Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/9arIJVhxg9fd2PF0Zl1dv4bsaoM.roa
File: 9arIJVhxg9fd2PF0Zl1dv4bsaoM.roa (raw, json)
Hash identifier: iPeEBnua73nnKIEaWM/yfK+tuSM8JEEgKrGQmXc9Qsk=
Subject key identifier: F5:AA:C8:25:58:71:83:D7:DD:D8:F1:74:66:5D:5D:BF:86:EC:6A:83
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019F7BABF4611EA1413AA119B6602E28BE61
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/9arIJVhxg9fd2PF0Zl1dv4bsaoM.roa
Signing time: Sun 19 Jul 2026 18:38:14 +0000
ROA not before: Sun 19 Jul 2026 18:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 84.55.1.0/24 maxlen: 24
84.55.3.0/24 maxlen: 24
84.55.9.0/24 maxlen: 24
84.55.18.0/24 maxlen: 24
84.55.19.0/24 maxlen: 24
84.55.23.0/24 maxlen: 24
88.223.16.0/24 maxlen: 24
88.223.17.0/24 maxlen: 24
88.223.18.0/24 maxlen: 24
88.223.19.0/24 maxlen: 24
88.223.20.0/24 maxlen: 24
88.223.21.0/24 maxlen: 24
88.223.22.0/24 maxlen: 24
88.223.23.0/24 maxlen: 24
88.223.44.0/24 maxlen: 24
88.223.169.0/24 maxlen: 24
88.223.170.0/24 maxlen: 24
88.223.171.0/24 maxlen: 24
88.223.174.0/24 maxlen: 24
88.223.175.0/24 maxlen: 24
95.173.41.0/24 maxlen: 24
95.173.54.0/24 maxlen: 24
95.173.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7b:ab:f4:61:1e:a1:41:3a:a1:19:b6:60:2e:28:be:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jul 19 18:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5aac825587183d7ddd8f174665d5dbf86ec6a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:91:92:a1:85:32:e8:9e:a1:56:1b:51:7b:
f9:c5:fe:ab:89:37:f2:4a:ef:7e:9d:55:04:fe:97:
51:74:cb:80:3c:fc:76:15:5c:25:89:39:e9:a8:30:
4e:a3:fc:81:39:5e:63:66:91:56:ca:a1:33:91:8b:
22:3b:56:54:5b:14:50:be:9a:ba:f2:1a:4f:d0:14:
57:5a:9c:84:96:c5:74:2c:79:dd:d2:03:7c:82:aa:
55:43:14:78:d4:33:2d:34:87:90:4b:57:69:8d:1d:
15:c7:32:8f:bf:2c:d9:fe:94:79:e9:ee:af:f3:f9:
8f:98:13:f2:0c:14:39:96:f2:f9:ee:9d:2d:1c:d9:
24:a3:52:62:4a:c5:86:3b:f0:38:d9:38:33:1d:00:
03:a4:67:e3:98:13:5a:f1:af:a4:73:3c:bd:77:bd:
b5:3e:06:3e:02:13:be:fc:ac:ed:7c:64:06:f1:df:
10:cb:e6:40:f6:17:24:b6:5d:e8:06:21:1b:3d:8d:
78:94:05:c9:b4:7a:a8:30:ec:4d:8e:12:0a:e2:26:
34:69:f4:70:70:b0:42:59:23:3c:8f:d7:a3:19:8a:
9f:1e:e2:ab:5b:fa:ee:e1:b2:53:b8:91:5e:a0:62:
c1:d4:14:6f:20:0e:97:21:bf:a2:40:31:d8:a0:4c:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AA:C8:25:58:71:83:D7:DD:D8:F1:74:66:5D:5D:BF:86:EC:6A:83
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/9arIJVhxg9fd2PF0Zl1dv4bsaoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.1.0/24
84.55.3.0/24
84.55.9.0/24
84.55.18.0/23
84.55.23.0/24
88.223.16.0/21
88.223.44.0/24
88.223.169.0-88.223.171.255
88.223.174.0/23
95.173.41.0/24
95.173.54.0/24
95.173.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f4:64:a3:fb:02:89:3c:53:08:30:5c:de:a2:62:ac:18:3d:
19:59:4a:1d:35:de:ef:d6:9f:80:66:b9:75:f3:bd:f1:ba:13:
66:67:5f:a1:ff:b9:c9:0a:f0:dd:ec:76:5a:4c:b6:06:76:06:
b5:dc:3e:7a:a7:e5:7e:13:dd:f8:05:90:fb:71:96:21:fe:7e:
85:fb:72:da:6c:40:18:24:9f:9d:ef:ed:ea:bf:93:da:c8:9e:
9c:db:dc:f9:ff:88:a2:5c:c5:30:61:fb:f5:42:33:7c:04:ff:
06:83:cf:1e:16:99:36:db:51:5e:5d:24:bd:61:32:19:f5:ba:
1b:94:64:a0:76:8a:c6:45:dd:08:1f:f1:ee:47:f9:0c:ef:fa:
22:30:92:0e:87:e7:1b:e8:65:a2:5b:30:86:47:e6:fd:8f:78:
50:bd:97:a2:4e:79:5b:38:04:95:34:92:40:ff:49:fe:b7:53:
6a:d7:07:c0:6f:fd:10:c8:36:71:ec:54:d1:80:b0:75:40:4b:
4b:69:c1:18:32:e4:12:53:1a:b5:fc:68:42:34:81:23:32:87:
4b:ab:72:6e:09:42:47:20:00:ee:0e:84:4e:3f:a4:2b:34:26:
70:5c:02:b7:40:49:38:2d:08:8e:b0:0e:75:db:f8:92:37:e4:
4d:88:df:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:10 2026 by rpki-client