Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/Q9MMK2jX7oFaxPIBQ_rjAEBshOQ.roa
File: Q9MMK2jX7oFaxPIBQ_rjAEBshOQ.roa (raw, json)
Hash identifier: dXmtL6fHBlnD6F3o0HvOrowNNpFXpHlehl60bZfG+XM=
Subject key identifier: 43:D3:0C:2B:68:D7:EE:81:5A:C4:F2:01:43:FA:E3:00:40:6C:84:E4
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019F814953C70D6FA568344943237766A4F5
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/Q9MMK2jX7oFaxPIBQ_rjAEBshOQ.roa
Signing time: Mon 20 Jul 2026 20:48:14 +0000
ROA not before: Mon 20 Jul 2026 20:48:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209641
IP address blocks: 72.56.144.0/22 maxlen: 24
72.56.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:49:53:c7:0d:6f:a5:68:34:49:43:23:77:66:a4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Jul 20 20:48:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43d30c2b68d7ee815ac4f20143fae300406c84e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:58:1f:12:7e:4c:23:06:5b:fd:60:82:a5:
53:d8:65:9f:50:45:7e:bd:45:68:cf:99:0d:1f:9a:
dc:b9:80:73:2c:53:d0:f5:96:a6:c1:f2:5e:c4:5a:
88:cd:15:65:af:cd:61:b4:ca:3d:f0:da:91:e4:9f:
99:7a:ba:aa:2b:f4:d5:15:0a:59:6d:76:88:8a:c6:
f2:c2:88:34:93:a0:1d:86:51:5d:32:48:7f:1f:79:
80:14:7c:9b:90:e9:73:d0:f2:2e:58:bc:72:38:b2:
3a:e9:fc:03:d5:60:14:7b:0f:f7:8e:98:2e:bd:d9:
6b:df:ea:bf:fe:20:f4:72:fd:67:63:8f:22:aa:93:
66:42:6b:af:6f:d5:b1:e5:fc:e8:22:df:0b:77:08:
05:83:6a:0a:b9:03:c1:48:19:18:9a:ee:9d:1e:27:
6a:a1:1c:a2:e3:be:64:d6:ff:46:c1:f8:54:86:b1:
b1:f7:94:b8:ff:5f:63:94:61:dd:3d:81:f7:e3:fe:
2e:8b:e8:9b:3c:b2:15:6a:34:6a:c3:8a:04:05:66:
5f:df:c8:d8:22:b7:94:d9:e1:70:be:42:ec:e0:4f:
4d:e0:aa:a3:7b:9c:af:17:70:4f:62:3d:a8:08:20:
19:45:21:ae:79:e6:c6:3d:7d:f8:1a:76:b1:06:bf:
ef:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D3:0C:2B:68:D7:EE:81:5A:C4:F2:01:43:FA:E3:00:40:6C:84:E4
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/Q9MMK2jX7oFaxPIBQ_rjAEBshOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.144.0/22
72.56.152.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:c6:2f:02:37:9a:fb:e3:2e:45:00:8f:1a:6e:c2:d2:b1:e4:
cf:d0:e3:b6:cf:ba:63:6d:83:a8:3c:e4:13:d6:b0:15:0c:70:
fb:2f:14:9e:32:29:76:35:56:ed:a5:37:af:84:2b:a7:b0:01:
b7:a0:1d:23:ee:1c:d7:4f:4e:31:05:df:8a:33:ed:8a:e0:f1:
ac:7f:5e:5d:40:eb:c2:d4:2e:fe:b2:41:82:d1:04:a5:18:0d:
42:05:94:e9:da:13:18:a8:81:f4:4b:78:6e:95:e7:80:89:97:
bd:79:30:d1:c1:00:1c:36:36:6a:f0:9b:80:f8:c8:72:8b:de:
16:64:2f:ee:1c:86:c7:c0:aa:34:3c:a2:c6:fa:0d:4e:59:41:
a9:bd:d1:09:aa:81:7c:cd:32:61:9b:8a:33:75:a8:b7:0a:92:
6d:4c:f4:df:3a:ef:06:57:36:72:7b:c1:b0:d7:ed:23:50:6c:
92:5e:48:de:54:98:5b:a7:a0:0e:6a:fd:8d:02:56:62:8f:9c:
21:e5:8f:64:cc:04:a1:f7:38:9b:e8:00:51:84:c9:5c:37:1b:
05:11:72:a9:ff:3e:58:9d:6a:38:f2:7f:a4:39:7f:05:d5:70:
a1:79:29:04:43:e7:38:db:b0:c9:fc:59:e1:93:52:4c:c8:3a:
68:09:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:38 2026 by rpki-client