Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/9n0psK09UygmB2KrfEnAS_iknbI.roa
File: 9n0psK09UygmB2KrfEnAS_iknbI.roa (raw, json)
Hash identifier: Q9M/xQvwFzzg8nqu9KhBKR7u0eF7pTkUX4rTr5NfwAg=
Subject key identifier: F6:7D:29:B0:AD:3D:53:28:26:07:62:AB:7C:49:C0:4B:F8:A4:9D:B2
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 019F42320C315AD3AC86EC9013B98238737F
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/9n0psK09UygmB2KrfEnAS_iknbI.roa
Signing time: Wed 08 Jul 2026 14:46:43 +0000
ROA not before: Wed 08 Jul 2026 14:46:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57652
IP address blocks: 141.101.233.0/24 maxlen: 24
188.72.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:32:0c:31:5a:d3:ac:86:ec:90:13:b9:82:38:73:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jul 8 14:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f67d29b0ad3d5328260762ab7c49c04bf8a49db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:3b:60:98:dc:59:df:39:67:5b:1d:e3:db:
dc:fe:84:c5:95:0c:d0:cc:f4:db:64:e7:d6:16:11:
91:31:22:56:ba:51:31:83:4d:6b:4a:ee:5d:b2:d5:
19:31:1b:e7:0c:f0:6b:d6:4f:cb:8c:3f:8a:84:f1:
8f:49:ef:13:d7:82:82:0c:d4:69:4b:61:68:3a:d5:
9b:93:83:ba:2c:8a:65:b0:46:8d:55:2e:c0:a3:dc:
8d:f2:e3:22:5a:19:eb:0e:42:d7:96:67:ce:2a:91:
d1:2c:33:11:9e:98:58:bd:74:59:26:ab:19:78:6c:
8d:bf:8d:e9:b5:ff:29:e6:98:6b:d5:21:d9:ef:e2:
f7:ac:55:a4:f0:07:fb:6f:33:26:87:0b:a9:e6:3f:
7c:df:7e:c0:9e:2a:b8:99:30:f5:70:e7:54:89:98:
b9:4a:ac:d9:83:6d:7b:d4:42:63:9b:52:3d:28:99:
fe:ac:81:6e:fc:0d:ee:a5:9a:61:9c:27:27:a1:8d:
a8:eb:09:7c:ea:57:12:2a:e1:05:d5:53:e8:01:3a:
db:72:56:78:87:26:5e:04:4b:36:88:49:ce:f0:24:
a3:0d:96:5e:fe:a9:fd:0c:56:33:cd:00:c6:b7:ec:
80:64:ca:4f:3e:e4:a0:bf:94:d5:58:de:d6:09:1c:
c6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7D:29:B0:AD:3D:53:28:26:07:62:AB:7C:49:C0:4B:F8:A4:9D:B2
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/9n0psK09UygmB2KrfEnAS_iknbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.233.0/24
188.72.73.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f6:f6:c4:75:e0:ef:e3:11:d4:d4:62:31:03:9e:35:02:31:
25:39:d0:cd:86:9d:bb:59:ee:bb:c5:73:11:f3:a3:63:5f:a4:
d8:39:fc:16:0a:be:93:45:3a:5a:36:e1:f9:75:7f:c6:9d:4c:
a4:d2:74:43:4f:5a:a1:72:b2:ec:7f:f7:6f:8c:56:a8:f4:f5:
06:c9:2e:9c:b7:1c:ea:42:d4:5c:af:ba:4d:98:49:13:08:f2:
4e:f3:d0:d7:2c:45:ae:5a:45:c5:70:84:4f:9a:e9:61:58:e1:
aa:8e:d3:f3:22:ba:81:cf:8a:99:89:0f:d3:83:66:19:71:f4:
a0:af:c3:82:4b:a2:dd:e4:04:c3:63:41:56:4d:0c:0e:17:24:
13:50:39:ed:d3:b0:87:56:20:f9:db:f6:ee:30:d5:e0:77:63:
db:95:4b:cd:bb:7b:77:10:37:85:b5:3a:1c:f7:b6:3b:9d:7e:
94:f1:74:74:b0:51:63:e0:36:3f:3b:70:2c:8e:83:64:bc:9c:
f6:ee:db:9b:9d:c6:77:7e:ba:fd:a6:b8:76:75:a1:3f:98:fc:
29:a2:f8:b7:8f:47:b2:70:2d:5a:bb:fe:76:1c:f5:51:21:31:
5f:e3:20:fa:78:bd:90:e1:d4:c8:ab:85:dd:31:26:b7:e2:5a:
2f:4d:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:30 2026 by rpki-client