Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/ySkdtLpwthgQcRcY1mmiVALopO4.roa
File: ySkdtLpwthgQcRcY1mmiVALopO4.roa (raw, json)
Hash identifier: lcmNAh++zdti5i3/Z0f1GF+aPbDpUmxj40nEHbXXFoY=
Subject key identifier: C9:29:1D:B4:BA:70:B6:18:10:71:17:18:D6:69:A2:54:02:E8:A4:EE
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019F41815A99DF57221301884384EFC03DA5
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/ySkdtLpwthgQcRcY1mmiVALopO4.roa
Signing time: Wed 08 Jul 2026 11:33:44 +0000
ROA not before: Wed 08 Jul 2026 11:33:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209372
IP address blocks: 72.56.128.0/18 maxlen: 24
72.56.192.0/20 maxlen: 24
72.56.208.0/21 maxlen: 21
191.218.144.0/20 maxlen: 24
191.223.16.0/20 maxlen: 24
200.96.96.0/20 maxlen: 24
201.2.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:81:5a:99:df:57:22:13:01:88:43:84:ef:c0:3d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Jul 8 11:33:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9291db4ba70b61810711718d669a25402e8a4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e2:ff:1b:22:6b:26:c1:cf:7e:6e:9f:66:14:
c8:8c:d5:d0:0f:d8:0c:7a:f7:44:85:75:39:1c:19:
22:2f:95:1a:b6:fa:a9:c8:e7:5d:94:2f:f4:84:fa:
d1:f6:71:1f:35:98:d8:77:dc:7f:0b:f7:4a:24:56:
73:20:6b:0b:6e:86:fb:e5:ce:79:3f:56:38:e2:59:
e7:42:f4:24:2f:ef:f1:1e:c9:0c:58:ac:47:bb:70:
86:68:85:f6:e9:13:45:f0:d7:c7:27:2f:84:f7:86:
c9:c9:f0:ec:da:92:a2:a9:3e:60:a3:a5:a0:a5:c6:
f4:a4:3a:86:54:4b:9c:7d:7e:93:b8:c0:fb:c3:94:
3f:88:c0:42:cb:62:52:41:ba:2c:4f:83:71:b0:b2:
43:fa:ab:2a:19:cf:04:94:ed:1b:17:63:96:39:18:
28:33:9b:2a:3d:ba:c0:04:a8:cb:21:dc:f0:e7:c8:
2d:1a:81:69:7f:41:73:36:52:6a:95:bf:ca:ac:ed:
29:59:c1:4a:91:1d:07:58:0c:19:98:1d:41:a7:c4:
1c:76:74:33:82:f6:b5:3b:a0:2b:28:a2:77:64:ad:
06:f4:a0:6a:39:e7:1f:a5:97:4e:4b:a8:6d:ad:62:
9f:ee:48:13:5b:25:98:aa:4d:4a:8a:17:16:d7:3f:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:29:1D:B4:BA:70:B6:18:10:71:17:18:D6:69:A2:54:02:E8:A4:EE
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/ySkdtLpwthgQcRcY1mmiVALopO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.128.0-72.56.215.255
191.218.144.0/20
191.223.16.0/20
200.96.96.0/20
201.2.224.0/20
Signature Algorithm: sha256WithRSAEncryption
d6:2f:cf:f6:73:c5:0a:af:bc:3e:66:b4:0c:86:13:33:8f:fa:
96:ec:c5:34:7a:8d:a7:3c:3d:1f:58:94:f6:ef:9a:07:0d:75:
13:14:a8:39:c6:e0:25:1c:e6:9b:9b:2c:54:df:85:5d:6a:1b:
a7:98:a4:37:02:ed:8c:b5:ee:89:3f:7e:71:d5:9b:be:ce:24:
18:e5:57:79:c8:b1:eb:7c:84:c9:17:12:ad:5e:02:c2:ae:a0:
8f:c2:53:30:95:26:59:0a:ee:d0:0d:07:cd:32:d4:5c:52:d3:
23:4f:45:55:39:2e:d2:5f:a7:bf:28:50:23:98:fd:ca:c0:67:
9c:6e:56:29:aa:12:93:93:9d:10:db:5f:e5:9d:37:9c:7c:3b:
95:0c:29:bf:0a:a0:35:64:1e:f1:7d:88:77:48:d0:cd:c2:e2:
c4:12:5a:16:62:9b:9e:28:2c:93:36:94:42:32:03:07:f1:f6:
58:5e:aa:8e:36:8f:8a:bd:7c:a2:6b:3e:6e:0c:14:58:f9:cf:
d4:64:e0:ed:cf:fd:ba:a7:6f:72:19:91:59:92:0e:e1:eb:21:
5f:11:76:c2:67:2e:7d:fe:ba:ae:ff:6d:4d:87:24:f3:fe:47:
36:54:81:d8:12:9a:4c:62:79:a3:6c:83:62:56:7b:1d:15:53:
83:39:d8:72
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ9BgVqZ31ciEwGIQ4TvwD2lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0
MjVjYWQwHhcNMjYwNzA4MTEzMzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTI5MWRiNGJhNzBiNjE4MTA3MTE3MThkNjY5YTI1NDAyZThhNGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OL/GyJrJsHPfm6fZhTIjNXQD9gM
evdEhXU5HBkiL5UatvqpyOddlC/0hPrR9nEfNZjYd9x/C/dKJFZzIGsLbob75c55
P1Y44lnnQvQkL+/xHskMWKxHu3CGaIX26RNF8NfHJy+E94bJyfDs2pKiqT5go6Wg
pcb0pDqGVEucfX6TuMD7w5Q/iMBCy2JSQbosT4NxsLJD+qsqGc8ElO0bF2OWORgo
M5sqPbrABKjLIdzw58gtGoFpf0FzNlJqlb/KrO0pWcFKkR0HWAwZmB1Bp8QcdnQz
gva1O6ArKKJ3ZK0G9KBqOecfpZdOS6htrWKf7kgTWyWYqk1KihcW1z9VKwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFMkpHbS6cLYYEHEXGNZpolQC6KTuMB8GA1UdIwQY
MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt
ZTg3MWIyMTc5MGRlLzEveVNrZHRMcHd0aGdRY1JjWTFtbWlWQUxvcE80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl
LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAdIOIAD
BANIONADBAS/2pADBAS/3xADBATIYGADBATJAuAwDQYJKoZIhvcNAQELBQADggEB
ANYvz/ZzxQqvvD5mtAyGEzOP+pbsxTR6jac8PR9YlPbvmgcNdRMUqDnG4CUc5pub
LFTfhV1qG6eYpDcC7Yy17ok/fnHVm77OJBjlV3nIset8hMkXEq1eAsKuoI/CUzCV
JlkK7tANB80y1FxS0yNPRVU5LtJfp78oUCOY/crAZ5xuVimqEpOTnRDbX+WdN5x8
O5UMKb8KoDVkHvF9iHdI0M3C4sQSWhZim54oLJM2lEIyAwfx9lheqo42j4q9fKJr
Pm4MFFj5z9Rk4O3P/bqnb3IZkVmSDuHrIV8RdsJnLn3+uq7/bU2HJPP+RzZUgdgS
mkxieaNsg2JWex0VU4M52HI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:24:18 2026 by rpki-client