Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9rpw6CcLHV9PchUILi5lTkFAR9I.roa
File: 9rpw6CcLHV9PchUILi5lTkFAR9I.roa (raw, json)
Hash identifier: 6T9uGTZ0dkyyWDnshMPSqYWxh63sxuJsYk/lvZ5LM3c=
Subject key identifier: F6:BA:70:E8:27:0B:1D:5F:4F:72:15:08:2E:2E:65:4E:41:40:47:D2
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019FF57F0C572BB32E63C0655D1374377786
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9rpw6CcLHV9PchUILi5lTkFAR9I.roa
Signing time: Wed 12 Aug 2026 10:22:51 +0000
ROA not before: Wed 12 Aug 2026 10:22:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 80.96.64.0/23 maxlen: 23
80.96.116.0/22 maxlen: 22
85.121.18.0/23 maxlen: 23
85.121.36.0/23 maxlen: 23
194.102.216.0/24 maxlen: 24
217.156.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:7f:0c:57:2b:b3:2e:63:c0:65:5d:13:74:37:77:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 12 10:22:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6ba70e8270b1d5f4f7215082e2e654e414047d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f1:e0:34:2c:49:fd:69:bb:e9:ea:45:d7:6e:
c8:06:1f:bf:b8:56:f7:26:c2:7f:69:b3:34:ba:77:
46:78:da:85:74:7e:54:ba:3e:e1:cc:9e:46:d2:25:
b0:7f:a3:6f:47:d6:0a:04:7e:68:38:6a:a4:b9:4c:
cf:58:b3:6d:26:67:6b:8a:e4:c8:1e:60:61:63:82:
bf:42:cb:21:a0:f2:05:6a:19:27:47:4d:32:fd:7a:
e4:ba:37:f6:6a:30:51:f2:6d:02:7e:5c:37:83:67:
ca:e0:69:f9:83:6d:59:73:3a:ee:0a:ac:07:73:1b:
53:92:d2:24:7a:06:a1:02:f2:5c:c8:3e:d5:0c:8d:
57:5d:cd:5d:11:c0:90:71:eb:0d:f8:aa:d7:54:66:
48:8f:14:58:37:0b:2e:ef:59:62:54:5c:02:9c:35:
7f:d3:b1:c8:18:74:1b:38:bd:5a:d6:5d:14:ac:13:
5b:d6:a2:13:b3:dd:3c:07:7e:56:fa:79:bb:1f:92:
47:1b:98:45:aa:fc:93:39:92:74:f0:16:c5:d3:13:
44:9f:a6:61:b9:0f:40:b0:1a:68:fa:aa:e9:23:7e:
e1:99:0f:42:ac:db:4e:59:9a:fe:fb:56:f1:72:a9:
9a:66:3e:96:a1:c1:3f:c0:e4:f4:a4:2b:2b:de:34:
4e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BA:70:E8:27:0B:1D:5F:4F:72:15:08:2E:2E:65:4E:41:40:47:D2
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9rpw6CcLHV9PchUILi5lTkFAR9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.64.0/23
80.96.116.0/22
85.121.18.0/23
85.121.36.0/23
194.102.216.0/24
217.156.91.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:38:ae:86:6a:40:ce:7e:13:2c:8b:7a:99:73:6c:20:07:3c:
1a:33:d1:b9:c9:72:d7:bd:e0:09:6d:06:a2:15:cc:12:2f:51:
48:a8:cf:a5:70:e4:8c:5e:86:1e:68:3f:81:35:c3:36:a9:dd:
0f:52:b2:bf:c3:86:61:81:5a:a4:f8:32:dd:75:78:55:54:b4:
8b:d1:4a:04:8d:bb:72:4f:e0:23:3f:19:78:9b:75:76:73:69:
aa:20:dd:76:03:b9:b8:d2:9a:b5:be:5a:b8:bd:a9:85:ea:7c:
b1:9e:4b:55:ec:83:ca:d6:07:5e:48:9c:05:f3:b3:32:af:27:
89:7e:82:6f:76:a7:c6:cb:6c:71:a0:14:3a:52:88:a0:08:c9:
75:0d:97:1e:6f:64:8e:b6:87:4a:d8:f7:ba:d4:a5:cb:3a:47:
06:55:70:c1:fa:64:02:2d:ed:b4:bf:1f:74:a7:a6:6c:1c:93:
b2:1c:8e:86:41:39:d0:8c:18:62:2d:cc:04:62:92:7b:cd:45:
99:73:a4:5f:52:91:11:a6:f2:15:08:73:05:34:79:20:30:96:
5c:bc:4e:59:fa:e0:9a:d1:bc:f9:0c:ed:84:ff:86:44:ba:21:
2e:e6:e4:34:72:2c:50:8d:9a:60:45:67:11:c3:a7:2b:3a:d6:
b5:3a:11:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:09 2026 by rpki-client