Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9NtRHIcgUmFSG0NBS4zrCPlGiJk.roa
File: 9NtRHIcgUmFSG0NBS4zrCPlGiJk.roa (raw, json)
Hash identifier: GoDlSTXKegNfiM3TB6NWmb/oky3nWZpit5prZCN8rGM=
Subject key identifier: F4:DB:51:1C:87:20:52:61:52:1B:43:41:4B:8C:EB:08:F9:46:88:99
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A019509E563977891613361FA6093622DE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9NtRHIcgUmFSG0NBS4zrCPlGiJk.roa
Signing time: Wed 19 Aug 2026 09:18:28 +0000
ROA not before: Wed 19 Aug 2026 09:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210328
IP address blocks: 185.218.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 09:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:50:9e:56:39:77:89:16:13:36:1f:a6:09:36:22:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 19 09:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4db511c87205261521b43414b8ceb08f9468899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:ca:40:c7:5b:cc:28:0f:c8:24:8a:c3:dd:
07:20:66:a4:f9:c2:6e:7a:f6:bd:a0:62:33:61:50:
34:d9:6a:39:5c:00:d1:80:4d:32:bf:46:4d:65:39:
66:79:4f:f6:c0:d4:e8:89:7a:f4:ad:c0:0b:80:07:
5c:ea:fb:64:c2:0b:67:83:48:e1:45:01:22:a5:eb:
2f:ef:43:76:0e:0c:5f:ce:25:ee:36:3a:80:1b:ea:
c5:28:d3:4c:8a:e8:77:7f:be:19:94:40:94:3d:4f:
28:ff:ec:e5:c2:20:aa:b2:97:af:81:ad:a5:ba:ed:
8b:81:91:90:e7:5b:09:85:d5:92:ac:cf:d2:e9:5c:
6e:54:e0:73:a6:25:c1:f9:42:7b:2c:29:2d:20:67:
4b:84:18:90:72:7b:4f:77:0c:e6:08:f2:39:3e:6a:
49:a7:0c:55:43:92:70:a5:82:55:a0:31:18:7f:fd:
67:9a:f2:5b:b8:58:a4:b1:a1:62:69:92:0c:0d:66:
5b:0c:fc:cf:98:88:0a:9d:b8:ed:c2:ce:e4:03:7a:
a1:76:7c:25:10:46:c6:29:af:be:8c:52:f9:33:8c:
06:21:9b:45:89:4d:e3:4d:d9:57:96:b7:bf:e0:9d:
65:1c:53:44:a7:f4:3e:41:a2:e2:cd:07:c6:c1:4d:
62:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DB:51:1C:87:20:52:61:52:1B:43:41:4B:8C:EB:08:F9:46:88:99
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9NtRHIcgUmFSG0NBS4zrCPlGiJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.138.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:97:ca:8f:b8:f3:83:54:26:a8:d7:df:24:83:69:1d:43:df:
55:b2:22:17:56:c3:38:7c:43:31:cd:04:a9:52:ef:fc:e1:fa:
f5:1d:4b:a5:8e:d8:8d:da:3c:1f:81:f6:0a:59:42:a5:0f:7f:
60:3f:1d:38:1c:6f:67:e4:ce:b8:ed:1c:0c:de:a6:61:b3:88:
81:0c:51:89:5d:67:8f:e1:11:ee:2b:c6:4b:db:4e:c7:86:3f:
27:d8:de:2c:fb:56:5e:29:93:0b:04:27:32:84:3e:7c:32:c4:
d2:70:f9:40:52:f4:ba:9d:57:1c:98:c5:94:f5:a2:f9:7f:b1:
40:f1:17:7d:86:2b:ac:ad:4d:1e:4a:88:54:bf:60:25:55:73:
82:ef:c8:c2:ce:21:a8:f4:f6:af:1a:ae:29:63:c3:28:5f:78:
cd:02:23:92:e4:a7:b0:15:ab:9b:36:26:af:be:28:7b:f9:12:
84:3b:54:d2:d7:53:cc:2c:8f:a2:9a:24:95:47:2c:e2:5e:08:
07:98:7d:98:fd:7e:0c:f5:0a:25:18:69:c1:77:c4:01:ae:b3:
3a:d9:41:9b:b3:a3:c1:ac:af:43:dc:79:22:3c:b5:46:a7:69:
c7:c6:95:1f:10:69:0a:1a:74:99:fe:41:fa:96:ac:04:a2:c7:
1a:85:72:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:48:20 2026 by rpki-client