Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/9HGumSD1_x0A6GFVRII72Mk6IQc.roa
File: 9HGumSD1_x0A6GFVRII72Mk6IQc.roa (raw, json)
Hash identifier: zDHN7zsd4cT6UcilDHH746D5aWLTR5g48sc3Tz1lwGs=
Subject key identifier: F4:71:AE:99:20:F5:FF:1D:00:E8:61:55:44:82:3B:D8:C9:3A:21:07
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 019F6A3D3F59CFBE283D30515C94B7FDB03D
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/9HGumSD1_x0A6GFVRII72Mk6IQc.roa
Signing time: Thu 16 Jul 2026 09:23:46 +0000
ROA not before: Thu 16 Jul 2026 09:23:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42369
IP address blocks: 91.250.253.0/24 maxlen: 24
94.176.160.0/23 maxlen: 23
94.176.160.0/24 maxlen: 24
94.176.161.0/24 maxlen: 24
185.235.147.0/24 maxlen: 24
188.240.51.0/24 maxlen: 24
194.33.191.0/24 maxlen: 24
195.8.46.0/24 maxlen: 24
2a10:8b40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:3d:3f:59:cf:be:28:3d:30:51:5c:94:b7:fd:b0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Jul 16 09:23:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f471ae9920f5ff1d00e8615544823bd8c93a2107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:39:97:3d:3e:fb:5d:58:61:33:b7:e5:41:
b2:26:e1:1f:15:7f:d5:58:7c:33:ee:18:ae:20:a1:
16:81:ad:e8:4f:85:4c:9d:03:1a:e6:74:a8:7c:42:
de:ef:dd:01:8b:0c:53:7c:00:fa:c3:c8:12:39:77:
40:af:6b:5f:e1:15:28:79:46:c7:ce:20:07:f9:b0:
45:9b:ba:a9:94:46:9e:81:7f:c4:76:c3:0f:f0:5c:
a9:91:37:2a:0e:a8:f0:33:90:43:22:b5:1a:a7:7d:
3e:26:31:51:3c:bd:0f:e3:fc:ef:1e:40:50:74:dd:
3a:32:52:a4:a3:b7:50:e5:b7:3c:45:d2:7b:a7:1d:
d7:66:eb:9f:40:2d:ae:12:45:f2:6d:21:00:7c:a7:
08:9a:af:88:04:f1:03:f3:b5:7d:a0:2c:1a:d8:58:
9c:6e:a5:fc:e2:1d:18:27:8b:21:d8:a6:80:cf:15:
cc:e3:17:5e:5d:b9:66:d1:c0:84:31:bf:e6:ef:05:
06:13:13:13:c1:c2:fc:f7:17:50:59:cd:c0:18:50:
e8:c1:7a:f7:5c:99:8a:3c:cc:42:d8:19:5f:2e:d9:
56:92:9a:c2:20:ef:45:ea:14:c0:4e:05:50:f8:98:
b5:88:d6:7b:41:39:65:a0:36:81:6f:55:25:a0:95:
81:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:71:AE:99:20:F5:FF:1D:00:E8:61:55:44:82:3B:D8:C9:3A:21:07
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/9HGumSD1_x0A6GFVRII72Mk6IQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.250.253.0/24
94.176.160.0/23
185.235.147.0/24
188.240.51.0/24
194.33.191.0/24
195.8.46.0/24
IPv6:
2a10:8b40::/32
Signature Algorithm: sha256WithRSAEncryption
3e:5a:0a:d7:2a:89:be:33:c5:61:a8:b5:3d:36:6b:f5:7d:05:
b3:a2:f1:6f:ac:8b:45:f9:7c:1c:1f:0e:1c:a4:ab:63:d4:9d:
d8:12:69:08:2a:8c:60:c7:ef:57:a3:27:59:26:d7:86:09:24:
f1:18:fa:64:80:60:9a:ac:11:59:05:50:93:d8:d7:70:3f:3b:
29:8c:b1:7e:dc:0b:1c:61:3f:09:3a:79:ca:a3:20:d0:94:39:
b9:94:40:e7:53:b1:75:03:86:f6:9a:1e:7c:47:ef:9f:59:43:
7f:d9:72:91:a9:9b:68:2e:09:76:ff:44:d3:c2:44:37:79:82:
ec:7c:11:a8:7b:52:c0:af:67:d3:ed:59:d5:23:58:4a:92:08:
c5:5a:ee:cf:39:80:90:78:f8:fe:76:dd:98:33:03:14:10:63:
ea:f6:0f:4d:4f:02:10:cd:a1:d0:5d:9c:4d:ec:8c:ca:62:61:
ad:38:6b:ae:ac:66:d3:7a:a5:67:63:84:b4:42:79:3a:b5:38:
93:f3:28:d3:ac:ee:cc:ee:58:0a:34:a6:7e:a2:e1:2c:2f:0d:
4c:de:00:17:39:b4:a2:c9:1a:b8:9b:4e:30:64:37:72:a1:29:
a2:d8:82:fe:8e:6d:a6:61:7b:38:bf:ee:e3:a2:ac:ef:78:21:
1f:6a:2b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:12 2026 by rpki-client