Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/w9hMpn22nS31hORs4FbfAZ4nCN8.roa
File: w9hMpn22nS31hORs4FbfAZ4nCN8.roa (raw, json)
Hash identifier: R5QWnTCvV96e97UtI23G1RgAIOStBivXSgOB+MvPMuQ=
Subject key identifier: C3:D8:4C:A6:7D:B6:9D:2D:F5:84:E4:6C:E0:56:DF:01:9E:27:08:DF
Certificate issuer: /CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Certificate serial: 019F4B3616688273D6E465FAF9A87AB56ADF
Authority key identifier: 47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/w9hMpn22nS31hORs4FbfAZ4nCN8.roa
Signing time: Fri 10 Jul 2026 08:47:43 +0000
ROA not before: Fri 10 Jul 2026 08:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198499
IP address blocks: 86.36.64.0/19 maxlen: 24
185.37.96.0/24 maxlen: 24
185.37.97.0/24 maxlen: 24
185.37.98.0/24 maxlen: 24
185.37.108.0/22 maxlen: 24
2a00:f0e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:36:16:68:82:73:d6:e4:65:fa:f9:a8:7a:b5:6a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Validity
Not Before: Jul 10 08:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3d84ca67db69d2df584e46ce056df019e2708df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:e0:e1:39:ca:f6:39:bc:e0:5a:24:57:69:
d7:1b:4e:88:e7:da:bd:48:84:33:01:6f:0f:5a:37:
22:2c:1b:a5:5c:fa:45:af:90:b8:0c:74:e7:0e:f2:
88:0b:f6:cc:d7:c7:5c:2c:71:51:1d:0b:2f:28:d6:
2f:aa:23:65:5d:b0:55:43:10:02:ae:2a:79:8f:77:
0b:e5:6d:bb:af:f5:c1:15:e4:46:3a:03:b8:dc:a6:
b9:b5:f5:e8:7e:c5:bf:f0:11:bd:f7:ff:b4:39:a2:
2a:db:98:b6:58:02:4d:79:8d:73:65:c0:75:d1:f4:
b1:c8:0d:b9:e6:84:95:a5:f2:12:df:31:e9:39:29:
22:22:d3:f9:79:39:bd:33:f7:a8:fc:4c:de:1e:02:
c1:ee:81:25:5b:52:2a:f3:e3:9d:81:cb:a4:58:9e:
d6:64:59:55:66:6a:06:40:92:1e:31:d8:b1:0f:c0:
d3:96:09:b4:7a:91:68:03:c5:05:ee:73:d5:39:2c:
73:c8:9e:9c:03:7b:30:3e:df:2f:75:6c:f4:85:07:
68:81:f7:10:6e:fa:0f:38:28:22:20:a3:c6:82:3e:
f9:6f:a1:37:1e:e2:6e:6a:49:57:0f:28:97:67:63:
a6:36:50:f9:9d:55:45:04:e2:05:54:e7:1e:cd:37:
15:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D8:4C:A6:7D:B6:9D:2D:F5:84:E4:6C:E0:56:DF:01:9E:27:08:DF
X509v3 Authority Key Identifier:
keyid:47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/w9hMpn22nS31hORs4FbfAZ4nCN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.36.64.0/19
185.37.96.0-185.37.98.255
185.37.108.0/22
IPv6:
2a00:f0e0::/32
Signature Algorithm: sha256WithRSAEncryption
1d:9f:3e:7e:f6:1f:85:36:2c:a3:66:fb:14:c4:99:38:e6:c5:
6b:94:1a:b5:b8:08:69:4d:fa:74:9d:6f:84:2b:15:4f:10:c6:
ef:16:b0:ab:5f:ae:f4:39:f7:79:97:f7:86:5b:8d:b9:41:f1:
55:a9:d7:c7:da:7a:3f:62:51:9c:f7:c8:2a:62:44:19:62:da:
de:62:7d:2b:8c:72:c8:2e:7e:df:36:d7:f2:d5:4f:54:e1:0c:
6c:cd:c6:29:3b:1b:ce:4e:0b:5c:b6:1d:73:e6:87:1d:f5:31:
24:87:78:25:50:e1:68:87:32:aa:e7:37:a2:39:a7:59:84:b5:
3c:6e:78:f4:f3:09:60:38:b1:3c:8e:8e:5e:ba:44:51:55:bf:
06:e0:93:57:e6:e3:cc:d7:cf:c2:1f:a6:e5:9c:61:3f:67:e6:
f3:e1:66:71:66:7e:12:86:41:89:ad:8f:48:82:8e:a2:7e:3e:
0c:b6:02:97:77:28:95:43:e4:09:03:44:09:28:b3:11:0b:09:
8a:07:d4:b2:22:c0:28:d7:5d:76:47:4d:98:5d:f1:cb:6e:50:
3d:59:32:30:fb:e6:ae:ac:48:08:21:22:31:17:e7:8f:df:c0:
a3:65:96:3e:aa:49:76:ce:b0:24:05:d8:13:0d:43:22:2e:c9:
6b:2d:2e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:40 2026 by rpki-client