Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/9ok9KKkKmin8s9aN6J1hsWbixcQ.roa
File: 9ok9KKkKmin8s9aN6J1hsWbixcQ.roa (raw, json)
Hash identifier: BDJw4RPOJLgHOtfHio3MZ7btpa7LI/wrpcIbgetOy8A=
Subject key identifier: F6:89:3D:28:A9:0A:9A:29:FC:B3:D6:8D:E8:9D:61:B1:66:E2:C5:C4
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019BFB292DAB4BD0DF0B8504AE751BD04ABF
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/9ok9KKkKmin8s9aN6J1hsWbixcQ.roa
Signing time: Mon 26 Jan 2026 16:35:38 +0000
ROA not before: Mon 26 Jan 2026 16:35:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 266853
IP address blocks: 206.203.56.0/21 maxlen: 21
206.203.56.0/24 maxlen: 24
206.203.57.0/24 maxlen: 24
206.203.58.0/24 maxlen: 24
206.203.59.0/24 maxlen: 24
206.203.60.0/24 maxlen: 24
206.203.61.0/24 maxlen: 24
206.203.62.0/24 maxlen: 24
206.203.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:29:2d:ab:4b:d0:df:0b:85:04:ae:75:1b:d0:4a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 26 16:35:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6893d28a90a9a29fcb3d68de89d61b166e2c5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:f1:a1:21:7c:29:13:90:18:37:3d:3d:37:
73:bd:23:5b:27:42:6a:0e:3a:9f:18:ff:7d:eb:11:
cf:f3:84:39:a4:70:35:93:58:13:fb:65:b3:d7:a7:
6b:bb:f7:d5:fd:e4:54:03:88:a5:f3:1f:3c:7a:b8:
af:56:fa:5c:6e:10:8c:b3:6c:3e:8a:97:14:f9:96:
3b:c1:68:41:1e:97:af:d3:3a:53:d3:d3:d4:6e:fc:
b2:cf:1f:d9:d7:c5:92:30:1b:e2:6a:77:4c:2b:dd:
57:42:d4:b3:d0:ad:99:ee:9b:e5:e3:26:52:26:75:
b5:a6:22:41:0e:e0:f3:3d:58:04:46:43:b9:10:c9:
a8:71:71:10:ae:b7:3e:e3:2a:83:bb:46:bd:f3:5f:
56:0a:d0:5d:6a:5a:ec:f9:db:e5:fb:7c:4e:b2:14:
ce:cc:9d:df:7c:64:1c:e7:b3:26:17:65:92:5d:5d:
d3:e2:b9:8c:ac:77:6b:15:27:1b:a4:d3:b2:3c:84:
0d:24:e1:af:fc:43:2b:4a:e2:38:28:44:80:97:f0:
db:cc:2e:96:f0:9c:d9:21:6e:68:77:35:be:5b:2a:
61:a1:a3:1d:fa:70:aa:a8:d1:57:e1:0a:16:d8:7b:
b7:2d:21:1c:a3:59:0a:2b:94:e8:14:8e:bc:da:fb:
41:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:89:3D:28:A9:0A:9A:29:FC:B3:D6:8D:E8:9D:61:B1:66:E2:C5:C4
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/9ok9KKkKmin8s9aN6J1hsWbixcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.203.56.0/21
Signature Algorithm: sha256WithRSAEncryption
bd:82:f2:25:1d:f4:e2:bd:be:2a:50:cd:cc:df:15:69:84:6d:
d3:a2:0b:6e:c5:72:ac:37:96:c6:c8:40:5c:0f:8d:27:05:5b:
85:0e:92:bf:02:49:44:8b:54:41:83:03:59:c8:64:25:ae:a9:
8c:61:17:0f:54:e6:6f:1f:b6:6c:a2:71:97:d3:8a:83:e7:35:
0a:40:5f:aa:0d:83:44:e9:9f:84:4f:bf:a3:83:a2:68:e4:4f:
06:a3:21:37:4d:74:f3:ed:97:b1:03:04:65:2e:85:f0:e6:86:
30:ab:6a:2a:34:bc:6d:f2:4a:b7:78:94:0c:87:84:1f:49:9b:
5d:24:66:0b:9e:57:4c:11:8e:ae:c1:5e:dc:69:2b:76:3f:61:
e2:80:f0:93:86:89:49:6f:46:8e:08:7e:1b:66:94:bb:97:3e:
ca:89:08:2d:92:80:96:09:b2:c9:d3:6d:62:7f:df:8d:1f:9c:
64:30:73:c6:f8:56:4d:8d:a5:8e:08:ed:25:aa:ac:a1:a8:d1:
00:5a:a8:ff:39:17:d4:85:48:a2:f9:47:88:d2:8f:fe:1d:fa:
64:3a:0c:df:8a:a2:86:66:cb:08:33:eb:1f:40:f1:60:30:75:
c2:c6:20:24:c5:44:e1:ab:c8:ea:fa:4a:14:38:7b:47:6c:96:
fb:91:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:40:34 2026 by rpki-client