Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/9TylcBs9Ho8y2i-aAz0F0fzBnms.roa
File: 9TylcBs9Ho8y2i-aAz0F0fzBnms.roa (raw, json)
Hash identifier: zXNgdYhWm8/zmEj+NeyJwKpEXxYhwOhYzf0Mg1Ifeyc=
Subject key identifier: F5:3C:A5:70:1B:3D:1E:8F:32:DA:2F:9A:03:3D:05:D1:FC:C1:9E:6B
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 01A03752CBC8FBA8B7C996BE39BBEE8733E5
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/9TylcBs9Ho8y2i-aAz0F0fzBnms.roa
Signing time: Tue 25 Aug 2026 05:09:27 +0000
ROA not before: Tue 25 Aug 2026 05:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400951
IP address blocks: 64.83.60.0/22 maxlen: 24
64.178.112.0/23 maxlen: 24
64.178.122.0/23 maxlen: 24
64.178.124.0/23 maxlen: 24
64.178.126.0/23 maxlen: 24
189.24.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:52:cb:c8:fb:a8:b7:c9:96:be:39:bb:ee:87:33:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Aug 25 05:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f53ca5701b3d1e8f32da2f9a033d05d1fcc19e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:e6:b3:e3:a7:7c:0e:e9:69:50:c9:f2:dd:
48:d5:e7:22:3f:03:12:0c:98:bb:7b:a2:1e:17:8a:
b0:24:61:36:87:99:08:37:8b:ec:f6:ae:15:64:33:
a9:39:87:76:81:60:72:48:9a:4a:66:90:67:6c:0b:
22:f3:46:59:db:e0:ee:30:7d:40:42:21:ed:af:fb:
cf:b3:0d:60:81:e7:3e:88:1d:2e:d6:af:11:94:9e:
1c:d8:e1:f5:c7:a2:6f:57:60:fd:07:9c:5a:e8:e9:
2e:3d:4a:f0:6b:68:52:e0:ef:66:22:8c:f9:76:0f:
cf:7c:03:87:8a:1d:6c:d0:44:41:ae:3b:a8:0b:12:
66:d9:7a:2d:fb:d4:fe:a0:51:3e:37:7b:b9:6a:d1:
c9:fc:03:d2:6e:95:28:cb:48:00:65:be:f7:0a:21:
83:21:56:9d:75:7e:78:d8:5d:16:48:fd:67:8f:89:
9d:d5:08:d7:e2:2d:77:2c:7a:ff:e4:c6:c4:32:62:
fd:42:5c:bc:95:f2:8b:66:8e:bc:c6:70:df:c2:c1:
41:99:c2:af:b5:eb:41:81:67:ad:92:f8:4e:78:b7:
8e:c0:02:e3:f1:fd:ea:30:73:25:3c:7f:60:3d:e1:
e3:4c:9e:a4:33:6a:9e:40:b2:f0:34:2d:87:cd:41:
77:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3C:A5:70:1B:3D:1E:8F:32:DA:2F:9A:03:3D:05:D1:FC:C1:9E:6B
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/9TylcBs9Ho8y2i-aAz0F0fzBnms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.83.60.0/22
64.178.112.0/23
64.178.122.0-64.178.127.255
189.24.122.0/23
Signature Algorithm: sha256WithRSAEncryption
85:25:14:1a:87:bf:16:59:c8:1b:41:b0:42:d7:84:b9:32:a0:
1b:95:44:de:4d:ae:58:ea:d4:99:49:24:03:04:e7:06:3e:6f:
6b:0d:fe:ef:4c:54:52:46:bd:e3:dc:6c:eb:b4:73:ae:cd:d5:
97:e3:ae:1e:c9:e0:82:37:3a:d0:bb:5e:f1:86:e5:11:d3:24:
b0:b6:ab:df:b1:84:67:e4:a4:05:3e:c2:06:ad:07:56:cc:b9:
12:f4:b6:72:ed:ee:14:fb:54:23:2b:b9:0f:db:08:0e:06:5d:
a9:68:68:46:51:c9:96:77:97:4e:14:2f:ac:7a:08:8a:6b:c5:
36:62:7a:9e:61:85:15:42:96:e8:8f:e4:11:b2:8a:13:f1:92:
8c:e3:71:d5:13:ce:e7:a0:50:f9:7d:59:a1:2a:4c:f8:91:87:
57:3a:4d:2b:36:7c:db:f2:48:00:34:ca:47:11:05:06:3b:ea:
c3:22:6f:3e:98:80:e1:4c:b5:7d:10:f0:28:74:4b:df:55:96:
47:f4:cf:c7:13:89:ed:3b:bc:85:f7:ba:c8:fe:43:51:f1:ed:
35:61:2a:11:84:96:b2:da:cd:25:bc:35:2e:ed:ac:4d:b5:ab:
c5:64:ae:a6:ea:0c:24:ef:3a:99:b0:46:d2:3c:32:89:a1:c1:
e3:52:23:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:47:11 2026 by rpki-client