Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/9F35VQYG8duCLJzXTAZgCylPlRE.roa
File: 9F35VQYG8duCLJzXTAZgCylPlRE.roa (raw, json)
Hash identifier: sIPd6UCmvRUQlkcto+DDZlxSdoegv/qNPWCXZlIOAYw=
Subject key identifier: F4:5D:F9:55:06:06:F1:DB:82:2C:9C:D7:4C:06:60:0B:29:4F:95:11
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019F1DE07010D748E9BFFD6B0CE01A771FFC
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/9F35VQYG8duCLJzXTAZgCylPlRE.roa
Signing time: Wed 01 Jul 2026 13:31:15 +0000
ROA not before: Wed 01 Jul 2026 13:31:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207252
IP address blocks: 37.221.95.0/24 maxlen: 24
45.133.75.0/24 maxlen: 24
45.137.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:e0:70:10:d7:48:e9:bf:fd:6b:0c:e0:1a:77:1f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jul 1 13:31:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f45df9550606f1db822c9cd74c06600b294f9511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:e5:f7:2f:83:51:e0:f1:c5:98:36:16:e3:
ae:ce:5a:b1:68:9d:54:16:cf:e4:7d:bf:fd:5b:96:
5c:b2:07:fc:93:89:c2:d1:16:c2:c4:db:1c:58:09:
81:54:44:34:58:35:a3:84:57:7b:40:22:33:25:12:
42:13:ed:a4:54:16:d5:60:b6:82:98:a5:e4:8f:5b:
85:bb:e2:a6:14:31:3d:5a:eb:24:20:68:f6:db:ef:
7d:49:58:7a:e0:c6:55:62:e2:91:1c:0f:fe:e0:70:
ed:4a:7a:a0:e5:84:ba:e8:99:f3:e8:0b:ad:29:dc:
3c:cc:53:aa:e5:7b:19:cc:bc:8d:06:3e:bd:0c:81:
d9:82:c3:dc:1d:9e:29:6d:6f:72:64:f1:2e:69:87:
6f:64:fa:56:1f:a9:1d:81:4a:4b:01:31:bb:73:ab:
ba:1f:ab:a7:39:d8:f2:55:cb:8d:a0:ce:7d:93:0b:
24:c9:45:b0:82:d4:c6:40:08:85:b6:5f:04:5c:37:
f6:c3:40:af:98:10:35:ea:f2:4e:2d:1d:b9:f4:cc:
13:9e:8a:74:c0:8a:18:d8:b3:0c:34:74:12:f6:18:
b2:f8:a5:42:e4:17:04:d6:3e:e2:40:dd:c5:eb:9a:
50:4f:3d:ee:d2:6e:19:d2:38:89:28:ef:e8:d9:ea:
dd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5D:F9:55:06:06:F1:DB:82:2C:9C:D7:4C:06:60:0B:29:4F:95:11
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/9F35VQYG8duCLJzXTAZgCylPlRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.95.0/24
45.133.75.0/24
45.137.68.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:11:99:1d:96:3d:92:77:b1:f3:58:b7:2e:43:27:0f:e0:36:
f2:4f:ea:dc:2e:b6:44:fa:d3:f7:f8:96:1f:a9:db:be:93:4e:
af:80:1f:4a:9e:4a:41:0a:c8:dd:f8:6a:1a:47:7d:97:e4:dc:
9f:40:fe:4d:7c:eb:43:9a:8d:47:26:a0:00:ac:18:c9:4f:b3:
04:05:5b:e1:25:ae:78:9d:a7:98:aa:33:1a:56:1b:c0:36:b8:
38:4b:84:11:30:27:95:e6:a7:59:d8:d9:41:ce:de:a6:45:0e:
ef:1f:55:e0:6a:f1:bb:8c:e2:9b:6e:83:57:6c:89:91:05:03:
dc:15:6a:b1:10:0e:2e:80:8a:b3:9c:52:ef:7c:26:3c:80:5d:
c2:9a:90:77:c9:f0:1d:18:a0:1f:ea:60:1f:94:0d:66:23:e1:
a8:ac:ad:35:43:e0:92:57:93:da:64:db:95:90:14:3a:b4:c3:
e7:b4:fa:89:8f:36:5f:df:8e:73:c6:2c:84:42:51:dc:e7:c5:
cf:24:80:20:e6:cc:0e:d5:b9:c2:37:de:33:ee:cc:5b:fc:15:
f6:16:13:60:93:3f:b5:4f:7d:9f:03:c0:c9:06:7f:90:12:4f:
33:0e:22:fc:4b:a2:59:8e:26:d9:3a:0e:88:e5:fd:24:26:3a:
04:aa:9b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:55 2026 by rpki-client