Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/9FHZxYEYO2T03vdrk0Gm6lLRVNI.roa
File: 9FHZxYEYO2T03vdrk0Gm6lLRVNI.roa (raw, json)
Hash identifier: BnAcFaoVjjUdhkSHx2DYwTMQ4jv8ptKkNzwfA/tYvto=
Subject key identifier: F4:51:D9:C5:81:18:3B:64:F4:DE:F7:6B:93:41:A6:EA:52:D1:54:D2
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019F7A4251F23BF6594034C66B8E26107B0C
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/9FHZxYEYO2T03vdrk0Gm6lLRVNI.roa
Signing time: Sun 19 Jul 2026 12:03:14 +0000
ROA not before: Sun 19 Jul 2026 12:03:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213529
IP address blocks: 2a0d:d940:20::/44 maxlen: 44
2a0d:d940:f0::/48 maxlen: 48
2a0d:d940:2008::/48 maxlen: 48
2a0d:d940:9006::/48 maxlen: 48
2a0d:d940:900e::/48 maxlen: 48
2a0d:d940:90ab::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7a:42:51:f2:3b:f6:59:40:34:c6:6b:8e:26:10:7b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jul 19 12:03:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f451d9c581183b64f4def76b9341a6ea52d154d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:f5:86:02:5c:b9:22:99:c7:2c:6e:3d:19:
8e:fe:dd:19:b7:a1:b4:a9:e2:16:1e:bf:3f:6f:a5:
11:8e:6c:f5:ed:1b:c7:f0:4b:e9:32:59:de:db:bf:
5f:83:a7:64:73:ab:e4:d1:f9:fd:e5:74:8d:2e:f4:
dc:95:62:a4:b1:27:9c:3e:6d:34:06:a9:50:94:9e:
f2:52:38:76:b4:fd:e2:53:b6:d5:a3:23:05:45:e0:
c4:84:ad:af:17:06:6b:35:18:59:ef:af:ec:a0:22:
99:c2:87:f0:ed:81:b5:26:03:bc:92:56:49:60:a4:
97:0f:ea:5b:fc:cd:9b:66:29:18:22:fe:70:b9:95:
16:95:57:f3:9b:a6:f5:66:0d:ac:31:96:f5:9d:07:
03:c1:5a:24:9e:ba:3a:a6:c0:0d:18:fb:96:90:7c:
7f:b1:3d:ac:c5:27:ab:d7:5e:77:c1:dd:54:65:b8:
20:f8:e5:68:8f:e7:fe:50:ad:9a:d9:a5:73:97:67:
1a:47:74:83:ef:7c:75:ca:80:9d:0c:a9:9c:42:bd:
c1:4a:85:51:18:54:f8:5a:17:e6:a9:91:b3:da:93:
32:58:c7:d1:8a:5c:4d:fe:66:56:c1:71:86:4d:c8:
2b:5c:e4:27:c3:a4:a2:75:cf:26:61:38:0d:69:a0:
db:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:51:D9:C5:81:18:3B:64:F4:DE:F7:6B:93:41:A6:EA:52:D1:54:D2
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/9FHZxYEYO2T03vdrk0Gm6lLRVNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:20::/44
2a0d:d940:f0::/48
2a0d:d940:2008::/48
2a0d:d940:9006::/48
2a0d:d940:900e::/48
2a0d:d940:90ab::/48
Signature Algorithm: sha256WithRSAEncryption
3c:f2:c7:e6:14:43:ad:7e:61:a1:98:b2:17:c8:bc:a6:c3:93:
55:0d:31:dc:37:8d:31:bf:39:4d:5c:25:1d:9f:c9:d3:2f:e2:
d6:cd:91:fa:b3:06:63:c4:e0:43:68:c2:78:42:77:59:ea:2b:
b7:b2:df:f0:67:75:00:3e:be:29:2f:a0:8c:8c:8e:55:a6:0a:
fc:a3:cb:27:fd:ae:fc:6c:36:06:9c:2e:ca:9c:ee:cc:8d:ec:
95:6f:87:09:e0:c4:2a:4b:2f:7e:a3:75:c2:4f:a4:9e:79:76:
f3:56:91:a4:78:fd:a8:12:44:dd:25:65:1e:04:b0:38:65:9d:
8a:f7:e4:a0:a8:2c:cf:db:7e:d5:62:b5:6f:0b:2c:c5:3b:78:
8f:09:a9:01:51:cb:1e:7b:e2:2c:10:0a:70:03:8a:6f:2e:f0:
cc:75:fc:4c:82:ba:eb:b5:1e:9f:ec:8c:be:59:4e:19:38:d4:
fe:62:1c:10:19:87:27:b3:54:f6:fa:22:70:03:3c:7e:e7:82:
60:4b:93:70:42:e4:60:5f:6b:f9:1f:96:fa:ee:d0:49:31:ac:
64:39:82:37:d1:86:3e:81:ac:7b:21:0d:6a:e7:7a:c7:68:1e:
06:61:e1:e8:1c:1c:7a:7e:59:b7:b6:91:e7:62:9d:b4:23:d4:
12:76:ba:26
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZ96QlHyO/ZZQDTGa44mEHsMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwNzE5MTIwMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDUxZDljNTgxMTgzYjY0ZjRkZWY3NmI5MzQxYTZlYTUyZDE1NGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUf1hgJcuSKZxyxuPRmO/t0Zt6G0
qeIWHr8/b6URjmz17RvH8EvpMlne279fg6dkc6vk0fn95XSNLvTclWKksSecPm00
BqlQlJ7yUjh2tP3iU7bVoyMFReDEhK2vFwZrNRhZ76/soCKZwofw7YG1JgO8klZJ
YKSXD+pb/M2bZikYIv5wuZUWlVfzm6b1Zg2sMZb1nQcDwVoknro6psANGPuWkHx/
sT2sxSer1153wd1UZbgg+OVoj+f+UK2a2aVzl2caR3SD73x1yoCdDKmcQr3BSoVR
GFT4WhfmqZGz2pMyWMfRilxN/mZWwXGGTcgrXOQnw6Sidc8mYTgNaaDbtwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFPRR2cWBGDtk9N73a5NBpupS0VTSMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvOUZIWnhZRVlPMlQwM3ZkcmswR202bExSVk5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcEKg3ZQAAg
AwcAKg3ZQADwAwcAKg3ZQCAIAwcAKg3ZQJAGAwcAKg3ZQJAOAwcAKg3ZQJCrMA0G
CSqGSIb3DQEBCwUAA4IBAQA88sfmFEOtfmGhmLIXyLymw5NVDTHcN40xvzlNXCUd
n8nTL+LWzZH6swZjxOBDaMJ4QndZ6iu3st/wZ3UAPr4pL6CMjI5Vpgr8o8sn/a78
bDYGnC7KnO7MjeyVb4cJ4MQqSy9+o3XCT6SeeXbzVpGkeP2oEkTdJWUeBLA4ZZ2K
9+SgqCzP237VYrVvCyzFO3iPCakBUcsee+IsEApwA4pvLvDMdfxMgrrrtR6f7Iy+
WU4ZONT+YhwQGYcns1T2+iJwAzx+54JgS5NwQuRgX2v5H5b67tBJMaxkOYI30YY+
gax7IQ1q53rHaB4GYeHoHBx6flm3tpHnYp20I9QSdrom
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:43:32 2026 by rpki-client