Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/9aNckCJ7rOtyHQcJ8dWJNjrl2CE.roa
File: 9aNckCJ7rOtyHQcJ8dWJNjrl2CE.roa (raw, json)
Hash identifier: wwLjfqYWdmc3gAOqi/Xh2w+ZkNRMZMyC2IBoBI+xP1o=
Subject key identifier: F5:A3:5C:90:22:7B:AC:EB:72:1D:07:09:F1:D5:89:36:3A:E5:D8:21
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 019F5FA8293B5DF88AECA62FED7DDD6C6CFA
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/9aNckCJ7rOtyHQcJ8dWJNjrl2CE.roa
Signing time: Tue 14 Jul 2026 08:04:43 +0000
ROA not before: Tue 14 Jul 2026 08:04:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29385
IP address blocks: 213.206.41.0/24 maxlen: 24
213.206.46.0/24 maxlen: 24
213.206.49.0/24 maxlen: 24
213.206.56.0/24 maxlen: 24
213.206.57.0/24 maxlen: 24
213.206.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:a8:29:3b:5d:f8:8a:ec:a6:2f:ed:7d:dd:6c:6c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Jul 14 08:04:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5a35c90227baceb721d0709f1d589363ae5d821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:82:55:b7:2b:70:ca:bf:f5:a7:18:53:15:
59:bd:7b:ca:e9:91:6a:af:e2:4f:6b:1e:cf:3a:37:
d4:51:8e:2b:52:d9:06:0b:37:48:88:60:e2:f3:74:
8a:d4:76:a4:c6:62:52:77:51:f3:d5:dd:e3:14:1d:
d2:37:08:3a:2c:2c:a4:5f:38:01:e0:37:f1:2c:c2:
4c:f1:25:3d:88:a3:7c:2b:a0:e4:06:bb:40:27:71:
85:e1:46:f8:cb:a5:9a:41:6a:76:04:2f:ad:62:06:
7f:d9:a1:a0:81:4e:63:47:b2:c3:d2:ec:93:25:24:
a6:50:36:de:43:d4:b8:c9:15:8e:d5:a4:52:f8:df:
be:7f:dd:ac:c9:06:82:57:19:a2:2f:9c:fe:cf:c6:
0b:85:06:e4:e5:41:bd:ff:87:79:3d:26:35:89:b7:
8c:6f:ea:0c:f3:f9:83:03:24:c4:aa:49:ce:48:38:
4c:97:b9:4b:da:83:b6:c3:74:79:3d:4b:3b:92:c8:
3a:70:d9:59:3d:0f:c6:eb:4b:c4:cf:4e:31:9c:03:
46:a3:ac:8b:c8:6e:52:8b:9e:b0:f8:4a:cc:9c:d2:
25:8e:1e:51:8f:d8:51:21:54:e4:7d:f9:af:09:3b:
da:6d:35:a2:63:ee:66:83:7c:b5:64:e1:f3:99:d1:
a6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A3:5C:90:22:7B:AC:EB:72:1D:07:09:F1:D5:89:36:3A:E5:D8:21
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/9aNckCJ7rOtyHQcJ8dWJNjrl2CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.206.41.0/24
213.206.46.0/24
213.206.49.0/24
213.206.56.0/23
213.206.59.0/24
Signature Algorithm: sha256WithRSAEncryption
28:20:a7:94:26:9f:7b:10:b1:6a:df:01:c9:fd:66:94:da:e8:
74:ad:a8:cc:cf:5e:24:a7:20:08:57:23:08:fb:62:a3:8b:12:
dd:f9:b6:b1:a9:7c:2e:2b:6f:12:f8:3f:1d:93:4f:98:72:30:
9c:e2:01:d0:fa:98:74:9b:4f:81:0a:9c:0c:2e:eb:5a:37:ef:
53:c3:1a:f7:bf:6b:c5:a0:3a:84:13:5a:e1:e5:bf:0f:36:d4:
da:6c:c5:d6:56:e4:fe:bd:95:01:20:2e:a5:72:04:c6:7d:48:
2d:5c:2c:d8:fd:20:5c:8b:2f:fd:b3:90:f1:7b:e8:34:72:8a:
62:ac:ef:8d:52:21:89:7b:02:60:30:c9:50:a7:9c:7a:f0:d4:
ab:8e:09:56:99:fd:de:88:15:48:bb:fc:3d:82:f3:52:58:b7:
11:d2:d1:80:db:b9:0e:d6:9f:4f:56:c8:b9:11:6d:77:cf:a8:
41:39:5a:40:3b:f5:de:b0:4a:a4:2c:38:69:31:76:d4:72:89:
98:ff:0c:70:89:e6:19:71:be:f3:5d:8e:f5:3e:04:f1:3e:5e:
78:71:d2:38:0f:1b:b0:08:24:63:cb:b8:2a:6a:2b:4b:ef:85:
45:07:3b:a2:45:54:ae:c9:95:57:4c:21:5c:30:29:a6:03:97:
bb:1c:7c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:19 2026 by rpki-client