Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9hIzkPMKVMZqPQyJBZJXSUZXEso.roa
File: 9hIzkPMKVMZqPQyJBZJXSUZXEso.roa (raw, json)
Hash identifier: FJanDMMOIGuBWTADiDDREZeLNjMCXWZ/ndv4C/H3UtY=
Subject key identifier: F6:12:33:90:F3:0A:54:C6:6A:3D:0C:89:05:92:57:49:46:57:12:CA
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1CED5E43EB6F4547D090492ED8786BB8A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9hIzkPMKVMZqPQyJBZJXSUZXEso.roa
Signing time: Thu 12 Nov 2026 08:18:06 +0000
ROA not before: Thu 12 Nov 2026 08:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20055
IP address blocks: 217.207.32.0/19 maxlen: 19
217.207.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:d5:e4:3e:b6:f4:54:7d:09:04:92:ed:87:86:bb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Nov 12 08:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6123390f30a54c66a3d0c8905925749465712ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dd:5e:41:04:07:ec:02:bf:ad:0b:89:88:da:
6c:1d:50:5d:4b:46:7e:df:06:e1:c3:16:48:c1:d4:
d9:79:fd:81:2a:6f:d5:14:fc:a1:e2:3f:73:51:33:
42:c5:95:c9:ab:46:2e:a4:88:da:89:b1:31:ba:6d:
e7:53:f2:46:1e:0e:98:d7:25:1a:64:48:4f:c1:4a:
db:52:3e:17:18:a0:ed:dd:dd:c7:dd:76:95:33:04:
5a:a3:9d:9b:53:e0:53:54:12:08:94:a1:9a:9b:e2:
6c:fd:d9:2a:4e:97:02:34:e4:56:e1:3d:7d:32:79:
2c:a5:cf:a4:f3:34:b1:06:f6:aa:6e:99:80:ee:b4:
e2:3a:4d:2a:56:8e:2a:a5:46:75:20:48:8b:5f:b1:
ae:a3:23:8e:d2:9a:75:da:99:cc:ca:3e:ae:9d:07:
9f:a9:1d:61:78:6b:d4:f7:e2:cf:3c:78:39:ae:3e:
8a:4a:2e:08:86:fc:6a:8e:a0:23:31:b9:ec:bc:1b:
e9:e9:6f:71:c9:df:a8:1f:77:55:f8:72:fd:40:89:
95:fe:e3:d2:11:65:a5:84:0f:51:1f:bc:80:41:a3:
c4:e7:39:e0:39:9e:13:72:e2:c9:12:b6:88:82:50:
d4:a7:60:bd:f0:be:9a:85:28:8f:bd:17:e1:d9:62:
69:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:12:33:90:F3:0A:54:C6:6A:3D:0C:89:05:92:57:49:46:57:12:CA
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9hIzkPMKVMZqPQyJBZJXSUZXEso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.207.32.0/19
217.207.224.0/19
Signature Algorithm: sha256WithRSAEncryption
19:63:4e:16:89:05:e1:09:d9:dd:16:df:4b:6c:99:f7:62:35:
c4:00:0d:f2:4b:6d:0a:4f:d4:bc:f8:ae:5b:a5:37:65:3b:af:
e4:b5:c5:de:f9:43:92:d6:51:bb:3f:b5:5b:bb:5e:2e:5c:ba:
2d:88:11:62:16:66:2f:1b:1f:fb:0d:e9:32:a0:fc:a8:74:36:
c0:95:a1:b0:8f:9e:89:ec:df:41:c4:c2:e7:e4:fd:df:2d:df:
14:c3:68:11:38:cc:a7:0f:99:bf:78:28:b0:d4:5b:f5:38:1f:
19:f6:4e:fe:9e:80:26:f5:ce:b2:a2:ae:e8:a3:db:e7:cc:90:
fe:84:91:7f:e0:53:96:45:af:2f:b8:0b:86:27:91:d8:c5:34:
db:98:c8:bd:33:f1:37:ed:08:42:4b:2f:6a:aa:6f:33:dd:d5:
28:13:d4:29:ac:f4:ee:cd:64:22:4a:b7:48:d8:38:31:80:89:
9f:1b:9e:47:a4:e8:df:99:0c:69:31:86:80:59:15:39:d5:89:
e7:ef:e1:28:63:8b:83:06:51:a9:4a:93:ca:5b:bb:8a:c9:83:
79:e9:2c:96:ec:4a:94:bb:d1:97:f4:aa:54:df:62:55:9f:ce:
46:0c:78:7c:e5:ea:a2:a1:c4:f0:d3:c8:3e:20:a7:97:8b:05:
6d:0f:dc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:06:11 2026 by rpki-client