Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/9IDvg1m6FIQbcRd8cJ6Kz2ePInE.roa
File: 9IDvg1m6FIQbcRd8cJ6Kz2ePInE.roa (raw, json)
Hash identifier: u6Pgg+TL8fBUrMeamu9qvumoJ5B+GURrCIvuw0aOKdI=
Subject key identifier: F4:80:EF:83:59:BA:14:84:1B:71:17:7C:70:9E:8A:CF:67:8F:22:71
Certificate issuer: /CN=3f75e00d5738e5be2b09668d2791140eef3320a5
Certificate serial: 019F2368C17B6B1B5FB0F8D0E21FF4150449
Authority key identifier: 3F:75:E0:0D:57:38:E5:BE:2B:09:66:8D:27:91:14:0E:EF:33:20:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3XgDVc45b4rCWaNJ5EUDu8zIKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/9IDvg1m6FIQbcRd8cJ6Kz2ePInE.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 185.12.32.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3XgDVc45b4rCWaNJ5EUDu8zIKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c1:7b:6b:1b:5f:b0:f8:d0:e2:1f:f4:15:04:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f75e00d5738e5be2b09668d2791140eef3320a5
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f480ef8359ba14841b71177c709e8acf678f2271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:d3:11:72:72:98:a0:49:86:f0:1e:fd:44:
65:9d:7b:86:da:9a:b9:9d:25:a2:ad:4b:a4:a4:33:
57:a3:0f:70:fe:ec:b0:e1:4c:64:54:23:51:b9:06:
be:e5:e2:49:54:e1:fa:25:b9:dd:ce:fa:d7:08:bd:
5b:e4:23:13:59:b5:1b:54:57:27:92:3d:99:66:45:
66:6a:42:2a:0e:2c:df:04:80:c0:95:51:7a:66:e8:
f7:ce:11:41:f4:5a:88:a4:a0:04:aa:59:73:b0:56:
51:17:1a:de:72:ce:52:7a:fd:d8:40:5b:4e:fe:d8:
98:5b:fa:66:8c:de:e1:34:f5:94:fb:32:c6:78:75:
02:19:ae:3e:0f:86:d6:d1:5d:a7:0a:1e:c9:a1:d0:
6b:e3:b4:5d:fe:3d:44:91:87:10:42:96:d5:89:8d:
9a:67:ac:66:a0:05:40:44:43:1c:05:5f:08:f7:cd:
cd:ae:36:c7:03:b0:a2:03:d7:0d:c1:b7:f5:e6:9c:
40:1e:41:a7:51:4c:06:6e:2b:15:9d:74:11:8c:11:
dc:19:ac:5f:b1:c5:e1:f0:64:56:8b:e6:cb:87:1e:
90:3e:c7:d6:10:db:2d:9d:82:b4:6d:c7:29:17:b0:
39:b4:32:86:fb:6e:9c:1b:53:c3:b9:1d:d1:b7:40:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:80:EF:83:59:BA:14:84:1B:71:17:7C:70:9E:8A:CF:67:8F:22:71
X509v3 Authority Key Identifier:
keyid:3F:75:E0:0D:57:38:E5:BE:2B:09:66:8D:27:91:14:0E:EF:33:20:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3XgDVc45b4rCWaNJ5EUDu8zIKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/9IDvg1m6FIQbcRd8cJ6Kz2ePInE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.32.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:aa:e6:cf:67:2c:28:0a:f5:f4:5c:62:3e:7f:56:bc:52:b3:
dc:11:e9:9d:8b:63:f7:e6:d6:7d:b1:be:7c:4f:eb:32:97:ba:
25:6b:62:0c:61:5c:73:31:96:c0:91:a8:86:cf:8c:42:d8:01:
c4:0f:3d:e6:f2:da:1b:e5:56:ec:5a:1a:b1:cd:aa:72:02:31:
96:ca:b2:cd:76:b1:cf:32:9d:f8:0b:03:9e:d2:5a:56:dc:6e:
14:89:9d:2d:c2:c6:50:8c:f3:71:f9:33:cb:f8:80:4e:3a:2c:
2e:89:e9:b2:20:ad:e9:d7:78:5d:63:ae:a0:c6:bc:c7:37:54:
4c:f9:cb:d3:8a:d1:7c:63:56:9a:62:8f:8d:d4:20:7d:30:17:
8b:1e:18:f8:0b:48:89:6d:e2:e9:5b:d1:2e:76:b7:c6:41:cd:
7f:a8:3f:08:65:5a:cb:a9:b1:cd:90:8f:1d:45:00:d5:97:16:
e1:8d:f8:d6:32:bf:a2:90:1c:48:43:7d:1a:79:fc:79:85:21:
4f:8e:ed:33:94:f6:80:51:93:1b:e7:a4:53:2e:d5:f2:d1:8d:
35:25:8d:d5:74:d4:e3:8a:fc:06:75:54:2a:db:9f:1d:01:43:
db:37:89:57:c6:c2:c7:f6:6d:e8:4c:b4:c8:f6:c3:46:c4:9f:
f5:96:59:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:39 2026 by rpki-client