Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/9ZT-jtuvuyChWGhqzx6bDw_rL-A.roa
File: 9ZT-jtuvuyChWGhqzx6bDw_rL-A.roa (raw, json)
Hash identifier: wIGBfgZvSDRH5lC7Lt7B+TOaBYWXsMviGDk54gwrBVY=
Subject key identifier: F5:94:FE:8E:DB:AF:BB:20:A1:58:68:6A:CF:1E:9B:0F:0F:EB:2F:E0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 019F5B4DF59FB338D569D7D5A4EDD8383498
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/9ZT-jtuvuyChWGhqzx6bDw_rL-A.roa
Signing time: Mon 13 Jul 2026 11:47:43 +0000
ROA not before: Mon 13 Jul 2026 11:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48847
IP address blocks: 185.176.208.0/22 maxlen: 22
185.176.208.0/24 maxlen: 24
185.176.208.0/27 maxlen: 27
185.176.208.128/27 maxlen: 27
185.176.208.160/27 maxlen: 27
185.176.209.0/24 maxlen: 24
185.176.210.0/24 maxlen: 24
185.176.210.48/29 maxlen: 29
185.176.210.104/29 maxlen: 29
185.176.211.0/24 maxlen: 24
185.176.211.224/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:4d:f5:9f:b3:38:d5:69:d7:d5:a4:ed:d8:38:34:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Jul 13 11:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f594fe8edbafbb20a158686acf1e9b0f0feb2fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:de:6c:7b:d5:8d:9b:c9:5b:94:8b:10:97:
fc:9a:8f:94:ab:1a:80:03:ef:81:a3:ab:4d:51:26:
95:e6:d4:3f:26:4f:7d:e2:16:9b:08:de:de:7b:02:
c9:33:94:9e:91:d2:9f:50:8b:68:0c:56:7a:f8:df:
27:fe:10:8e:1a:e1:4b:bb:54:30:74:a2:cc:46:ab:
9c:0d:d4:48:90:ff:df:05:18:a0:50:f7:46:c3:a9:
59:8b:48:8a:1b:e5:e7:8a:f6:01:50:4c:de:b0:bd:
d1:22:0e:1b:2d:b7:8c:dc:c4:f3:b0:5f:91:8d:56:
2e:04:38:94:9a:44:ca:db:54:47:57:62:8f:90:d4:
98:db:a9:46:37:ec:4b:ae:19:f2:a3:de:41:2d:44:
dd:38:e8:3f:71:95:b0:62:02:a5:6f:33:02:bc:1c:
5a:bf:99:c4:d2:59:d7:b5:f7:73:47:b8:3e:fd:e8:
fe:13:a3:b0:45:d6:bb:d4:ca:aa:c8:52:f0:ba:85:
22:01:39:83:4d:d8:bd:4e:48:c7:9e:74:a0:e8:1a:
bb:01:f7:26:8b:be:89:64:30:77:78:1c:d6:ad:0e:
87:35:59:92:1a:9a:73:9f:34:b0:e1:72:e8:eb:0d:
69:a7:8a:d0:26:d6:a7:3d:0c:70:a0:60:67:ac:88:
5b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:94:FE:8E:DB:AF:BB:20:A1:58:68:6A:CF:1E:9B:0F:0F:EB:2F:E0
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/9ZT-jtuvuyChWGhqzx6bDw_rL-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.208.0/22
Signature Algorithm: sha256WithRSAEncryption
02:46:ee:f3:5a:5a:54:3c:47:b7:15:9f:34:a5:7f:fa:5f:aa:
89:30:ec:99:e4:4d:c5:df:46:4f:ef:e7:8a:d8:5e:b3:4f:b0:
cc:c7:a2:7c:42:84:4e:34:98:c3:e2:cc:15:33:44:f9:e5:2a:
a8:84:58:d4:c6:7f:c0:02:53:61:62:17:d9:5c:d6:3f:e6:aa:
22:9f:44:14:22:37:8d:4c:91:f6:11:5c:3a:d1:9f:40:c0:bb:
54:87:af:fa:4d:9f:27:cb:aa:5b:57:01:6b:94:d2:a4:dc:10:
11:ac:5e:4f:aa:37:e9:5f:58:31:b7:45:2c:e7:9a:1a:d0:b3:
86:a9:9a:f3:24:ab:44:67:76:cc:5d:7e:54:e1:07:1f:fc:9c:
b5:e7:18:2c:56:01:26:bb:f4:35:c4:c7:71:e5:ec:dd:ba:80:
1c:4b:2f:5d:32:75:51:57:6d:a0:2d:1e:82:6b:76:3b:77:26:
f1:62:8b:b5:73:05:e3:b9:85:a4:39:af:e9:e5:d9:bd:24:67:
ba:98:ec:a0:ac:e7:7a:4d:28:c2:a6:91:e5:3e:fc:04:8f:62:
e9:7f:47:2c:7f:e0:88:d8:33:84:57:79:8c:d3:3d:ca:38:bc:
a3:68:7b:1c:34:7c:3a:e9:25:b6:6b:2b:00:e0:bb:20:f4:ef:
27:fe:aa:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9bTfWfszjVadfVpO3YODSYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNjliNmIyYTBhNzI4MThkMWZhOWE0NmVmMmFkNzgxMmI5
NWJjYzAwHhcNMjYwNzEzMTE0NzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTk0ZmU4ZWRiYWZiYjIwYTE1ODY4NmFjZjFlOWIwZjBmZWIyZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JzebHvVjZvJW5SLEJf8mo+UqxqA
A++Bo6tNUSaV5tQ/Jk994habCN7eewLJM5SekdKfUItoDFZ6+N8n/hCOGuFLu1Qw
dKLMRqucDdRIkP/fBRigUPdGw6lZi0iKG+XnivYBUEzesL3RIg4bLbeM3MTzsF+R
jVYuBDiUmkTK21RHV2KPkNSY26lGN+xLrhnyo95BLUTdOOg/cZWwYgKlbzMCvBxa
v5nE0lnXtfdzR7g+/ej+E6OwRda71MqqyFLwuoUiATmDTdi9TkjHnnSg6Bq7Afcm
i76JZDB3eBzWrQ6HNVmSGppznzSw4XLo6w1pp4rQJtanPQxwoGBnrIhbZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPWU/o7br7sgoVhoas8emw8P6y/gMB8GA1UdIwQY
MBaAFJ1ptrKgpygY0fqaRu8q14ErlbzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82MzNhZjItNWI0ZS00YTRjLWIxMzkt
Mzk2MDc4MjFhMDlhLzEvOVpULWp0dXZ1eUNoV0docXp4NmJEd19yTC1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82MzNhZjItNWI0ZS00YTRjLWIxMzktMzk2MDc4MjFhMDlh
LzEvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubDQMA0G
CSqGSIb3DQEBCwUAA4IBAQACRu7zWlpUPEe3FZ80pX/6X6qJMOyZ5E3F30ZP7+eK
2F6zT7DMx6J8QoRONJjD4swVM0T55SqohFjUxn/AAlNhYhfZXNY/5qoin0QUIjeN
TJH2EVw60Z9AwLtUh6/6TZ8ny6pbVwFrlNKk3BARrF5PqjfpX1gxt0Us55oa0LOG
qZrzJKtEZ3bMXX5U4Qcf/Jy15xgsVgEmu/Q1xMdx5ezduoAcSy9dMnVRV22gLR6C
a3Y7dybxYou1cwXjuYWkOa/p5dm9JGe6mOygrOd6TSjCppHlPvwEj2Lpf0csf+CI
2DOEV3mM0z3KOLyjaHscNHw66SW2aysA4Lsg9O8n/qrk
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:38:03 2026 by rpki-client