Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/b71WaCBrEoBR71GTCYPbcfJPVhg.roa
File: b71WaCBrEoBR71GTCYPbcfJPVhg.roa (raw, json)
Hash identifier: I7swjsGrwVkJ9xpgDe6nAUM8HnEoPs+Jfh009bMbS0k=
Subject key identifier: 6F:BD:56:68:20:6B:12:80:51:EF:51:93:09:83:DB:71:F2:4F:56:18
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0D32FB835F1A5B36B1DFDF41216709F7E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/b71WaCBrEoBR71GTCYPbcfJPVhg.roa
Signing time: Thu 24 Sep 2026 11:31:54 +0000
ROA not before: Thu 24 Sep 2026 11:31:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 9.247.66.0/24 maxlen: 24
9.247.77.0/24 maxlen: 24
9.247.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:2f:b8:35:f1:a5:b3:6b:1d:fd:f4:12:16:70:9f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 24 11:31:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fbd5668206b128051ef51930983db71f24f5618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9b:29:21:29:df:36:d6:08:2b:b7:de:96:a0:
6c:c9:e0:bc:9f:d5:4a:ce:86:23:74:7b:b8:b2:72:
c4:c9:f4:d7:21:3c:d0:1a:d4:3a:4d:cf:09:cf:04:
13:52:f9:bf:21:cf:a3:fb:39:5d:20:60:e6:be:b9:
e9:67:9a:c1:51:b4:40:98:82:77:b3:bb:f9:82:44:
18:65:e1:e4:a5:5c:cf:6d:44:0c:8b:3b:d7:ac:9a:
b8:29:4c:3f:a2:2a:b4:e8:6f:04:d6:29:e8:2a:01:
ba:d4:95:d4:af:1d:fe:74:37:3c:fb:1d:23:ae:7a:
88:7c:e8:f9:dc:f9:22:a1:a2:e0:c4:83:87:34:f3:
12:19:1a:32:b3:8e:c0:be:1b:c4:25:ce:f0:b8:52:
11:0c:a2:dd:aa:55:d4:2e:05:4e:6b:79:ac:9d:e7:
a6:97:98:0b:70:56:88:26:e9:73:c5:f7:82:dd:61:
39:20:38:b3:ee:14:c9:a6:8e:8c:3e:49:75:f6:ba:
d2:86:54:bb:47:54:33:00:35:4d:a2:68:a8:3c:4b:
1c:82:c8:53:e7:86:6b:fe:2d:1e:33:b3:db:ab:32:
1c:82:c3:6f:9b:51:84:d2:d8:63:0e:0b:9f:2e:f7:
53:ba:82:82:37:c4:26:66:b4:9c:d3:8d:b5:7f:44:
11:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BD:56:68:20:6B:12:80:51:EF:51:93:09:83:DB:71:F2:4F:56:18
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/b71WaCBrEoBR71GTCYPbcfJPVhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.66.0/24
9.247.77.0/24
9.247.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c3:29:99:10:34:db:a2:eb:e2:e6:22:ab:64:61:c1:f1:93:
18:de:b5:19:18:d3:27:39:4d:65:2e:f8:d6:79:0f:8e:aa:f4:
59:f7:bd:e0:2d:c0:88:4a:71:f9:70:e6:6e:51:b9:3b:65:cf:
a8:7a:02:8c:ef:a7:ea:18:99:2c:f6:12:11:4b:ed:8c:45:de:
39:cc:e9:5b:31:6f:f5:3d:3f:fc:5e:25:7d:55:20:33:16:08:
46:10:d9:37:4c:f0:22:d4:69:b0:81:47:72:08:07:fc:a6:58:
6d:61:03:f6:50:44:b0:d8:3f:bc:5c:b7:67:c1:a6:90:b9:2c:
22:2b:71:6f:48:e4:ca:c4:c5:7f:af:77:5a:66:3f:6e:6d:62:
de:da:b7:0d:e3:82:60:7d:04:5e:a3:4e:4f:51:3c:a7:a2:39:
07:20:fd:99:26:4d:fe:f5:bc:64:f3:fd:fe:f4:4b:d1:70:dc:
8b:93:e9:fc:87:8c:17:e5:3a:74:fa:c8:40:b3:76:c9:e4:23:
f4:bb:db:ff:10:db:5e:20:c0:3d:22:10:a1:e9:b5:59:65:2a:
61:9f:02:ff:c2:c5:24:b0:3f:e1:d8:8a:de:62:ee:fe:27:ef:
82:9d:14:85:38:c3:db:b0:d7:56:c8:0b:7e:c2:57:cb:51:8a:
72:7e:a0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:11:18 2026 by rpki-client