Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/prn9SQ63UnoV3Ur4hqGqpgnszAw.roa
File: prn9SQ63UnoV3Ur4hqGqpgnszAw.roa (raw, json)
Hash identifier: pMdjHhBLBov7mJEoNsEbWNJt650Wj8ybDRhuyUulgyw=
Subject key identifier: A6:B9:FD:49:0E:B7:52:7A:15:DD:4A:F8:86:A1:AA:A6:09:EC:CC:0C
Certificate issuer: /CN=f25dbd1e38f3a7444d75252cdc5aa0ffd49bbb92
Certificate serial: 019F23688A9E39FECAE8ED8951BB23C2B8E8
Authority key identifier: F2:5D:BD:1E:38:F3:A7:44:4D:75:25:2C:DC:5A:A0:FF:D4:9B:BB:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/prn9SQ63UnoV3Ur4hqGqpgnszAw.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3064
IP address blocks: 84.40.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8a:9e:39:fe:ca:e8:ed:89:51:bb:23:c2:b8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25dbd1e38f3a7444d75252cdc5aa0ffd49bbb92
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6b9fd490eb7527a15dd4af886a1aaa609eccc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:90:4a:0e:43:d4:97:75:65:49:62:a7:91:
b4:90:97:99:f6:55:04:26:d1:a1:d3:6a:56:d8:60:
29:3a:e1:01:0b:ef:33:22:99:9a:18:53:43:e4:19:
1c:96:c0:db:fc:4b:13:ed:d5:a1:df:92:26:fc:cf:
67:c0:10:12:3c:4c:39:fd:b0:f0:f9:73:d9:24:e9:
ce:d5:2d:75:60:f8:3e:31:b1:aa:be:5d:89:1a:a5:
17:bd:42:3c:f3:2a:cd:f9:35:6d:ea:c2:db:ed:93:
d4:ae:7c:8f:63:ee:ad:d3:0c:c4:27:26:8d:1c:0b:
5f:f2:22:dd:f3:43:23:0a:67:c0:17:31:25:d3:f7:
ab:7c:09:ca:c4:96:38:2e:09:0a:0c:a4:99:ef:30:
c0:51:64:2e:21:3c:4f:de:2c:10:3d:0d:0a:cc:04:
13:26:68:00:bf:a8:d0:3c:32:e0:70:07:a5:e4:cb:
42:41:19:d0:dc:91:02:c2:34:ab:1c:b7:0e:69:34:
61:4e:34:ae:49:81:b3:6d:25:2a:a7:e5:82:51:2d:
69:5a:a3:46:00:62:ab:90:64:8d:13:fa:ab:29:2a:
49:84:dc:f8:0b:bd:3a:2f:4a:da:7c:df:f1:50:12:
bf:5d:93:0c:53:91:63:05:2a:d3:df:cf:f1:82:a2:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B9:FD:49:0E:B7:52:7A:15:DD:4A:F8:86:A1:AA:A6:09:EC:CC:0C
X509v3 Authority Key Identifier:
keyid:F2:5D:BD:1E:38:F3:A7:44:4D:75:25:2C:DC:5A:A0:FF:D4:9B:BB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/prn9SQ63UnoV3Ur4hqGqpgnszAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.40.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:db:00:7b:ae:aa:9f:84:08:43:cd:3a:af:03:cd:f6:fe:b8:
02:ce:83:3a:36:c9:6c:df:46:33:6a:c1:d8:61:18:ba:a9:a2:
47:40:7b:59:7c:89:93:64:3e:8c:bf:b6:dc:a1:e0:3a:a2:03:
08:9f:4a:f6:07:78:bb:3a:f7:d1:31:25:22:cf:38:e8:9b:8b:
4d:43:e1:bf:3c:3e:78:e2:4b:93:08:1a:35:40:43:f9:d6:31:
ed:ee:31:3d:75:e8:ee:08:a8:db:57:18:b8:f2:cf:28:3e:ee:
2e:89:a2:42:d3:f6:72:c9:5b:d8:19:4e:53:83:06:d9:99:cc:
d8:f7:c0:fc:9e:37:46:ff:f4:63:20:74:6a:6b:a0:6a:15:b4:
af:95:c0:81:47:91:b8:85:17:82:c6:a4:92:15:16:c5:32:03:
a7:1e:16:53:b5:82:09:89:fa:7f:3d:80:2f:60:08:79:9f:93:
79:38:6c:68:1a:1f:2d:89:d1:d7:f2:d2:13:a8:dc:fe:06:5d:
15:d3:af:31:44:fe:22:5b:cf:6e:22:91:d5:df:31:12:f2:19:
90:3b:fd:27:5d:ad:b5:d9:74:cf:ee:75:28:49:b0:50:c8:97:
e5:0a:e5:c9:da:3c:c4:76:1b:55:70:a1:a0:e9:5a:a0:f2:99:
3b:b1:d2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:37 2026 by rpki-client