Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/9hyd2i5gxsM9RiXeV4p4UOOXNug.roa
File: 9hyd2i5gxsM9RiXeV4p4UOOXNug.roa (raw, json)
Hash identifier: DBgWa85gYlD1UBUGpvXxhEvKrymTebe6sQhQdK05ATQ=
Subject key identifier: F6:1C:9D:DA:2E:60:C6:C3:3D:46:25:DE:57:8A:78:50:E3:97:36:E8
Certificate issuer: /CN=d3aaee1788b16e0a71a4206a8ab8dac6807ee89f
Certificate serial: 019E879FA4A8A216D44A404135DD4FCC2384
Authority key identifier: D3:AA:EE:17:88:B1:6E:0A:71:A4:20:6A:8A:B8:DA:C6:80:7E:E8:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06ruF4ixbgpxpCBqirjaxoB-6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/9hyd2i5gxsM9RiXeV4p4UOOXNug.roa
Signing time: Tue 02 Jun 2026 09:17:27 +0000
ROA not before: Tue 02 Jun 2026 09:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212386
IP address blocks: 176.119.199.0/24 maxlen: 24
2a01:ac0::/42 maxlen: 42
2a01:ac0:40::/42 maxlen: 42
2a01:ac0:80::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/06ruF4ixbgpxpCBqirjaxoB-6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/06ruF4ixbgpxpCBqirjaxoB-6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/06ruF4ixbgpxpCBqirjaxoB-6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:9f:a4:a8:a2:16:d4:4a:40:41:35:dd:4f:cc:23:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3aaee1788b16e0a71a4206a8ab8dac6807ee89f
Validity
Not Before: Jun 2 09:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f61c9dda2e60c6c33d4625de578a7850e39736e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:3b:33:0a:7e:86:df:09:e8:0a:6a:64:9e:
e6:56:44:b8:25:a9:1b:5d:89:b7:55:49:26:1c:83:
63:dc:5b:04:09:a2:64:d3:9a:97:d9:03:9f:95:73:
1a:15:02:49:24:49:d5:ac:ca:3d:59:9a:f2:86:83:
aa:da:10:cf:29:c5:8c:3b:5f:3b:bd:a0:5e:2a:c1:
6a:ea:16:cf:c7:07:b0:b1:5f:de:01:a8:6c:28:73:
bf:59:bc:d9:e4:40:59:aa:43:92:83:c8:7a:0c:44:
82:43:2e:fc:7e:18:8c:d2:c7:ec:8c:0a:33:f4:07:
64:fb:98:9d:b4:72:97:09:59:08:c3:5f:44:a1:8c:
81:05:4b:9e:be:62:85:bb:ba:17:2b:b9:7c:74:a6:
c5:f8:d7:38:e8:07:2a:4e:37:0b:91:04:77:03:18:
73:19:be:07:f2:7e:49:09:ee:0a:3a:7f:c9:6c:8e:
4f:f1:58:25:61:b6:ea:86:47:a4:9b:ae:59:1a:98:
0d:a8:66:1f:2a:98:64:54:e4:91:3b:04:eb:be:da:
c6:10:12:84:da:7e:cb:c3:74:5f:dc:22:ff:1f:46:
29:24:3e:ca:5f:4c:66:4a:ac:b5:2d:d7:06:1c:96:
70:e6:be:7b:f6:f2:48:43:68:94:8e:bc:e7:01:31:
f4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1C:9D:DA:2E:60:C6:C3:3D:46:25:DE:57:8A:78:50:E3:97:36:E8
X509v3 Authority Key Identifier:
keyid:D3:AA:EE:17:88:B1:6E:0A:71:A4:20:6A:8A:B8:DA:C6:80:7E:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06ruF4ixbgpxpCBqirjaxoB-6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/9hyd2i5gxsM9RiXeV4p4UOOXNug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/06ruF4ixbgpxpCBqirjaxoB-6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.199.0/24
IPv6:
2a01:ac0::-2a01:ac0:bf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1b:1f:34:4c:15:c4:40:35:84:fc:69:f6:95:c5:8d:a7:40:5e:
1d:0e:d8:bd:47:d4:d7:4f:fc:76:97:52:6f:a0:d2:8f:fc:bc:
ad:bb:ef:ec:d3:2b:90:7f:e0:e3:93:a0:e6:d6:78:c2:07:d5:
48:f9:9c:b5:93:9f:61:37:dd:2e:36:76:e2:25:3d:d5:71:05:
88:93:b2:85:9d:b2:0f:3b:93:2d:51:57:d7:c4:ba:9e:4d:84:
06:c9:88:bd:87:76:98:09:79:c4:ad:53:cf:0b:04:60:67:c7:
4b:ac:cd:d6:0d:dd:a7:11:0e:15:cb:c5:f3:fd:82:a4:2c:12:
cc:86:cb:1d:6a:20:16:42:46:83:18:37:d9:37:43:44:fb:8f:
b7:7e:0b:69:21:29:d6:15:70:11:18:40:70:23:64:88:a5:30:
d1:91:86:ea:42:28:58:53:0b:34:10:26:7a:0d:69:0c:d1:26:
37:35:bd:f0:5d:e6:6a:4c:c2:98:1d:5f:20:a2:1d:60:b7:8e:
c8:c0:eb:3d:4b:7d:2a:e9:a1:84:d6:3b:ca:53:80:4c:58:e3:
f6:0e:75:22:a4:1c:67:84:18:ab:e2:ce:d9:6c:3d:67:b3:4e:
98:96:da:16:db:40:62:45:97:dd:94:71:0c:25:62:08:85:6b:
e8:d8:7f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:02 2026 by rpki-client