Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/b9pucImMRklKE9H42beKCpH3jZQ.roa
File: b9pucImMRklKE9H42beKCpH3jZQ.roa (raw, json)
Hash identifier: XLI5TKkW0eaR8i+yOT6IlSkbxxb0vfR2ygO3TPOk8GI=
Subject key identifier: 6F:DA:6E:70:89:8C:46:49:4A:13:D1:F8:D9:B7:8A:0A:91:F7:8D:94
Certificate issuer: /CN=404284388e4d8b78e562e7b140dc358d4114c027
Certificate serial: 019F23683BA41CFDC16CEC90CCDA68DDB3F5
Authority key identifier: 40:42:84:38:8E:4D:8B:78:E5:62:E7:B1:40:DC:35:8D:41:14:C0:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEKEOI5Ni3jlYuexQNw1jUEUwCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/b9pucImMRklKE9H42beKCpH3jZQ.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35615
IP address blocks: 194.39.36.0/22 maxlen: 22
194.39.36.0/23 maxlen: 23
194.39.36.0/24 maxlen: 24
194.39.37.0/24 maxlen: 24
194.39.38.0/23 maxlen: 23
194.39.38.0/24 maxlen: 24
194.39.39.0/24 maxlen: 24
2a0d:84c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEKEOI5Ni3jlYuexQNw1jUEUwCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3b:a4:1c:fd:c1:6c:ec:90:cc:da:68:dd:b3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404284388e4d8b78e562e7b140dc358d4114c027
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fda6e70898c46494a13d1f8d9b78a0a91f78d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ea:e1:27:f1:d0:e9:e7:70:c8:34:53:e5:a5:
b5:a7:8e:90:91:e7:70:16:fa:be:e6:63:24:6d:52:
29:f0:12:51:d4:8b:51:b9:7e:96:2f:0e:34:e4:f6:
85:d3:39:bc:25:b8:38:8c:80:85:38:83:d7:07:24:
d6:0c:aa:fc:2b:a7:08:10:12:cc:f5:e3:fb:f7:fe:
91:61:a3:19:5b:db:9f:e5:63:42:db:50:f0:a3:ce:
ef:e3:c8:c2:c9:44:2e:1d:87:45:f6:da:6e:37:04:
45:d2:2f:95:ba:9f:2a:99:65:1e:63:a3:9f:1d:09:
85:f2:4b:b6:18:6d:a3:1c:fa:c0:f5:54:88:7c:ea:
11:8e:01:c5:11:a5:f3:45:f1:54:18:56:1e:3c:b5:
52:c0:fe:3c:b9:65:b9:37:a3:21:5b:11:aa:a1:d2:
61:ed:ff:1f:85:dc:69:6e:88:82:50:bc:7c:6f:4a:
10:df:20:37:6f:33:2f:ed:ee:46:3a:b1:c5:67:c8:
af:a9:41:ef:e0:5a:9a:42:67:67:49:04:4f:cc:97:
dd:7d:ac:64:9a:15:b0:5a:76:43:db:b1:34:0b:02:
04:f7:f0:d8:ad:4c:01:ab:65:21:8a:bc:3d:af:7c:
ba:60:94:1a:54:f0:46:47:06:f5:67:68:82:f9:58:
93:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DA:6E:70:89:8C:46:49:4A:13:D1:F8:D9:B7:8A:0A:91:F7:8D:94
X509v3 Authority Key Identifier:
keyid:40:42:84:38:8E:4D:8B:78:E5:62:E7:B1:40:DC:35:8D:41:14:C0:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEKEOI5Ni3jlYuexQNw1jUEUwCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/b9pucImMRklKE9H42beKCpH3jZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.36.0/22
IPv6:
2a0d:84c0::/29
Signature Algorithm: sha256WithRSAEncryption
1e:eb:0e:ac:2a:b4:25:0f:87:17:e7:be:18:1e:f3:a3:1b:1a:
84:80:49:5e:02:04:ab:3f:d9:50:06:3a:f4:55:4e:99:26:9b:
31:7a:81:fa:cb:83:08:68:11:9b:ca:2f:d0:bc:0c:ad:eb:08:
1b:56:04:ec:ea:02:3b:ff:58:07:64:67:9c:19:7c:e1:05:b8:
f3:d1:6d:fe:2e:97:98:3d:33:d7:56:61:5a:74:cb:fd:62:4a:
d3:c0:57:3a:40:56:fa:4a:f9:10:d7:10:d4:1d:33:eb:5c:53:
c3:01:e8:4b:c2:eb:26:91:77:ba:65:f1:1d:c5:4a:69:2e:41:
1c:88:f6:2c:07:86:be:9e:b8:a1:9b:21:14:18:7c:be:a6:56:
48:de:f3:27:d8:cc:ed:33:6d:15:36:28:b1:a6:cd:62:74:28:
a1:19:a8:43:56:fd:68:7c:af:3d:05:77:38:7f:c8:87:da:ca:
bf:06:2a:76:4e:55:63:30:70:87:e0:fb:24:17:6a:32:b5:40:
8b:bc:94:d9:ee:9a:3f:de:33:81:75:06:5d:48:16:f3:b8:98:
fc:e2:1f:c9:1f:2e:1e:59:0b:73:3b:44:c2:a4:6c:da:f5:f5:
a0:92:f1:a6:34:62:1d:0d:53:91:08:78:6c:86:1b:83:2f:87:
db:95:04:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:05 2026 by rpki-client