Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/I72kmK2oJ75mIwxt8hjG7GUupzk.roa
File: I72kmK2oJ75mIwxt8hjG7GUupzk.roa (raw, json)
Hash identifier: K8Phul8KmeYidC/APf8t5kfkNOalCulE4TpB9idF+tc=
Subject key identifier: 23:BD:A4:98:AD:A8:27:BE:66:23:0C:6D:F2:18:C6:EC:65:2E:A7:39
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 01A0621F19A5B219774C2AB06CE5A1CE571B
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/I72kmK2oJ75mIwxt8hjG7GUupzk.roa
Signing time: Wed 02 Sep 2026 12:36:40 +0000
ROA not before: Wed 02 Sep 2026 12:36:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5486
IP address blocks: 81.5.0.0/21 maxlen: 21
81.5.8.0/21 maxlen: 21
81.5.16.0/21 maxlen: 21
2001:40a8:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:1f:19:a5:b2:19:77:4c:2a:b0:6c:e5:a1:ce:57:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Sep 2 12:36:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23bda498ada827be66230c6df218c6ec652ea739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:a9:fd:52:da:63:bc:29:ba:ba:de:35:64:
8e:0f:64:e5:2e:d2:37:1a:78:d3:65:19:1b:af:0a:
0b:14:aa:b2:d1:ee:27:32:e1:91:71:3a:d5:a1:9e:
53:6d:0a:08:70:d4:ca:81:35:8c:a9:f9:dc:8c:a7:
82:89:9a:e2:69:a9:ac:57:93:bc:60:24:7c:e9:45:
e2:8f:48:03:a1:27:27:5a:e3:66:10:e8:51:03:f7:
42:23:ac:04:51:39:b7:a2:34:f8:fc:d2:71:4b:45:
14:fe:13:d0:f3:59:0c:30:49:f0:05:40:5c:59:93:
ab:88:ac:fa:fa:65:88:08:60:61:4b:bd:1c:2f:ff:
0d:f0:f7:3a:00:41:07:0c:96:c9:a7:27:27:2d:1a:
73:6b:d3:54:d2:f5:41:44:30:b7:24:65:6d:b1:6f:
58:4f:08:04:d9:c6:8a:fb:0b:8b:64:5d:ab:94:4d:
17:a1:21:bc:04:05:d2:fd:31:9b:a5:53:ef:4c:d2:
c5:a5:9a:1c:76:8f:e6:59:c5:76:ac:95:0f:9b:e7:
cf:cf:06:f8:57:e0:1d:95:95:4d:d1:5b:55:bb:42:
b8:0a:51:21:bf:fe:c8:da:9a:f4:a9:58:ba:6b:8b:
c7:c9:98:6d:a6:89:1a:3b:08:9e:17:f8:3f:28:4f:
d5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BD:A4:98:AD:A8:27:BE:66:23:0C:6D:F2:18:C6:EC:65:2E:A7:39
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/I72kmK2oJ75mIwxt8hjG7GUupzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.0.0-81.5.23.255
IPv6:
2001:40a8:2000::/40
Signature Algorithm: sha256WithRSAEncryption
9c:a2:cf:d6:47:ce:15:f4:45:76:18:06:22:1c:e0:32:2d:b4:
ad:cf:8f:76:bd:b9:4f:65:d0:fc:95:66:e5:a8:b1:8c:6f:50:
a3:91:28:22:f2:83:f6:e2:3c:16:03:94:fd:07:e9:d9:e4:a4:
5e:25:8f:97:45:a5:f3:8c:53:f7:e7:05:b3:bb:17:e1:42:0f:
c8:db:2e:59:3f:32:da:79:39:2e:7d:89:e4:3e:05:4b:7d:2d:
25:0a:3e:93:b5:7a:c8:05:fb:aa:1b:0a:42:53:8e:ef:81:6a:
29:bf:0c:e9:f8:43:16:29:b5:48:f1:63:a4:7f:d3:72:04:72:
7f:8a:7a:71:15:27:1d:5d:54:ac:d3:58:39:8f:ec:b6:87:73:
f2:f8:f6:0f:43:c4:93:3d:53:a9:e9:41:d2:a5:7a:6c:9c:a7:
38:28:20:c5:41:88:3a:b9:0c:b1:70:b6:a1:7d:0c:f6:b4:41:
87:fa:a8:c1:f1:28:08:15:83:82:e8:1b:6b:07:15:df:48:46:
90:11:9f:98:34:d8:21:69:3f:aa:69:7f:f6:5f:ea:88:0e:f9:
24:5a:df:97:d8:fd:52:c8:71:17:a9:8c:e1:08:33:48:68:1e:
62:7a:77:74:09:65:90:c2:0f:e5:ca:d0:17:fa:34:15:af:14:
ec:65:1a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:20 2026 by rpki-client