Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/v9DMp1Fk-lPPCM2fwl5O46yl1Gw.roa
File: v9DMp1Fk-lPPCM2fwl5O46yl1Gw.roa (raw, json)
Hash identifier: o/+8R+F9iwPUicLa90mzTWdAs+gA6HkMyzvg2Tzuf5k=
Subject key identifier: BF:D0:CC:A7:51:64:FA:53:CF:08:CD:9F:C2:5E:4E:E3:AC:A5:D4:6C
Certificate issuer: /CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Certificate serial: 01A183B416BCBC68D1134511C2AF6ADB4395
Authority key identifier: 66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/v9DMp1Fk-lPPCM2fwl5O46yl1Gw.roa
Signing time: Wed 28 Oct 2026 18:09:39 +0000
ROA not before: Wed 28 Oct 2026 18:09:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 172.111.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:b4:16:bc:bc:68:d1:13:45:11:c2:af:6a:db:43:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Validity
Not Before: Oct 28 18:09:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfd0cca75164fa53cf08cd9fc25e4ee3aca5d46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:e8:08:67:b9:f2:ae:d5:59:d6:bb:41:b7:
15:ae:24:f9:1d:86:08:d3:0a:27:7e:0c:c8:1b:be:
6d:69:e1:c5:9e:7c:45:52:43:b1:bb:b2:43:64:f7:
e4:3c:89:bb:86:23:8f:06:8d:56:ac:4e:91:14:b0:
43:1e:43:3a:28:ae:aa:18:bd:42:a7:18:b9:99:77:
68:d1:2a:0b:a0:ed:9e:fc:de:79:ec:6a:54:59:7e:
1c:4a:59:13:9a:1b:cd:6e:2f:8f:28:95:f2:85:23:
0a:22:3c:b0:27:7e:1d:08:31:99:57:8c:11:8f:dd:
41:6e:e4:f2:1f:43:ab:72:ea:be:a1:36:7c:a1:97:
07:d4:3b:f2:69:2c:9c:96:e8:87:d5:6a:0b:1f:8f:
f4:7e:4e:98:54:0d:7a:58:6e:39:43:1d:e8:8e:d4:
23:fe:c2:65:87:29:fe:41:9c:06:5b:be:99:54:d5:
9f:13:88:99:f5:f9:5a:93:24:87:1b:8a:c8:5d:e0:
fc:59:6d:d9:3d:0a:a3:e1:6b:ba:76:5d:13:a1:ac:
0b:cc:f0:ff:c7:67:7d:30:e6:f7:15:71:b5:59:69:
12:0b:d1:9e:5b:3d:79:dd:86:ca:5c:38:6f:3e:76:
87:f6:97:ea:59:4e:a5:28:f0:69:bb:8b:84:c0:2c:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D0:CC:A7:51:64:FA:53:CF:08:CD:9F:C2:5E:4E:E3:AC:A5:D4:6C
X509v3 Authority Key Identifier:
keyid:66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/v9DMp1Fk-lPPCM2fwl5O46yl1Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.111.33.0/24
Signature Algorithm: sha256WithRSAEncryption
87:79:42:c1:65:c0:cb:58:7c:e3:9f:8c:cd:48:9f:d7:e2:5e:
4b:ed:63:23:91:bd:c0:31:9f:65:28:84:00:33:04:75:72:64:
53:d3:c1:3a:6a:45:ed:97:9e:71:87:07:6e:48:25:48:dd:21:
05:66:fe:2a:ce:2c:ad:3b:46:cf:c8:89:a3:31:0b:91:b6:4d:
ea:6a:e7:05:c6:e6:bf:5c:c3:9e:33:03:c7:ab:19:a8:a1:8b:
05:77:67:c9:ec:c0:b0:03:71:5f:80:4e:db:47:92:f9:20:11:
67:e6:d8:52:98:71:7b:cb:b5:a8:fa:ca:f9:0f:02:cf:34:26:
2f:78:43:b8:e4:8b:d2:61:11:dd:2e:be:5f:e4:9e:c1:ee:2a:
3e:ea:e8:13:47:25:da:bf:23:14:79:dd:0e:07:fe:a2:6d:d3:
d5:74:a1:da:49:30:a8:4d:69:bf:a3:b3:f7:83:b4:10:70:1c:
62:59:29:79:70:7d:73:fa:a2:7d:8b:67:9f:87:f3:96:df:f6:
c0:6c:b8:c5:47:bf:22:78:9e:3a:4f:ef:de:6d:5e:c4:76:1c:
a1:97:c1:cf:ff:74:55:62:ef:8c:66:05:91:21:cd:3d:e3:3e:
76:6f:49:0c:05:ad:08:a1:60:7b:47:3c:cc:74:c5:e5:7c:22:
cd:2f:41:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:56:01 2026 by rpki-client