Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9MlVlmorop11GuQA6aGhKCXMX_I.roa
File: 9MlVlmorop11GuQA6aGhKCXMX_I.roa (raw, json)
Hash identifier: BHCdPqz1pRIGVVw9PjVg8fSP7eqizYV/NhjbUdosc2A=
Subject key identifier: F4:C9:55:96:6A:2B:A2:9D:75:1A:E4:00:E9:A1:A1:28:25:CC:5F:F2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019EE41E43C12268151CF5B452A2F2530FB0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9MlVlmorop11GuQA6aGhKCXMX_I.roa
Signing time: Sat 20 Jun 2026 08:20:49 +0000
ROA not before: Sat 20 Jun 2026 08:20:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/24 maxlen: 24
87.121.147.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e4:1e:43:c1:22:68:15:1c:f5:b4:52:a2:f2:53:0f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 20 08:20:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4c955966a2ba29d751ae400e9a1a12825cc5ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:b7:f4:ed:b4:df:8f:06:ac:ea:01:f1:59:
3d:64:41:ed:d8:db:b3:b7:83:89:b1:e1:0b:9d:49:
52:e9:47:44:96:1e:6b:0e:11:16:c7:ef:13:a6:cf:
03:e3:fc:db:ae:14:cf:22:f6:31:3b:0c:6c:5f:0e:
2c:f5:24:ce:93:5c:48:87:f1:ea:8f:0a:a1:a1:38:
a2:10:59:c2:fa:c8:ba:e0:9c:5a:f9:70:c7:d9:4c:
f2:09:51:4a:e6:da:28:3a:71:47:0c:2d:22:c8:dd:
8b:53:8c:d9:ca:87:65:dd:79:a5:a3:f8:f1:d5:ac:
dd:0f:99:fc:62:cd:60:9b:38:4d:b6:38:6c:06:78:
0d:f0:1a:8e:b6:d9:11:b2:d9:66:00:f3:47:37:5a:
12:9c:0e:26:c8:44:73:84:7b:f6:43:01:55:84:41:
e9:a8:89:d2:2f:fc:29:f8:c6:9f:02:ec:7c:fd:aa:
32:fd:70:15:93:be:59:b4:b9:60:ae:b7:8d:bb:37:
71:18:b2:3c:2e:b6:d2:88:e8:4e:b0:1d:84:95:8a:
42:ab:6f:49:32:3d:68:41:d3:7b:90:8a:d8:ea:51:
b2:b1:43:d7:00:a5:32:79:14:8e:c1:aa:43:d0:1a:
6d:68:b3:91:2d:8d:e7:90:2c:25:8b:4f:ae:be:b4:
33:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C9:55:96:6A:2B:A2:9D:75:1A:E4:00:E9:A1:A1:28:25:CC:5F:F2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9MlVlmorop11GuQA6aGhKCXMX_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/24
87.121.147.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
08:54:ef:92:08:95:0f:e1:c3:98:ff:2e:95:1c:93:91:f6:ad:
d7:cd:13:0d:bb:00:93:cf:2a:a8:e8:62:a5:78:18:ab:bc:0c:
69:9e:9f:de:cc:22:50:db:99:01:cd:5d:75:13:bc:bb:f6:eb:
a8:37:9e:4d:0a:1d:10:94:3a:15:f8:16:0c:50:82:e7:8c:05:
39:26:0f:33:4b:26:d9:ce:2e:69:20:9b:f4:b7:7a:67:c8:1c:
ea:cb:47:3e:ee:f7:f6:e9:3b:ba:94:86:50:0f:56:8b:35:ea:
23:27:e4:8f:96:15:a9:e5:4d:13:a5:58:cd:47:6c:aa:2d:86:
9c:5a:4f:ec:68:c6:eb:7e:83:b7:25:1d:dc:ab:10:e6:96:9c:
ef:1d:23:59:58:a9:8d:c7:8a:1a:46:35:b8:00:cd:32:2c:c9:
09:14:82:f0:2a:94:c0:78:5e:84:7f:1d:59:bd:35:9e:3f:fd:
3c:8f:1b:9a:6f:5e:2b:2b:26:a3:dd:30:08:09:c3:15:0f:5e:
14:7f:00:1c:f9:a3:ec:2f:6f:78:9d:9f:8a:b5:b1:e0:b3:70:
c8:82:d8:fa:6b:9c:b6:4e:7d:24:a9:98:85:62:97:93:68:b3:
1b:e1:ac:fa:a0:9f:ec:4a:9b:99:56:07:a0:f4:1e:de:97:28:
ac:47:10:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 13:33:05 2026 by rpki-client