Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/k9k9T2ONQu0R5M8gf0ZEMIVydmM.roa
File: k9k9T2ONQu0R5M8gf0ZEMIVydmM.roa (raw, json)
Hash identifier: H47SjZ9BIhJeQGY/J6bkZroBOYzowjDBp3fQiJCG8Fk=
Subject key identifier: 93:D9:3D:4F:63:8D:42:ED:11:E4:CF:20:7F:46:44:30:85:72:76:63
Certificate issuer: /CN=f9a8a834d16bfef6f144ca1858a96119d8885a02
Certificate serial: 019F2368D5D38CCED22AC8B2694684ABE505
Authority key identifier: F9:A8:A8:34:D1:6B:FE:F6:F1:44:CA:18:58:A9:61:19:D8:88:5A:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aioNNFr_vbxRMoYWKlhGdiIWgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/k9k9T2ONQu0R5M8gf0ZEMIVydmM.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15704
IP address blocks: 185.140.64.0/22 maxlen: 24
213.194.128.0/18 maxlen: 24
213.195.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aioNNFr_vbxRMoYWKlhGdiIWgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d5:d3:8c:ce:d2:2a:c8:b2:69:46:84:ab:e5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a8a834d16bfef6f144ca1858a96119d8885a02
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93d93d4f638d42ed11e4cf207f46443085727663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:39:48:38:17:83:98:81:ee:8f:4f:05:77:
c6:15:78:99:c1:41:8a:a2:ca:e2:e6:5d:e7:9d:b9:
d5:2d:49:b3:1d:bb:f7:5e:93:bb:00:41:b4:9b:d9:
b1:f1:67:ca:1a:52:11:26:1b:e5:64:a0:b4:62:47:
af:16:21:27:ef:53:73:fe:e8:8a:6e:55:c5:64:e5:
a4:a1:4f:61:e9:48:5b:e8:74:d4:b9:1d:43:49:ae:
1f:cf:6b:45:6e:c6:bf:b2:ff:30:73:72:6c:7f:0b:
5b:b9:95:f2:f2:02:c2:17:57:90:ad:50:e1:69:5b:
8f:11:a9:40:32:ac:4b:66:55:77:28:ff:e9:5a:87:
ab:aa:46:da:93:0e:26:30:10:0f:90:a7:59:47:7f:
4b:59:9b:8f:bf:7f:9c:73:dd:b1:9a:3a:d5:1e:90:
b7:25:ff:e9:7f:13:3e:b8:c2:5d:78:a1:d6:c5:22:
69:e3:34:a5:8d:5c:48:08:6f:9f:58:01:52:eb:85:
02:bb:6a:42:76:46:38:72:22:70:47:78:d8:e4:7f:
d0:a3:be:1e:a6:6a:80:6c:00:26:6a:7b:02:6c:e9:
7d:fd:07:e0:76:0e:2b:05:d1:53:6a:c4:ec:bc:b2:
17:7b:d5:e5:76:20:cd:d7:ca:13:c9:98:fc:6d:f7:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D9:3D:4F:63:8D:42:ED:11:E4:CF:20:7F:46:44:30:85:72:76:63
X509v3 Authority Key Identifier:
keyid:F9:A8:A8:34:D1:6B:FE:F6:F1:44:CA:18:58:A9:61:19:D8:88:5A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aioNNFr_vbxRMoYWKlhGdiIWgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/k9k9T2ONQu0R5M8gf0ZEMIVydmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.64.0/22
213.194.128.0/18
213.195.64.0/18
Signature Algorithm: sha256WithRSAEncryption
53:c6:46:99:b0:91:28:88:f9:95:d6:c5:9f:a8:cb:cd:be:e7:
b8:5b:c4:69:60:79:5c:b2:0e:3e:f0:0c:d0:da:f6:37:8d:a8:
da:af:56:d7:b1:d7:b6:26:a4:86:57:6c:b5:9b:a5:49:b7:72:
a6:53:71:b9:2c:82:e2:fd:dc:63:25:fe:45:00:a1:63:89:bd:
2d:ed:76:e1:78:45:44:f4:3e:1e:cc:64:a7:02:19:0b:d5:24:
a7:0d:9d:ff:0b:2e:90:df:17:5b:3b:39:b7:2f:fa:5a:c5:25:
b2:ea:c0:0b:32:29:90:be:44:21:54:c3:8c:7f:01:99:e6:a1:
43:89:d5:2c:40:ef:71:17:1e:27:b3:a5:f4:16:80:d7:d6:50:
cd:b8:7a:65:de:af:34:8b:5d:1c:05:1d:3e:d6:3b:04:e0:f9:
29:9e:c5:56:71:70:49:b5:51:66:26:f7:4d:22:53:10:de:8e:
52:3c:44:85:89:03:89:8e:75:c8:9a:42:84:ac:52:58:a8:fa:
1a:73:d0:a8:63:f8:66:a3:df:5f:2d:9d:ef:27:36:a8:32:45:
d8:35:6e:98:6b:73:21:53:9d:2f:0b:b3:97:eb:b7:fc:dc:a6:
05:71:60:dd:25:fd:3d:3e:87:b1:67:67:f0:14:17:ff:29:a4:
1a:87:d9:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:02 2026 by rpki-client