2e:47:6b:61:6f:
50:87:1e:0c:28:d0:78:d1:f6:62:e9:f3:59:15:c7:f1:02:08:
0b:06:82:2a:0b:43:2c:19:51:ce:30:64:7d:43:43:6f:6a:bb:
cc:ba:01:1c:8d:ca:69:15:32:99:a0:2f:44:a0:07:96:f9:96:
f0:e9:cd:bf:ac:a0:04:0b:fe:4a:f5:23:eb:c2:23:38:7b:4d:
a0:fb:aa:d5:0e:46:e8:a0:55:84:a2:f6:1e:7a:31:55:cb:ce:
d1:7a:43:8e:da:86:8b:e0:34:4f:3a:0e:49:73:fc:39:00:98:
c8:12:88:d7:37:7f:31:57:b1:43:38:07:23:83:78:2e:85:5b:
47:02:fd:a7:62:6e:c3:f0:74:75:a8:83:c0:e8:d8:39:0e:58:
76:17:44:a5:93:cb:b7:18:2a:96:24:25:05:33:aa:47:22:7e:
eb:05:c4:22:7a:13:7f:e1:1d:8a:0d:22:af:b9:15:76:bc:7d:
eb:b6:79:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:19:14 2026 by rpki-client