Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/X9un67T006ELaqSURFaytzBAj0w.roa
File: X9un67T006ELaqSURFaytzBAj0w.roa (raw, json)
Hash identifier: CEedsKKFJa9pLMcuANz+e/R9QUmcUNcd0IQVXaMuQHQ=
Subject key identifier: 5F:DB:A7:EB:B4:F4:D3:A1:0B:6A:A4:94:44:56:B2:B7:30:40:8F:4C
Certificate issuer: /CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Certificate serial: 01A0A039F346D3908C831AA34E43CE786A70
Authority key identifier: 35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/X9un67T006ELaqSURFaytzBAj0w.roa
Signing time: Mon 14 Sep 2026 14:02:27 +0000
ROA not before: Mon 14 Sep 2026 14:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206293
IP address blocks: 185.160.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:39:f3:46:d3:90:8c:83:1a:a3:4e:43:ce:78:6a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Validity
Not Before: Sep 14 14:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fdba7ebb4f4d3a10b6aa4944456b2b730408f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:61:0a:17:d0:1e:e6:9c:1a:29:39:b2:33:
d3:d0:94:96:73:79:08:00:0f:6d:cf:c3:c2:82:54:
74:02:da:7f:4c:5c:fb:be:92:0b:90:11:c3:12:75:
a9:14:f7:00:ef:c4:13:37:1d:07:75:7a:c9:a9:36:
3e:c0:b6:2a:c9:e9:e5:e0:e8:c0:18:fe:bd:1c:87:
a6:5c:5c:40:62:68:55:36:59:96:18:7a:33:29:38:
a5:11:7f:0e:98:03:54:85:aa:86:c0:2a:d9:a2:ef:
ef:0c:27:0a:22:de:c5:e8:7b:28:cf:de:8f:e8:cd:
65:24:21:60:d3:60:79:34:21:60:2b:d7:47:b2:39:
ac:07:77:00:d3:da:b2:0e:aa:ea:33:38:d5:b6:f7:
38:23:30:0a:b8:2a:63:b1:e1:18:39:18:09:07:c2:
9c:9f:62:59:4d:af:30:1e:fd:74:0f:2b:49:6b:9f:
ea:bf:87:85:4d:e8:43:da:d8:9d:4a:6b:33:23:69:
dd:b7:f7:4e:b1:c4:54:cc:8f:b6:b1:f6:c5:98:ba:
6a:b4:fe:26:b6:85:72:8e:49:86:93:a7:a1:3f:7f:
a4:03:d6:55:5d:bb:8b:c4:33:c8:76:49:f9:3c:cf:
42:52:76:1d:48:31:7e:3a:52:3e:fa:0b:75:3f:3c:
04:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DB:A7:EB:B4:F4:D3:A1:0B:6A:A4:94:44:56:B2:B7:30:40:8F:4C
X509v3 Authority Key Identifier:
keyid:35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/X9un67T006ELaqSURFaytzBAj0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.77.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ed:2c:2c:15:c4:76:72:03:bb:82:0b:15:3f:a5:87:fa:c6:
7c:6a:a5:dd:b3:18:a1:f9:24:50:9f:a5:ab:fd:59:e9:11:22:
e7:05:5a:e1:c3:7f:53:3a:2d:b5:71:cb:de:df:28:13:bb:1c:
45:01:d9:ce:bf:49:56:f0:a0:56:23:e8:25:0e:5e:30:cc:0c:
fa:68:89:71:33:f7:e7:ef:5f:11:de:21:84:5e:ae:17:ec:87:
03:a2:47:31:1c:59:bd:70:a7:99:fd:74:d2:9f:43:0d:a4:9e:
79:41:00:88:f1:ed:a1:36:06:51:3c:54:39:9f:05:b7:9f:04:
c2:da:37:2a:09:61:84:b9:61:14:c2:57:bc:9b:61:1c:6a:e5:
ff:c5:90:12:d9:6d:04:da:75:a1:ec:e8:a2:a6:ad:d3:49:7e:
97:64:68:ff:8f:61:d7:0f:08:8e:f0:c2:9c:9a:4b:69:c0:bd:
25:70:6e:d7:2c:54:5b:e7:76:fd:b9:4f:dd:c1:10:0b:76:b6:
ef:30:5b:c6:62:70:10:1e:cb:03:e3:f9:56:33:50:a8:63:79:
d1:c5:db:53:66:5e:11:85:29:ae:da:22:e9:e0:3d:0d:03:2b:
b4:94:d1:67:4f:7a:36:60:03:f6:ae:33:0f:75:dc:4f:fe:f6:
c4:ec:98:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:36:01 2026 by rpki-client