Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/1q_wYD9UWOnoJzVrOoUZdi0ptKs.roa
File: 1q_wYD9UWOnoJzVrOoUZdi0ptKs.roa (raw, json)
Hash identifier: VrKJCQshMNsRpRS3xMtIqZM3UIX0Rv/9TMlKh43+0eE=
Subject key identifier: D6:AF:F0:60:3F:54:58:E9:E8:27:35:6B:3A:85:19:76:2D:29:B4:AB
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019F23690E4C8F40B1A5270162F594791A64
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/1q_wYD9UWOnoJzVrOoUZdi0ptKs.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200059
IP address blocks: 109.235.0.0/21 maxlen: 32
185.40.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0e:4c:8f:40:b1:a5:27:01:62:f5:94:79:1a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6aff0603f5458e9e827356b3a8519762d29b4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8e:03:35:c5:2f:8d:5b:c7:3a:7e:72:81:4e:
d1:44:7f:47:8c:0f:1d:f7:3c:40:05:4d:4f:d6:eb:
6b:a5:58:a3:1d:69:ed:05:84:26:63:21:8a:7e:17:
c6:e5:37:6a:a2:50:0c:02:bf:be:77:3e:74:0f:9b:
2d:b4:96:19:ea:5d:b0:b4:13:c0:33:be:8f:5d:27:
ca:57:ad:9a:7d:4d:4d:98:fc:f0:4f:f5:45:d4:84:
50:bb:d7:23:c1:63:c2:67:99:4b:26:85:27:48:61:
10:1f:e9:8b:f2:19:c4:0d:d3:ec:4b:b7:e3:8b:63:
70:d9:46:c6:4e:62:18:12:12:6d:ba:ac:38:8e:25:
b9:a3:c6:5f:19:8d:cc:4d:61:f7:9d:4c:b0:59:eb:
df:de:91:49:d2:49:1f:ec:0d:40:15:cf:1d:89:06:
0e:a9:7f:85:5f:7f:53:a2:dc:d7:75:3f:1c:92:14:
ec:ed:b4:39:fc:ff:6b:0f:5f:22:ea:67:43:e2:0d:
3a:92:6b:e6:16:7d:17:2a:ec:f7:4b:8c:2a:fd:d6:
a6:2b:ca:7d:74:5c:14:8b:52:66:35:40:fe:8d:8b:
21:ae:f3:10:08:ee:5a:03:8f:ed:9c:a8:29:ca:a3:
a1:33:21:eb:b0:63:39:25:57:c6:24:da:39:50:5b:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AF:F0:60:3F:54:58:E9:E8:27:35:6B:3A:85:19:76:2D:29:B4:AB
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/1q_wYD9UWOnoJzVrOoUZdi0ptKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.0.0/21
185.40.80.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:5d:3a:2c:dd:17:44:c1:87:75:80:04:88:5a:58:f9:86:43:
bf:ff:97:9c:3b:c0:f7:43:3b:e5:87:64:78:b1:a9:60:91:c8:
bd:29:8f:80:61:83:8a:7e:03:96:64:95:99:b8:b1:52:b9:30:
cd:f0:ad:31:f5:38:a1:2a:f1:99:95:74:dc:8a:c6:bd:cd:71:
31:dd:ec:d4:c9:0c:10:f4:78:22:a0:27:50:d3:19:9b:af:e9:
15:3e:b4:1f:2d:e5:53:d5:4a:68:90:51:1d:2e:0e:12:b1:fc:
24:ba:35:83:eb:d8:fa:d5:ac:fd:a6:83:c2:8d:db:fd:0f:ea:
48:5f:0d:49:a9:b6:c1:24:4a:e7:ad:ff:e2:7c:5a:ab:da:07:
97:49:79:22:0e:eb:b6:44:94:c8:88:dc:cd:e7:89:0c:c7:cc:
36:0a:ca:3a:6c:9b:ca:f1:06:8d:4a:d9:33:56:55:08:f6:4c:
4e:5d:44:74:78:9f:dc:bc:66:e2:b5:78:e2:e6:6d:f1:e0:bd:
6e:ec:7a:ce:8d:c6:53:cb:c5:fc:b7:69:0d:19:b3:4f:d5:2f:
ae:14:83:78:3a:05:da:77:46:ce:94:d0:0c:1b:26:7c:10:8a:
18:08:1f:b2:9f:ef:99:a4:8c:2d:a5:4a:e1:ba:d3:b3:83:d2:
1b:63:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:58 2026 by rpki-client