Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/9b2UfpLnOIg6wXjfE2QTm6ttJNo.roa
File: 9b2UfpLnOIg6wXjfE2QTm6ttJNo.roa (raw, json)
Hash identifier: 12XtUm4bHDNcF8dyo1Lq9YsB0tLtgpBaDpNiSMD4cTU=
Subject key identifier: F5:BD:94:7E:92:E7:38:88:3A:C1:78:DF:13:64:13:9B:AB:6D:24:DA
Certificate issuer: /CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
Certificate serial: 019F8A4262846388C627870C925E29E11046
Authority key identifier: 7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/9b2UfpLnOIg6wXjfE2QTm6ttJNo.roa
Signing time: Wed 22 Jul 2026 14:37:14 +0000
ROA not before: Wed 22 Jul 2026 14:37:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62537
IP address blocks: 185.94.24.0/22 maxlen: 22
185.94.24.0/23 maxlen: 23
185.94.24.0/24 maxlen: 24
185.94.25.0/24 maxlen: 24
185.94.26.0/23 maxlen: 23
185.94.26.0/24 maxlen: 24
185.94.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:42:62:84:63:88:c6:27:87:0c:92:5e:29:e1:10:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
Validity
Not Before: Jul 22 14:37:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5bd947e92e738883ac178df1364139bab6d24da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:4d:ef:14:c8:10:6f:3c:3d:c2:31:f2:ed:
c3:1d:44:bf:3b:56:d0:be:30:a9:51:b7:e1:ba:8d:
87:47:51:cd:12:a6:dd:10:e3:10:ac:95:85:c4:15:
6e:d0:e0:8f:7a:8b:41:5f:49:45:0f:0a:1e:4b:37:
2a:14:f4:2f:7c:33:56:33:13:3b:09:92:fa:41:fb:
fe:44:27:95:3c:33:7b:b7:f7:ca:a8:fc:22:87:da:
83:f2:d5:4c:00:39:e0:17:90:a9:8c:3c:a7:f4:b0:
cf:d9:f4:d5:0f:9e:55:82:ff:1c:d2:8a:3d:75:96:
e8:ec:c1:71:57:77:5e:f1:37:d7:76:d3:cc:b7:53:
15:db:85:6a:f4:54:1b:61:26:d8:8f:19:5c:cb:86:
fa:ca:ff:49:23:4a:86:ec:ed:12:79:fc:93:80:8d:
3d:ff:75:16:f7:33:ff:60:3f:b2:80:41:d5:23:62:
5c:fd:f3:30:6d:c2:a7:b2:70:dd:73:5d:b3:3c:a7:
97:75:c8:e5:01:03:d7:7b:1d:64:ce:81:78:c0:81:
38:bd:13:a7:4f:46:85:1e:b9:7d:f3:07:ab:80:66:
61:65:ad:fe:c8:ee:02:e3:69:a8:d0:b9:b8:ef:1e:
4c:9a:a9:91:0e:71:15:0b:0a:f4:2c:b6:7f:85:54:
e3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BD:94:7E:92:E7:38:88:3A:C1:78:DF:13:64:13:9B:AB:6D:24:DA
X509v3 Authority Key Identifier:
keyid:7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/9b2UfpLnOIg6wXjfE2QTm6ttJNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.24.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:3d:d6:1a:70:d9:5d:42:60:7c:3c:c9:7a:43:23:b6:40:5e:
46:00:34:dc:bb:15:25:fe:15:8e:92:ca:ec:2a:23:aa:d4:3f:
c1:94:90:11:b2:8e:f1:d6:aa:8f:ac:1c:0a:85:27:aa:94:82:
f3:6e:ec:f1:7e:e1:d4:9c:6d:0f:f7:e8:e8:b2:7c:e5:bd:3c:
df:9c:67:dd:25:e6:8e:92:a0:75:b2:85:47:1d:a7:9f:5e:4c:
77:ad:64:ba:47:c2:5b:97:81:76:af:ec:91:93:d0:67:bf:e3:
df:2e:f5:eb:dc:90:0c:47:22:76:1c:46:11:f4:1a:b3:22:36:
c7:b4:30:42:6b:2d:ea:b1:8c:48:8b:d4:5a:35:23:89:8e:43:
9e:05:30:2c:7f:cb:fa:0b:7e:79:8b:2e:f6:27:1d:fd:6e:29:
a3:99:61:80:9c:02:3e:11:59:44:c2:41:7c:15:9f:f2:8a:77:
0f:14:8b:28:42:38:99:85:be:e2:dd:32:c5:97:b7:6e:9b:bd:
0a:67:ea:2d:ff:4a:9d:8b:f8:c3:61:ad:5a:87:b1:31:77:d0:
e5:1b:f9:98:08:67:e4:8e:af:1c:91:2b:6c:9e:51:1c:fa:a2:
37:27:02:ff:39:72:7e:5b:71:7e:65:0b:7a:c9:4c:60:cf:85:
92:0a:20:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:29 2026 by rpki-client