Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/9_lEI-YO-xsNbdJzpz_Zj20rYco.roa
File: 9_lEI-YO-xsNbdJzpz_Zj20rYco.roa (raw, json)
Hash identifier: oMnrwxFfNZp1LGwhuhUfXcc2UVGqfAbo9ZJKmysRQV0=
Subject key identifier: F7:F9:44:23:E6:0E:FB:1B:0D:6D:D2:73:A7:3F:D9:8F:6D:2B:61:CA
Certificate issuer: /CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Certificate serial: 019F2368C847CB0C7DAC1198C4646DC55312
Authority key identifier: C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/9_lEI-YO-xsNbdJzpz_Zj20rYco.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20940
IP address blocks: 109.207.109.0/24 maxlen: 24
185.225.250.0/24 maxlen: 24
185.225.251.0/24 maxlen: 24
2a10:f783:23::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c8:47:cb:0c:7d:ac:11:98:c4:64:6d:c5:53:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7f94423e60efb1b0d6dd273a73fd98f6d2b61ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9b:a8:a6:87:da:8a:69:b2:49:8e:c9:ba:2f:
e1:98:86:da:01:89:a1:05:9b:4e:ec:b5:5a:0e:07:
0f:3d:ae:05:b0:9b:2b:6f:3a:28:82:b6:f8:5f:8d:
31:a1:95:dc:7c:6b:e1:50:ba:fd:9d:10:2c:e5:a5:
0c:4a:85:d9:12:e5:f8:a2:0e:ec:36:f3:32:e1:42:
b0:23:13:6a:bb:bf:fd:75:82:13:52:29:76:3b:56:
82:a7:b6:dd:8f:f6:f2:86:c2:60:24:31:d8:c5:9a:
bb:25:94:36:8f:fc:3d:71:83:99:c6:ba:ce:ce:29:
60:10:a2:de:16:59:cd:22:c4:d8:c0:87:4d:00:c7:
a2:82:87:a1:75:a1:64:c7:13:cb:f6:00:ee:ae:e8:
31:f8:67:6d:63:51:9c:c2:f6:5a:0b:13:70:15:9c:
f7:28:b8:8a:1a:18:80:27:2d:11:d5:45:4c:c7:2f:
b1:39:46:da:f7:6a:6f:14:23:26:d0:81:cb:68:70:
51:c2:2d:51:2c:60:77:2e:b1:5a:df:5a:1b:78:78:
7a:f1:9d:a6:10:26:5f:8d:6b:0d:f7:74:f8:14:ee:
00:09:6f:7a:8e:4d:ad:38:2d:25:80:6b:8a:f7:27:
0b:f8:d0:9e:47:5b:a7:2f:89:84:cf:56:69:b3:9b:
ef:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F9:44:23:E6:0E:FB:1B:0D:6D:D2:73:A7:3F:D9:8F:6D:2B:61:CA
X509v3 Authority Key Identifier:
keyid:C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/9_lEI-YO-xsNbdJzpz_Zj20rYco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.207.109.0/24
185.225.250.0/23
IPv6:
2a10:f783:23::/48
Signature Algorithm: sha256WithRSAEncryption
11:55:cc:72:0e:f5:fe:ff:f2:be:62:d8:3a:00:a9:0a:0b:17:
97:fc:41:6f:c1:ad:9d:7c:d8:ec:4b:90:20:ae:b2:80:a9:bb:
01:7a:51:fb:0c:a8:48:18:8b:f7:1f:f2:ba:2d:2c:a3:77:b7:
d4:80:e1:d2:a7:d4:46:cc:be:6f:c9:29:53:97:77:14:ed:64:
6d:a0:f8:bb:9e:aa:c5:ff:2a:2d:ab:7e:08:de:5d:93:a4:ba:
fe:6b:d3:89:ed:7b:39:71:42:16:3c:89:38:93:b0:7c:87:9f:
30:e8:10:fa:8c:91:b6:ad:d5:3f:c5:bf:34:aa:1f:2f:6e:3b:
18:74:9c:2b:2b:65:83:bf:9e:18:8a:e6:fd:c3:e5:30:88:be:
2d:8e:b4:bf:2f:65:e5:45:9d:bf:df:c2:31:6e:d3:9e:c4:16:
76:ac:52:9e:45:aa:11:e4:6f:17:ff:20:a5:24:f4:86:9c:43:
d8:44:cb:1e:8e:20:1c:e8:7e:a4:b2:e9:f1:6c:c8:2b:ee:81:
53:33:b5:d3:28:69:d9:3a:67:f5:82:95:71:08:67:1b:70:9c:
5d:8b:65:96:6a:85:4c:94:e2:2b:ba:17:cb:b4:83:5b:d9:09:
86:62:cf:6b:1f:b4:ea:6d:87:98:6d:d5:ec:0e:5f:20:1d:1a:
71:37:32:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:02:10 2026 by rpki-client