Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/9PrFSGqeZd0UOMYP9lRluumrHPM.roa
File: 9PrFSGqeZd0UOMYP9lRluumrHPM.roa (raw, json)
Hash identifier: kFsQTnmYVMis7ZRR9s8dzQtd3EtrZ5qjWG7bRp1+3Ww=
Subject key identifier: F4:FA:C5:48:6A:9E:65:DD:14:38:C6:0F:F6:54:65:BA:E9:AB:1C:F3
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019F3C9FA6862093A1EA8849B7001CEEF3BD
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/9PrFSGqeZd0UOMYP9lRluumrHPM.roa
Signing time: Tue 07 Jul 2026 12:48:43 +0000
ROA not before: Tue 07 Jul 2026 12:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 195.123.189.0/24 maxlen: 24
195.123.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:9f:a6:86:20:93:a1:ea:88:49:b7:00:1c:ee:f3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Jul 7 12:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4fac5486a9e65dd1438c60ff65465bae9ab1cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:b2:73:13:32:95:99:80:26:15:cd:11:f2:
8e:44:f6:6c:83:16:9a:d9:a4:e5:7e:e1:bc:96:73:
ca:71:64:70:5b:fd:b2:69:39:dc:29:5f:19:0b:53:
c9:29:9c:66:2b:63:d6:c3:d8:81:5d:68:22:ca:a7:
e7:0b:2e:a6:68:39:52:45:88:b3:44:9d:a8:2a:52:
af:9e:9d:5e:dd:47:bd:ff:21:53:9f:88:6e:87:fd:
bc:6f:a9:c9:9e:9c:f7:0c:66:05:8f:ed:0f:a0:79:
1a:fa:a5:a4:9d:d0:f3:1a:9d:65:21:6f:13:32:e5:
0c:b3:f4:95:4c:5d:1d:a2:69:52:47:5b:27:de:81:
6b:4e:51:ab:63:33:b4:69:b0:29:a6:4c:a8:dd:ae:
9f:8e:45:6a:4d:24:46:39:3b:bb:bc:e5:20:12:4b:
08:db:cf:a9:90:f7:61:d0:ca:a3:16:89:03:ad:fe:
bc:40:86:b0:e8:03:45:c2:3c:c3:dc:7a:cd:2e:74:
20:32:21:c7:0b:ce:b4:03:74:d6:46:b3:5d:79:fe:
ab:89:84:93:67:b3:13:8d:25:fd:f0:e4:bb:1c:27:
0d:03:81:d8:0e:81:d0:07:ca:ea:f3:a7:a1:ed:16:
14:66:48:ef:84:a8:06:90:7e:19:8e:37:c9:2b:ef:
71:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FA:C5:48:6A:9E:65:DD:14:38:C6:0F:F6:54:65:BA:E9:AB:1C:F3
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/9PrFSGqeZd0UOMYP9lRluumrHPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.189.0/24
195.123.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:84:37:14:2c:33:cc:0f:a2:1a:12:1d:8a:13:6e:5c:ee:ef:
fb:f4:ea:96:62:2e:77:3e:38:37:62:3a:c9:ca:7a:c9:ad:41:
e0:64:3f:5f:91:77:36:3f:cf:a4:7f:39:2f:db:43:10:dc:19:
09:2f:98:57:0f:55:b2:53:98:95:2c:10:15:74:51:95:45:e2:
b1:0c:57:14:cc:aa:09:a0:07:30:ec:65:05:9e:97:b5:2e:4d:
ee:3d:46:2f:5c:e9:d3:12:60:33:d8:86:78:61:b2:e4:7f:e6:
a5:29:b5:ca:23:37:62:9a:52:30:9f:da:5b:b8:ef:18:f7:1c:
96:59:a2:cb:aa:78:ee:78:0e:b0:5f:0b:8a:f1:d8:5c:ba:54:
b6:d4:62:ec:12:c9:42:ee:39:b2:36:fd:89:52:67:d1:62:a1:
0a:7c:0d:82:4c:f4:12:19:55:5b:90:43:b9:a8:ce:60:f4:4f:
1b:59:52:4c:5a:07:e0:16:06:30:00:be:5f:85:fc:1b:33:99:
26:7c:4b:ce:ab:0b:ef:cc:aa:50:57:b0:53:e9:5a:70:45:09:
aa:33:96:e6:e3:23:4c:c8:c9:1c:c6:42:42:92:9f:b8:02:e4:
68:be:dc:e8:81:80:11:8e:09:58:a8:b0:80:f2:82:96:67:84:
e9:73:1e:ed
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ88n6aGIJOh6ohJtwAc7vO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDVhZGM1YzQyNjJkZmY2YjNmM2U2MDY4MzBjN2Y5NzFk
NzY2Y2UwHhcNMjYwNzA3MTI0ODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGZhYzU0ODZhOWU2NWRkMTQzOGM2MGZmNjU0NjViYWU5YWIxY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3iycxMylZmAJhXNEfKORPZsgxaa
2aTlfuG8lnPKcWRwW/2yaTncKV8ZC1PJKZxmK2PWw9iBXWgiyqfnCy6maDlSRYiz
RJ2oKlKvnp1e3Ue9/yFTn4huh/28b6nJnpz3DGYFj+0PoHka+qWkndDzGp1lIW8T
MuUMs/SVTF0domlSR1sn3oFrTlGrYzO0abAppkyo3a6fjkVqTSRGOTu7vOUgEksI
28+pkPdh0MqjFokDrf68QIaw6ANFwjzD3HrNLnQgMiHHC860A3TWRrNdef6riYST
Z7MTjSX98OS7HCcNA4HYDoHQB8rq86eh7RYUZkjvhKgGkH4ZjjfJK+9x8wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPT6xUhqnmXdFDjGD/ZUZbrpqxzzMB8GA1UdIwQY
MBaAFMEFrcXEJi3/az8+YGgwx/lx12bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODkt
NTE1ODQ1ZTZjMzE3LzEvOVByRlNHcWVaZDBVT01ZUDlsUmx1dW1ySFBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODktNTE1ODQ1ZTZjMzE3
LzEvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw3u9AwQA
w3u/MA0GCSqGSIb3DQEBCwUAA4IBAQAOhDcULDPMD6IaEh2KE25c7u/79OqWYi53
Pjg3YjrJynrJrUHgZD9fkXc2P8+kfzkv20MQ3BkJL5hXD1WyU5iVLBAVdFGVReKx
DFcUzKoJoAcw7GUFnpe1Lk3uPUYvXOnTEmAz2IZ4YbLkf+alKbXKIzdimlIwn9pb
uO8Y9xyWWaLLqnjueA6wXwuK8dhculS21GLsEslC7jmyNv2JUmfRYqEKfA2CTPQS
GVVbkEO5qM5g9E8bWVJMWgfgFgYwAL5fhfwbM5kmfEvOqwvvzKpQV7BT6VpwRQmq
M5bm4yNMyMkcxkJCkp+4AuRovtzogYARjglYqLCA8oKWZ4Tpcx7t
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:47 2026 by rpki-client