Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/9u44haxRix1aXmDblsqAtiOy3ic.roa
File: 9u44haxRix1aXmDblsqAtiOy3ic.roa (raw, json)
Hash identifier: r3I5n8f6rdoTo7uI5qExlu1uSbAdj4bGLbRaLfkDE8E=
Subject key identifier: F6:EE:38:85:AC:51:8B:1D:5A:5E:60:DB:96:CA:80:B6:23:B2:DE:27
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019DE2FAEF47EBBEAC71F38E3A95357211C5
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/9u44haxRix1aXmDblsqAtiOy3ic.roa
Signing time: Fri 01 May 2026 09:59:49 +0000
ROA not before: Fri 01 May 2026 09:59:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214922
IP address blocks: 79.143.85.0/24 maxlen: 24
87.236.208.0/24 maxlen: 24
2a03:9381:a::/48 maxlen: 48
2a03:9381:b::/48 maxlen: 48
2a03:9381:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:fa:ef:47:eb:be:ac:71:f3:8e:3a:95:35:72:11:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: May 1 09:59:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6ee3885ac518b1d5a5e60db96ca80b623b2de27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:1c:ce:9c:f2:31:f7:30:4b:56:8f:c8:74:
4c:92:7e:c8:8d:97:e4:86:3a:4b:56:fb:8d:45:14:
cf:19:15:03:70:70:3b:88:7a:bd:10:22:b5:fc:fb:
68:d3:31:a5:b6:37:cc:78:f3:eb:d9:99:1e:fe:7b:
c5:67:69:93:04:47:b1:cf:c1:2d:35:8c:6a:b1:41:
e3:93:52:d8:fb:a4:b0:0e:6d:c2:bd:1b:4d:f7:73:
94:42:70:38:13:1d:d9:bc:92:1f:75:2e:4c:0c:89:
00:ea:20:16:49:c5:97:a5:82:0d:64:56:49:62:ff:
81:77:98:4b:b7:1b:a5:4f:ed:aa:54:fd:49:d9:fb:
84:ec:0c:c8:99:31:e9:1e:f9:ef:6e:62:da:8b:b4:
1d:86:06:bd:2f:61:25:92:86:bb:07:69:e2:93:8b:
5b:13:6d:4a:73:df:83:f5:d8:ea:fd:77:55:5e:3f:
d3:24:32:6a:ee:ca:a3:81:b2:ec:33:26:a1:82:76:
88:4e:c2:30:f8:7d:27:ec:30:4f:7f:73:38:fb:5b:
51:ad:3c:ad:1a:18:ef:4e:59:c0:1f:9a:11:b3:d5:
3c:05:17:0e:20:5a:29:1a:7b:22:dc:b0:21:4c:9f:
27:33:2f:09:7d:33:46:51:3a:68:3f:06:11:5e:2c:
8a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EE:38:85:AC:51:8B:1D:5A:5E:60:DB:96:CA:80:B6:23:B2:DE:27
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/9u44haxRix1aXmDblsqAtiOy3ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.85.0/24
87.236.208.0/24
IPv6:
2a03:9381:a::-2a03:9381:c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c7:06:cf:f5:b5:48:5a:fb:d3:3a:6a:57:08:fb:48:62:69:b0:
48:ba:d4:9f:44:99:64:dc:45:2e:59:7c:d3:4b:61:ef:43:15:
e8:a7:3e:22:f9:43:6a:34:ec:c3:41:93:1f:b2:f3:8f:15:68:
9f:4a:a3:81:ac:17:9d:c6:89:99:d0:68:63:dc:68:60:5b:9c:
14:cc:72:fb:b1:e3:fe:af:a2:b5:5c:a4:16:45:af:33:3b:5d:
c1:dd:f0:d0:6d:fe:67:ab:72:74:ac:99:ef:0b:83:21:99:2b:
9e:f2:c7:95:4f:1d:50:a6:1e:7b:68:c5:8d:77:9a:50:30:cc:
be:0c:17:91:62:ec:26:6f:85:72:eb:aa:2e:96:61:9b:30:d9:
f3:48:c9:87:cc:7c:5f:59:09:f9:56:2b:6f:6d:a9:c4:24:d5:
e7:5d:9b:66:98:bb:79:a1:6d:9c:f4:27:07:ed:08:48:1d:b9:
33:e0:54:e1:fb:8b:30:9f:72:dc:f4:cb:a0:8a:fe:84:24:0f:
d2:eb:9a:ce:b7:cb:eb:43:d6:a5:88:36:db:17:c8:d4:5d:1a:
e5:1a:1b:4c:18:ec:17:c8:cd:bb:78:c7:59:41:f1:ff:eb:4b:
a6:2a:a2:9d:3c:ce:1d:8e:84:c9:9e:35:44:0b:ef:d7:62:f8:
0e:33:ff:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:20:41 2026 by rpki-client