Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/e9PDvbiMlBPJ1OOEBaUlDK3v6FA.roa
File: e9PDvbiMlBPJ1OOEBaUlDK3v6FA.roa (raw, json)
Hash identifier: JS+2KcEt2B3UHtm7B1l/JkKD38qf54IF2F3MmmklzBA=
Subject key identifier: 7B:D3:C3:BD:B8:8C:94:13:C9:D4:E3:84:05:A5:25:0C:AD:EF:E8:50
Certificate issuer: /CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Certificate serial: 019F5B99F470A664CC33EE0B87C7F40DB913
Authority key identifier: A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/e9PDvbiMlBPJ1OOEBaUlDK3v6FA.roa
Signing time: Mon 13 Jul 2026 13:10:43 +0000
ROA not before: Mon 13 Jul 2026 13:10:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51265
IP address blocks: 62.240.128.0/19 maxlen: 24
62.240.135.0/24 maxlen: 24
62.240.136.0/24 maxlen: 24
62.240.137.0/24 maxlen: 24
62.240.144.0/21 maxlen: 21
83.216.32.0/19 maxlen: 23
83.216.32.0/20 maxlen: 20
83.216.48.0/20 maxlen: 20
83.216.48.0/21 maxlen: 21
83.216.60.0/22 maxlen: 22
176.126.39.0/24 maxlen: 24
178.157.4.0/22 maxlen: 24
185.44.52.0/22 maxlen: 23
185.69.244.0/22 maxlen: 24
193.9.252.0/23 maxlen: 24
193.9.252.0/24 maxlen: 24
193.9.253.0/24 maxlen: 24
2a04:9540::/29 maxlen: 29
2a07:1740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:99:f4:70:a6:64:cc:33:ee:0b:87:c7:f4:0d:b9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Validity
Not Before: Jul 13 13:10:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bd3c3bdb88c9413c9d4e38405a5250cadefe850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:b2:22:67:81:b2:d5:f0:1f:0f:69:2d:01:
6c:b3:a2:f6:c1:13:66:6d:c7:a3:0b:e0:60:80:e7:
87:bf:61:55:a3:85:54:f3:1f:f0:d8:1d:73:a5:8d:
51:dc:3d:35:ca:2f:6c:1b:ac:a2:a9:3b:02:4b:ed:
c8:5d:14:9d:3a:63:61:29:1d:f6:23:26:3c:f9:4f:
99:ab:87:45:91:4f:36:1b:f4:37:76:9d:83:5f:f9:
22:32:c3:52:f1:6b:1b:aa:40:73:34:0b:46:d6:ea:
98:5e:74:01:c0:ec:12:ad:ae:52:15:84:14:0f:81:
22:7b:40:0b:18:47:21:b5:5e:cb:72:a4:87:ab:8c:
a2:d2:e8:68:11:79:a9:f1:ea:23:bb:f8:ac:34:58:
90:65:6b:78:b4:30:70:d3:c8:5b:51:b3:34:55:ad:
a7:5f:09:d1:7c:46:24:bf:9d:1f:84:06:70:c1:c8:
3b:60:f5:10:4c:f3:30:e1:63:84:38:40:29:6f:2d:
91:9f:d6:5c:3d:78:8f:ce:c9:d9:21:2e:d7:32:c9:
c1:11:cf:97:51:49:de:d4:ce:f4:86:b8:dd:ae:cd:
c6:78:a6:c7:89:10:9c:91:a5:93:49:75:31:00:73:
ce:d5:a7:97:3b:a7:1a:02:5e:20:f0:21:08:7c:16:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D3:C3:BD:B8:8C:94:13:C9:D4:E3:84:05:A5:25:0C:AD:EF:E8:50
X509v3 Authority Key Identifier:
keyid:A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/e9PDvbiMlBPJ1OOEBaUlDK3v6FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.240.128.0/19
83.216.32.0/19
176.126.39.0/24
178.157.4.0/22
185.44.52.0/22
185.69.244.0/22
193.9.252.0/23
IPv6:
2a04:9540::/29
2a07:1740::/29
Signature Algorithm: sha256WithRSAEncryption
21:06:73:54:58:a5:3a:56:12:a3:b5:ce:92:3c:62:21:43:10:
d7:3d:7a:db:c4:19:e7:3b:75:a6:eb:6b:b1:08:6d:aa:21:e9:
cd:89:93:c0:98:6c:95:03:09:f2:6e:be:08:6c:95:3e:4d:6b:
31:9d:f3:c9:cd:98:f4:ad:57:5e:1b:3c:50:e5:43:e2:0e:14:
8d:78:b8:59:f4:f1:6e:70:29:f4:2f:b9:07:4e:07:bf:72:39:
37:00:9c:5d:76:47:06:d3:dc:cb:65:c3:04:a0:37:22:cc:65:
77:55:19:a3:ef:53:1c:e3:b1:c2:42:90:0f:4f:b7:dc:3e:e6:
80:3e:8d:1a:66:69:22:a6:47:f2:f6:d2:af:81:78:80:01:cf:
86:51:36:2a:62:62:7e:c4:2b:42:b4:05:9a:c9:30:31:2b:14:
09:77:3c:85:94:8f:af:c4:2d:ce:97:c1:df:a3:c7:c5:d5:70:
b6:af:49:50:45:42:c5:9c:26:d4:c0:96:9a:54:0c:20:5b:09:
89:41:88:d5:0a:6f:28:f6:0b:7c:b0:b6:82:d1:1b:6f:ba:ba:
cb:bb:87:f9:bf:73:bf:29:cd:6c:ce:0a:bd:f2:6f:64:aa:62:
9d:e5:5b:0f:47:13:2a:82:64:c0:fd:ab:3f:40:7b:2c:5e:9e:
42:c3:07:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:33:26 2026 by rpki-client