Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/9FkvkvYKkpvtxRzhjS2Dl3OyIC8.roa
File: 9FkvkvYKkpvtxRzhjS2Dl3OyIC8.roa (raw, json)
Hash identifier: ++BWUNm5eh2q9n/GsxysekfFrNVNQyGEMNFnVvfJnvw=
Subject key identifier: F4:59:2F:92:F6:0A:92:9B:ED:C5:1C:E1:8D:2D:83:97:73:B2:20:2F
Certificate issuer: /CN=6a82851a137e6059a5c19e2527f39ea6cad7c4aa
Certificate serial: 019F2368D6AA990C2BD61D660D212F6E795E
Authority key identifier: 6A:82:85:1A:13:7E:60:59:A5:C1:9E:25:27:F3:9E:A6:CA:D7:C4:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/9FkvkvYKkpvtxRzhjS2Dl3OyIC8.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213098
IP address blocks: 85.209.42.0/24 maxlen: 24
185.222.20.0/24 maxlen: 24
188.72.42.0/24 maxlen: 24
188.72.43.0/24 maxlen: 24
194.34.11.0/24 maxlen: 24
195.62.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d6:aa:99:0c:2b:d6:1d:66:0d:21:2f:6e:79:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a82851a137e6059a5c19e2527f39ea6cad7c4aa
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4592f92f60a929bedc51ce18d2d839773b2202f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:50:bf:36:78:87:32:81:71:61:01:68:62:83:
61:13:b2:b5:9c:9d:50:08:b4:1c:d8:11:60:8f:2a:
71:60:25:34:bb:08:31:91:08:06:f9:3c:dc:d6:2c:
21:c0:1e:7b:50:73:05:8c:9b:dc:47:ea:fb:10:02:
d7:7c:18:e6:92:d6:1b:da:42:84:51:5b:46:88:3b:
6b:e6:12:ec:b3:85:2f:8f:7b:d0:ab:ff:9a:a3:21:
74:b8:0d:86:d2:65:e3:d0:b6:73:8a:95:da:b9:9f:
e0:87:ee:c2:b2:09:13:29:78:83:d7:96:a2:41:36:
b3:e1:f2:b0:e4:e5:8f:9c:ec:63:13:7b:ec:87:6d:
15:11:10:fa:0c:bd:53:c8:55:b3:89:83:9d:6b:0b:
6f:33:c3:35:0d:ca:ae:c6:a6:bb:2f:47:d4:d4:97:
16:51:93:7a:cb:20:e0:da:e6:3b:b9:be:71:71:03:
ce:e2:cc:5c:e4:c2:c6:89:72:ca:3a:11:a2:69:ee:
54:6b:8f:54:58:f1:ce:48:ac:2a:cb:8c:ef:79:6e:
cd:7d:f1:a1:31:21:f8:5e:f5:30:fc:d9:da:64:03:
83:2c:8d:b3:e6:b9:c8:20:03:97:64:9f:fa:12:66:
db:7a:ec:82:c0:ce:9c:0f:2e:f0:49:17:f0:65:ee:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:59:2F:92:F6:0A:92:9B:ED:C5:1C:E1:8D:2D:83:97:73:B2:20:2F
X509v3 Authority Key Identifier:
keyid:6A:82:85:1A:13:7E:60:59:A5:C1:9E:25:27:F3:9E:A6:CA:D7:C4:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/9FkvkvYKkpvtxRzhjS2Dl3OyIC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.42.0/24
185.222.20.0/24
188.72.42.0/23
194.34.11.0/24
195.62.88.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:35:2e:6a:7b:a2:7b:d5:38:43:e4:0c:c7:2d:6b:ce:1e:58:
fb:25:78:4a:fc:b5:e8:5c:af:c6:db:ed:14:59:44:36:6c:8e:
01:0e:df:21:6a:b9:96:67:3d:ae:76:74:15:8a:b9:4a:34:ae:
f1:96:1f:c3:a6:6e:82:79:44:eb:0b:f1:51:d8:b6:7f:7c:fd:
26:19:23:b9:9d:f1:57:65:fa:63:2e:15:a7:d6:0a:3c:56:12:
7d:4a:e5:8c:2a:91:a8:7f:04:18:10:0c:76:4c:3d:c6:79:09:
b3:bb:33:e9:8a:c2:e6:d7:b2:e3:df:3b:e5:24:e7:a7:99:23:
4d:19:93:63:3e:5c:2e:a8:79:97:0f:14:1a:95:2a:21:e9:92:
c6:38:60:33:af:91:ad:38:6f:56:6e:a0:71:77:23:bb:e9:0c:
58:32:dd:29:be:e1:45:8c:5f:21:49:1f:9d:4d:13:ab:b2:94:
1e:5e:79:5a:29:d1:3a:84:b1:41:62:2f:dd:29:6f:27:56:ac:
00:3a:ec:05:2f:82:16:7a:16:8b:38:71:d6:a6:8e:36:4a:b0:
8f:86:e9:2a:0e:8d:f0:a3:a5:ed:6c:87:5f:12:4e:9c:06:e2:
3e:57:39:75:d3:33:62:bf:c9:fd:a9:21:31:36:89:d3:c4:0a:
3a:9d:87:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:39 2026 by rpki-client