Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/lsF9aarhfVrWYAYvkAQqJ9HkY7E.roa
File: lsF9aarhfVrWYAYvkAQqJ9HkY7E.roa (raw, json)
Hash identifier: FCxsh7JN5PbgfVu6BkJdT2PXO8vqzwg3TmeMEKVCTFw=
Subject key identifier: 96:C1:7D:69:AA:E1:7D:5A:D6:60:06:2F:90:04:2A:27:D1:E4:63:B1
Certificate issuer: /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial: 019F360FA8C201B66926721F887257FA8561
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/lsF9aarhfVrWYAYvkAQqJ9HkY7E.roa
Signing time: Mon 06 Jul 2026 06:13:43 +0000
ROA not before: Mon 06 Jul 2026 06:13:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39216
IP address blocks: 185.21.136.0/24 maxlen: 24
185.21.137.0/24 maxlen: 24
185.21.138.0/24 maxlen: 24
185.21.139.0/24 maxlen: 24
212.126.96.0/24 maxlen: 24
212.126.97.0/24 maxlen: 24
212.126.98.0/24 maxlen: 24
212.126.101.0/24 maxlen: 24
212.126.102.0/24 maxlen: 24
212.126.103.0/24 maxlen: 24
212.126.104.0/24 maxlen: 24
212.126.105.0/24 maxlen: 24
212.126.106.0/24 maxlen: 24
212.126.107.0/24 maxlen: 24
212.126.108.0/24 maxlen: 24
212.126.109.0/24 maxlen: 24
212.126.110.0/24 maxlen: 24
212.126.111.0/24 maxlen: 24
212.126.117.0/24 maxlen: 24
212.126.118.0/24 maxlen: 24
212.126.119.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.124.0/24 maxlen: 24
212.126.125.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
212.126.127.0/24 maxlen: 24
2a04:2dc0:4::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:f::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:0f:a8:c2:01:b6:69:26:72:1f:88:72:57:fa:85:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Validity
Not Before: Jul 6 06:13:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96c17d69aae17d5ad660062f90042a27d1e463b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:51:32:65:cf:38:86:02:9a:8a:3c:d1:b0:
8c:0d:17:99:69:74:51:7a:19:80:e3:18:c2:a1:25:
15:3e:61:dd:43:8f:7c:a0:0f:de:08:29:cd:e1:7b:
33:6c:d2:be:24:e0:6d:31:f4:a0:e5:dd:6f:fa:1c:
7c:54:46:f5:7c:ce:a3:30:d8:aa:da:b0:1e:7a:0b:
cf:1d:c3:cd:a4:b1:0f:d9:b7:bd:6b:5d:84:7e:53:
e7:90:6c:23:f8:59:5e:34:33:34:d2:1f:cb:2c:ae:
3d:32:56:b7:d6:56:3b:29:ef:90:71:0e:50:a6:21:
82:bc:95:e2:1c:ee:56:49:41:8d:1a:90:61:df:29:
d2:17:d8:9c:ca:2e:d5:f8:d4:d4:00:2d:68:65:c5:
e2:fb:2a:a3:e4:1b:8a:3a:75:99:7d:3a:38:b3:3b:
58:db:7f:4b:61:f6:1c:1d:77:67:06:1d:76:6d:38:
c4:d5:49:85:a3:18:c2:a0:f7:92:6a:a0:b6:b0:0e:
0c:4a:52:bb:d9:40:45:34:80:fe:40:22:8c:50:ba:
d6:f7:f9:60:93:cf:81:9f:f0:af:92:07:63:e5:54:
94:13:4e:06:1d:19:c7:88:e3:7b:23:c4:0e:81:11:
56:8e:18:69:d0:b4:ed:f0:ae:e5:c6:2d:5d:32:6a:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C1:7D:69:AA:E1:7D:5A:D6:60:06:2F:90:04:2A:27:D1:E4:63:B1
X509v3 Authority Key Identifier:
keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/lsF9aarhfVrWYAYvkAQqJ9HkY7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.136.0/22
212.126.96.0-212.126.98.255
212.126.101.0-212.126.111.255
212.126.117.0-212.126.120.255
212.126.124.0/22
IPv6:
2a04:2dc0:4::/48
2a04:2dc0:e::/47
2a04:2dc0:19::/48
Signature Algorithm: sha256WithRSAEncryption
35:a5:1e:71:74:52:26:44:60:f7:c5:46:d9:68:d6:e2:ed:79:
e7:62:b6:f7:ef:47:8d:73:c4:08:80:98:b7:06:c6:4d:44:5e:
eb:fc:95:76:84:22:7e:d7:14:f3:0d:72:73:55:69:dd:c7:0c:
f7:73:d8:81:d8:d2:29:0e:2f:8f:c7:0c:42:52:aa:ba:aa:ae:
a9:d9:2e:f8:9f:e1:4d:ca:d7:8f:cd:26:19:97:94:f5:a4:b5:
38:15:ce:39:5d:72:64:c2:2e:04:47:89:ed:fc:09:f9:3e:90:
33:13:50:c0:fb:0c:ba:1b:d5:ef:d1:a0:f6:9b:e7:c1:f4:8c:
64:e8:7b:7c:14:a3:38:a8:cb:63:12:b4:bb:e7:d8:db:a0:de:
1f:74:f2:52:cb:e4:93:17:5a:94:a2:e4:a0:f9:46:0d:26:da:
e7:27:0c:9d:35:cd:e7:78:fc:bb:0a:1d:73:c4:63:b6:7d:06:
0f:d8:28:c1:a8:83:9a:86:ac:63:4a:60:7d:9b:3a:75:38:9b:
6f:62:80:ae:38:a4:34:42:ad:8a:2a:17:2a:ed:bd:22:ac:09:
17:d8:0c:59:52:12:93:a1:35:9e:78:71:ac:bf:bd:10:a6:e3:
62:74:0a:a8:d9:ff:72:d4:58:2e:2e:eb:ee:05:06:5e:ab:fe:
4e:8d:8e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:36 2026 by rpki-client