Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/9RxYfwpOllVmFbUnzc-gHoabB44.roa
File: 9RxYfwpOllVmFbUnzc-gHoabB44.roa (raw, json)
Hash identifier: /FmEDajuom+xgc2h3TGSfCVMlt4s5+O8iK3GFZc2cpQ=
Subject key identifier: F5:1C:58:7F:0A:4E:96:55:66:15:B5:27:CD:CF:A0:1E:86:9B:07:8E
Certificate issuer: /CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Certificate serial: 019F23683808DEDD58C746E627804543BE93
Authority key identifier: 9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/9RxYfwpOllVmFbUnzc-gHoabB44.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47542
IP address blocks: 95.142.204.0/23 maxlen: 23
95.142.207.0/24 maxlen: 24
2a00:bdc0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:38:08:de:dd:58:c7:46:e6:27:80:45:43:be:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f51c587f0a4e96556615b527cdcfa01e869b078e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:cf:af:90:52:c7:b8:17:e5:3d:0c:89:c3:
8e:95:99:ba:b4:dc:61:4a:c2:a3:02:00:dc:50:d1:
58:95:22:5f:e6:fe:e7:ae:eb:ec:a9:79:c6:11:bf:
0a:9d:1b:13:a7:07:0e:6f:81:7d:b8:0b:d6:fd:76:
5f:84:2e:dd:37:6b:fa:09:22:5b:9b:2a:e5:a5:f6:
7f:e7:4d:9c:4e:7a:01:42:d8:1a:de:b4:a2:84:5f:
4a:1e:0e:4c:f5:21:f2:0d:2b:50:c3:ba:4c:58:89:
95:ff:7f:c6:fc:88:ec:94:c4:b7:8d:5a:59:46:e8:
be:83:15:82:63:be:48:57:1e:9b:9c:59:db:d3:4b:
9f:7b:ef:90:60:68:8f:7d:80:54:77:f5:69:c8:33:
5e:9d:8c:33:cb:a6:d8:bc:a3:24:f1:d8:a8:52:1a:
0f:0d:c5:72:32:6d:36:f1:db:84:9e:75:9c:81:44:
34:19:10:0a:00:9c:1d:7a:38:5a:ef:a0:65:2a:6c:
45:da:ed:42:84:3e:94:13:f6:fb:7a:6c:95:51:9a:
0c:3f:24:99:7a:65:fd:1b:d3:12:b2:92:e0:95:33:
56:05:ac:87:0c:86:a2:2d:16:03:38:bc:7b:06:9e:
fc:03:2a:be:af:bb:9c:7f:c2:97:0c:10:bd:ec:91:
09:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1C:58:7F:0A:4E:96:55:66:15:B5:27:CD:CF:A0:1E:86:9B:07:8E
X509v3 Authority Key Identifier:
keyid:9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/9RxYfwpOllVmFbUnzc-gHoabB44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.204.0/23
95.142.207.0/24
IPv6:
2a00:bdc0:f000::/36
Signature Algorithm: sha256WithRSAEncryption
49:4d:8e:44:3b:4a:45:03:d9:57:53:4c:cd:44:89:93:53:2e:
8a:71:89:23:fe:a2:5e:cd:00:3b:f0:d4:82:2c:e2:e9:8c:e9:
99:d2:ec:8c:0b:87:c3:3f:9f:86:cf:43:99:dc:78:85:c2:06:
8c:ca:f8:9d:5f:ad:69:07:d6:50:63:a3:f0:52:d0:6d:3d:80:
49:e5:70:57:56:d2:99:4e:a1:70:3c:9d:cb:21:1a:ab:82:29:
db:bf:99:4b:61:9b:96:15:21:de:07:35:b2:47:ad:fb:8d:7e:
c1:c9:05:55:bb:83:03:00:0f:31:46:b5:b9:26:a2:4b:e8:0c:
b5:5f:36:33:fb:5f:8a:f9:57:0d:0b:fe:29:1a:87:7d:22:41:
d5:0e:1e:cc:65:a7:ed:ef:91:45:e8:75:52:b8:2b:57:94:83:
8d:50:4e:09:7d:14:ad:38:10:d5:cf:f0:3f:fc:fb:ef:8e:78:
e5:59:19:98:1c:b1:d1:76:29:0f:4e:36:e6:35:f4:8c:29:9d:
7f:68:8f:67:ec:f1:a1:4a:f3:09:0c:b4:a1:19:a1:2e:ef:6c:
f7:bb:f0:ee:07:42:ec:9f:16:1f:49:b7:94:9f:14:94:ad:00:
ad:e8:27:16:e5:dd:f8:13:44:54:bb:1c:28:b8:d4:fe:72:a5:
58:cc:c1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:30 2026 by rpki-client