Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/9IfYzAasqfz7Wz66ExTxBJ2sQ6Q.roa
File: 9IfYzAasqfz7Wz66ExTxBJ2sQ6Q.roa (raw, json)
Hash identifier: YJWL8DLQPhj/nDX+QYjr1+pXanbWsVZjAovQ36i7A/U=
Subject key identifier: F4:87:D8:CC:06:AC:A9:FC:FB:5B:3E:BA:13:14:F1:04:9D:AC:43:A4
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 01A080C1820CDED8B1750FC1971FE267596C
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/9IfYzAasqfz7Wz66ExTxBJ2sQ6Q.roa
Signing time: Tue 08 Sep 2026 11:22:40 +0000
ROA not before: Tue 08 Sep 2026 11:22:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33951
IP address blocks: 91.193.96.0/22 maxlen: 22
95.175.0.0/19 maxlen: 24
95.175.0.0/24 maxlen: 24
95.175.1.0/24 maxlen: 24
95.175.2.0/24 maxlen: 24
95.175.3.0/24 maxlen: 24
95.175.4.0/24 maxlen: 24
95.175.5.0/24 maxlen: 24
95.175.6.0/24 maxlen: 24
95.175.7.0/24 maxlen: 24
95.175.8.0/24 maxlen: 24
95.175.9.0/24 maxlen: 24
95.175.10.0/24 maxlen: 24
95.175.11.0/24 maxlen: 24
95.175.12.0/24 maxlen: 24
95.175.13.0/24 maxlen: 24
95.175.14.0/24 maxlen: 24
95.175.15.0/24 maxlen: 24
95.175.16.0/24 maxlen: 24
95.175.17.0/24 maxlen: 24
95.175.18.0/24 maxlen: 24
95.175.19.0/24 maxlen: 24
193.239.206.0/23 maxlen: 23
194.63.132.0/22 maxlen: 22
217.11.135.0/24 maxlen: 24
2a04:1200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:c1:82:0c:de:d8:b1:75:0f:c1:97:1f:e2:67:59:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Sep 8 11:22:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f487d8cc06aca9fcfb5b3eba1314f1049dac43a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:02:93:5f:83:93:dd:7c:4f:a3:99:9e:a0:39:
0e:8e:ac:c0:f9:54:4d:72:9f:c9:4a:5c:a0:4a:11:
4f:64:4b:81:d5:a8:0c:2d:7a:e0:6d:6b:31:54:d0:
db:e1:6a:70:c5:6e:12:ed:be:e0:27:90:17:07:da:
04:dd:9a:72:db:e8:79:5d:23:e6:47:ab:b5:72:ab:
97:1e:f5:2e:30:6b:77:32:9a:f0:f1:ed:b9:b3:c7:
c2:5b:b7:2a:11:69:89:84:fc:98:8a:76:af:49:16:
53:8b:08:ab:44:6d:96:52:7f:3a:66:12:fe:8f:77:
f1:60:1d:85:e4:a5:0f:39:36:c8:e0:ef:2e:e1:cd:
13:0a:e6:d6:4e:aa:79:d4:ae:97:07:af:10:6e:10:
23:82:d1:b9:ed:a0:7f:e5:fe:9d:52:a8:d1:3c:88:
be:1b:af:6d:f7:19:35:aa:0c:87:a0:86:b1:31:61:
c3:05:96:b5:dd:11:67:3f:a7:fa:d1:f0:c8:a5:fc:
ab:83:f5:ff:34:c2:d3:47:d7:01:ee:34:63:c9:e5:
43:3f:dd:48:4a:83:96:20:68:1a:5f:61:fe:a2:a9:
7d:37:ee:64:64:cb:3e:85:6a:f1:fa:ff:5a:5b:49:
01:95:fe:10:da:a7:55:03:68:6b:5a:7d:7f:33:d4:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:87:D8:CC:06:AC:A9:FC:FB:5B:3E:BA:13:14:F1:04:9D:AC:43:A4
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/9IfYzAasqfz7Wz66ExTxBJ2sQ6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.96.0/22
95.175.0.0/19
193.239.206.0/23
194.63.132.0/22
217.11.135.0/24
IPv6:
2a04:1200::/29
Signature Algorithm: sha256WithRSAEncryption
0d:09:91:5a:cd:9c:82:0c:ab:53:4c:9b:ee:af:02:bc:2b:43:
8d:99:c4:62:bc:e0:47:8e:a3:b8:e8:42:10:df:41:44:90:58:
29:23:a8:99:d7:f0:47:0d:00:3b:3e:1c:7b:a6:bc:51:80:dd:
89:1b:2d:2b:77:8f:20:0f:0b:54:8e:38:32:a4:91:1d:fb:4d:
57:64:ac:a1:74:2c:18:b4:5f:6c:e3:9f:c4:a1:96:2a:9f:34:
6e:ae:b3:71:13:0b:7b:f5:00:58:45:56:ec:0f:23:85:93:6a:
fa:ca:67:12:72:ec:28:b9:24:ee:09:5e:47:d2:82:e7:50:43:
6b:0d:46:d7:79:ca:24:6c:2d:cf:70:0b:82:59:1c:35:ab:94:
13:d9:46:b5:8a:2a:d0:f3:3d:d7:37:43:dd:3a:fa:c7:d2:48:
b9:ec:51:51:5b:e4:58:22:98:7e:9e:2c:70:48:e5:19:f8:20:
2b:e2:18:6d:64:cb:cb:78:87:2a:fd:89:2f:db:fe:4f:3c:45:
cc:c8:48:55:88:2f:b2:7f:24:de:0e:22:40:06:26:d4:0d:0b:
7a:1b:dd:49:c8:0b:ea:69:77:46:a0:62:86:26:a3:b5:22:d3:
a5:10:95:a8:28:cd:a9:7b:d6:fc:0f:7d:fe:fb:39:52:81:21:
13:5b:fe:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 05:46:41 2026 by rpki-client