Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/9gJWQkxGs5Qy5W0SDW1Rj7nGQoI.roa
File: 9gJWQkxGs5Qy5W0SDW1Rj7nGQoI.roa (raw, json)
Hash identifier: 4pm0cu3JawKPkvnVafLyIQWg1jaUXk/k+2XMfkJDsyU=
Subject key identifier: F6:02:56:42:4C:46:B3:94:32:E5:6D:12:0D:6D:51:8F:B9:C6:42:82
Certificate issuer: /CN=5dd0df02ad8dcd52265dbf9c05f3819f2432dffe
Certificate serial: 019F23686E55D34332A70D0136FCA77E64B8
Authority key identifier: 5D:D0:DF:02:AD:8D:CD:52:26:5D:BF:9C:05:F3:81:9F:24:32:DF:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/9gJWQkxGs5Qy5W0SDW1Rj7nGQoI.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20546
IP address blocks: 93.191.160.0/24 maxlen: 24
93.191.161.0/24 maxlen: 24
93.191.162.0/24 maxlen: 24
93.191.163.0/24 maxlen: 24
93.191.164.0/24 maxlen: 24
93.191.165.0/24 maxlen: 24
93.191.166.0/24 maxlen: 24
93.191.167.0/24 maxlen: 24
185.192.168.0/24 maxlen: 24
185.192.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6e:55:d3:43:32:a7:0d:01:36:fc:a7:7e:64:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd0df02ad8dcd52265dbf9c05f3819f2432dffe
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f60256424c46b39432e56d120d6d518fb9c64282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:11:62:65:73:bd:62:99:c3:24:a8:fd:dc:
d9:1d:d1:94:a3:b3:fc:ca:98:9e:bf:16:1d:d4:33:
65:5d:21:b8:a9:04:1e:59:53:06:22:cd:ed:28:80:
30:d5:58:0e:00:bb:46:b7:2e:1d:f5:e8:d7:f3:e7:
a3:57:7e:58:9f:55:f9:5a:ff:3c:35:07:ca:46:67:
cd:fb:10:74:62:ee:38:4b:da:24:16:90:b6:1e:c1:
04:5c:18:8a:70:19:33:7c:71:4b:c3:49:8d:3d:60:
b6:8b:22:a2:47:d9:58:f9:ba:7f:74:8b:10:7b:b2:
4f:94:04:82:6e:3a:32:09:f2:eb:ea:53:f7:c4:af:
cf:bd:c0:c0:96:5f:b4:c9:63:3e:6b:4a:a0:26:9d:
7b:37:67:d9:20:7b:7c:aa:c9:cc:7e:96:cf:fa:92:
7f:45:72:ac:a4:1f:e0:ad:b5:49:c3:67:3c:84:ee:
07:8d:a2:66:bf:01:f0:32:83:2e:10:3a:c6:1c:22:
4c:e3:90:c8:02:5c:03:62:7c:91:d1:cb:bd:45:dd:
48:c0:4a:ab:7c:d9:d7:66:0c:6b:4e:54:e5:f4:c3:
0b:83:f1:b6:38:70:9a:cb:b3:45:0c:0c:a3:e0:b7:
16:ef:bd:03:e8:53:24:17:d7:ee:cf:00:c3:16:4d:
f3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:02:56:42:4C:46:B3:94:32:E5:6D:12:0D:6D:51:8F:B9:C6:42:82
X509v3 Authority Key Identifier:
keyid:5D:D0:DF:02:AD:8D:CD:52:26:5D:BF:9C:05:F3:81:9F:24:32:DF:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/9gJWQkxGs5Qy5W0SDW1Rj7nGQoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.160.0/21
185.192.168.0/23
Signature Algorithm: sha256WithRSAEncryption
44:32:bb:14:15:5c:96:cd:39:b4:9a:1e:5c:4d:98:86:00:84:
e3:ca:d8:1c:10:15:08:28:e4:f0:f5:b3:4f:a8:fd:e1:14:59:
16:a9:8f:8a:36:e3:0d:d7:5a:f0:ac:d9:63:67:a4:81:94:55:
e8:5e:30:f6:67:20:f3:b1:e3:72:59:11:bf:42:c4:bc:8e:f6:
ed:95:fc:9e:82:e3:67:01:4f:3d:f7:76:bb:5c:1d:2f:ff:92:
27:11:21:b3:01:21:6a:2b:86:49:d7:4c:11:d8:09:a2:cb:8c:
28:9c:b8:c2:f7:a8:ed:96:72:a0:28:c8:35:df:5c:81:8c:bc:
bf:21:ef:52:e2:84:1a:66:5a:0a:26:ae:58:55:d2:82:15:86:
f4:d4:c0:e8:22:a0:9b:10:86:22:83:eb:4f:fe:b0:76:53:d6:
09:e0:51:7c:1b:63:01:ad:6e:5f:4c:cd:70:4c:c0:9b:c0:cf:
b4:20:35:4a:cf:43:7d:db:dd:35:9a:25:56:2c:54:88:b0:99:
97:1e:65:8e:38:06:9d:4e:7e:7f:b3:bf:9f:e6:80:2e:67:e7:
78:d9:56:b4:27:2f:fc:e2:78:1a:60:e0:84:b8:1f:fa:da:3e:
a5:fa:4b:90:0b:cf:2e:ad:63:47:57:3d:0c:96:0e:6e:25:a8:
b7:f0:4c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:59:46 2026 by rpki-client