Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/trFNFOfv04TPCTCub_XDSsCYQN0.roa
File: trFNFOfv04TPCTCub_XDSsCYQN0.roa (raw, json)
Hash identifier: xiPIj03CQZWQ1WBWkW9nRnSeUFcChwygD1FtFHadSGg=
Subject key identifier: B6:B1:4D:14:E7:EF:D3:84:CF:09:30:AE:6F:F5:C3:4A:C0:98:40:DD
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 01A1A580393E827502B0237A7EA07A820AF1
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/trFNFOfv04TPCTCub_XDSsCYQN0.roa
Signing time: Wed 04 Nov 2026 07:40:06 +0000
ROA not before: Wed 04 Nov 2026 07:40:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204427
IP address blocks: 72.56.40.0/23 maxlen: 24
72.56.94.0/24 maxlen: 24
200.169.186.0/23 maxlen: 32
201.24.58.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:80:39:3e:82:75:02:b0:23:7a:7e:a0:7a:82:0a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Nov 4 07:40:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6b14d14e7efd384cf0930ae6ff5c34ac09840dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:96:ef:6d:84:f6:15:f5:9a:3c:f7:5f:27:
5e:2f:a1:e3:8b:2e:7a:7d:92:88:22:4e:f7:50:4a:
3c:95:5f:6e:3b:5e:5d:42:79:f4:9a:16:0b:93:da:
54:19:66:5e:60:17:1a:bb:51:82:8f:af:12:a2:9c:
ef:83:50:bb:6b:8e:9e:2b:15:d1:de:ef:1e:88:75:
2c:b7:57:d5:55:16:d5:03:7b:a1:ed:c3:9f:60:f4:
5a:9a:08:81:7f:91:c9:2e:7a:13:2c:22:66:bd:ce:
c0:2a:05:78:fe:fb:ad:53:78:78:32:90:17:93:6b:
2b:02:35:6f:82:b8:f9:62:81:9e:4d:3e:76:80:3d:
79:87:98:74:a2:33:e8:27:d7:73:75:e2:6f:bc:40:
7c:66:db:c6:0c:50:4c:73:38:60:8a:1c:b6:aa:ef:
97:3d:98:a3:c6:f5:67:f1:2b:ec:c1:79:e1:51:20:
5d:56:76:97:da:bf:37:b1:f4:05:3c:6b:c6:ad:fc:
4e:94:d1:db:aa:60:a8:b0:71:7a:c5:06:91:53:42:
13:4f:fd:fc:48:dd:d7:0b:e9:99:5c:4c:60:3b:7e:
86:94:ed:eb:81:bb:80:a7:30:4b:c6:62:b3:0e:86:
14:5f:f4:53:a1:38:61:b9:a9:54:a8:d9:9e:1d:12:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B1:4D:14:E7:EF:D3:84:CF:09:30:AE:6F:F5:C3:4A:C0:98:40:DD
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/trFNFOfv04TPCTCub_XDSsCYQN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.40.0/23
72.56.94.0/24
200.169.186.0/23
201.24.58.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:ec:e5:f2:17:ef:1a:e1:91:e3:e4:41:d5:98:62:29:52:f0:
b5:e9:43:ec:c8:37:9b:24:9f:96:69:a5:fd:66:be:07:94:4a:
1f:3f:38:0d:e4:1b:99:b9:e6:a8:9e:a5:fc:83:03:ee:f0:63:
0c:5f:5d:87:e7:95:ff:a1:79:31:c3:39:9e:46:eb:aa:2e:cc:
71:b2:ad:af:93:19:e4:0f:cd:e9:84:ab:06:35:e5:32:7b:ff:
9a:c1:51:68:d0:77:37:0b:79:f1:8f:9d:f7:1a:3f:11:c5:13:
d4:7a:30:39:bf:0d:39:2a:f4:f9:0f:ef:07:28:9c:d5:8d:19:
31:1c:55:f5:1f:fe:be:98:89:eb:40:e5:4e:af:fc:7d:10:f4:
ab:e8:69:ea:9c:9a:ac:28:b7:2c:25:ff:e6:c4:c9:75:5c:40:
b2:4a:95:92:fb:13:7b:a4:a3:fb:0f:c1:83:34:78:10:87:9c:
83:4a:38:b4:b0:40:d3:95:05:bc:33:1f:a2:e5:ab:a3:25:02:
b8:ad:87:ab:b2:1b:c9:f9:12:66:55:be:d5:0c:14:d2:8a:d1:
a8:dd:72:2a:fc:61:34:60:62:82:bd:73:0a:f1:cb:5a:ad:1f:
37:d0:13:12:eb:ae:f1:77:96:9e:c7:30:98:16:a7:c9:10:1d:
7e:07:09:47
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaGlgDk+gnUCsCN6fqB6ggrxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0
MjVjYWQwHhcNMjYxMTA0MDc0MDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmIxNGQxNGU3ZWZkMzg0Y2YwOTMwYWU2ZmY1YzM0YWMwOTg0MGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkaW722E9hX1mjz3XydeL6Hjiy56
fZKIIk73UEo8lV9uO15dQnn0mhYLk9pUGWZeYBcau1GCj68Sopzvg1C7a46eKxXR
3u8eiHUst1fVVRbVA3uh7cOfYPRamgiBf5HJLnoTLCJmvc7AKgV4/vutU3h4MpAX
k2srAjVvgrj5YoGeTT52gD15h5h0ojPoJ9dzdeJvvEB8ZtvGDFBMczhgihy2qu+X
PZijxvVn8SvswXnhUSBdVnaX2r83sfQFPGvGrfxOlNHbqmCosHF6xQaRU0ITT/38
SN3XC+mZXExgO36GlO3rgbuApzBLxmKzDoYUX/RToThhualUqNmeHRLSSwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLaxTRTn79OEzwkwrm/1w0rAmEDdMB8GA1UdIwQY
MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt
ZTg3MWIyMTc5MGRlLzEvdHJGTkZPZnYwNFRQQ1RDdWJfWERTc0NZUU4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl
LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBSDgoAwQA
SDheAwQByKm6AwQByRg6MA0GCSqGSIb3DQEBCwUAA4IBAQCl7OXyF+8a4ZHj5EHV
mGIpUvC16UPsyDebJJ+WaaX9Zr4HlEofPzgN5BuZueaonqX8gwPu8GMMX12H55X/
oXkxwzmeRuuqLsxxsq2vkxnkD83phKsGNeUye/+awVFo0Hc3C3nxj533Gj8RxRPU
ejA5vw05KvT5D+8HKJzVjRkxHFX1H/6+mInrQOVOr/x9EPSr6GnqnJqsKLcsJf/m
xMl1XECySpWS+xN7pKP7D8GDNHgQh5yDSji0sEDTlQW8Mx+i5aujJQK4rYershvJ
+RJmVb7VDBTSitGo3XIq/GE0YGKCvXMK8ctarR830BMS667xd5aexzCYFqfJEB1+
BwlH
-----END CERTIFICATE-----
Generated at Sat Nov 14 23:01:19 2026 by rpki-client