Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/9ml_vDT2d-jqiT0almrW1zTj91g.roa
File: 9ml_vDT2d-jqiT0almrW1zTj91g.roa (raw, json)
Hash identifier: iCdcPeAL09pOgPTNT11aEGN+On0OQ3C0grDxHkWM7Ao=
Subject key identifier: F6:69:7F:BC:34:F6:77:E8:EA:89:3D:1A:96:6A:D6:D7:34:E3:F7:58
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 019CED7146B73D93E60A503118A029CB28E7
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/9ml_vDT2d-jqiT0almrW1zTj91g.roa
Signing time: Sat 14 Mar 2026 17:42:29 +0000
ROA not before: Sat 14 Mar 2026 17:42:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215120
IP address blocks: 91.227.33.0/24 maxlen: 24
91.244.70.0/24 maxlen: 24
91.244.71.0/24 maxlen: 24
93.157.138.0/24 maxlen: 24
93.157.139.0/24 maxlen: 24
157.173.28.0/24 maxlen: 24
193.178.186.0/24 maxlen: 24
2a07:cec0:4300::/48 maxlen: 48
2a07:cec0:4500::/48 maxlen: 48
2a07:cec0:4600::/48 maxlen: 48
2a07:cec4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:71:46:b7:3d:93:e6:0a:50:31:18:a0:29:cb:28:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Mar 14 17:42:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6697fbc34f677e8ea893d1a966ad6d734e3f758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:13:74:dd:bb:c6:92:78:7f:43:ee:90:4f:
62:5f:76:ab:c9:3d:19:5b:96:03:90:97:5d:44:c7:
77:90:57:b8:28:eb:c5:f6:06:fa:87:e8:55:8c:73:
aa:bf:0c:3d:42:91:3c:89:3a:6f:4c:76:5c:10:71:
19:78:d6:e5:24:63:67:53:48:e8:72:d3:bf:8e:16:
8e:f2:26:c5:7d:c7:14:71:4c:1c:49:bf:79:3b:63:
34:16:f4:4e:87:20:1b:56:a6:b9:06:0d:7e:7e:7c:
aa:c3:54:92:69:32:f0:26:1e:b3:75:62:58:4a:f7:
41:35:2b:67:bd:2b:0e:23:1e:32:52:c1:37:31:12:
11:97:76:a7:7a:7d:b6:e6:f7:20:c2:ac:91:cf:a9:
e3:ca:61:12:f1:0a:41:24:e6:c8:73:83:d0:f2:81:
68:f9:83:87:a9:d8:22:f1:89:25:9f:ce:d1:c7:43:
e8:e7:e5:63:d7:83:72:de:a6:93:b4:4f:e0:0a:98:
7c:7b:57:fc:a2:37:e4:f8:51:54:4b:86:31:6c:ab:
12:69:6d:e6:d7:6b:34:0a:0a:90:17:b3:9a:b5:ce:
8e:83:36:61:14:9e:db:a8:7e:61:c7:73:1d:3f:2f:
93:76:e4:6e:0a:64:80:9d:f8:49:ef:df:12:43:af:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:69:7F:BC:34:F6:77:E8:EA:89:3D:1A:96:6A:D6:D7:34:E3:F7:58
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/9ml_vDT2d-jqiT0almrW1zTj91g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.33.0/24
91.244.70.0/23
93.157.138.0/23
157.173.28.0/24
193.178.186.0/24
IPv6:
2a07:cec0:4300::/48
2a07:cec0:4500::/48
2a07:cec0:4600::/48
2a07:cec4::/30
Signature Algorithm: sha256WithRSAEncryption
51:94:13:5f:56:2b:82:fc:1a:33:6e:c0:e5:d3:30:6a:ab:d5:
d9:7f:62:a1:6f:37:91:1f:6d:a0:23:b1:f8:02:cb:1f:31:3d:
b9:d3:d5:0b:b7:6c:c5:6b:b8:29:ad:d9:04:50:c5:6d:75:d9:
40:eb:28:fb:85:88:ad:50:ea:a3:f1:44:5a:b3:b2:2b:4e:9c:
fd:b1:b3:c7:51:79:80:96:3c:fe:33:46:e8:0f:93:51:fd:4a:
55:c1:dc:d3:fd:5c:bb:34:b5:12:40:ca:7f:f7:23:cc:c4:12:
2b:f4:1b:4f:07:1d:ee:e7:c1:8b:b8:1e:a7:0d:04:fd:7e:a0:
60:89:3c:d8:f0:f0:3f:cd:c4:50:69:83:37:61:80:07:00:f8:
ca:28:70:96:a7:1c:53:de:0f:c0:c4:ee:9a:6f:4f:e9:9e:98:
db:a9:de:09:7c:60:88:50:af:47:d6:5c:8c:ce:0b:84:c2:7a:
5d:11:0d:ab:79:ae:e4:19:29:53:79:a8:06:95:06:2f:d8:2a:
f7:3f:0d:bf:92:38:d2:7c:7d:1d:be:df:d5:22:49:63:fb:a6:
ba:f1:d2:bd:47:66:2d:92:a4:5e:0a:42:ac:4b:29:0c:71:0e:
98:a7:e0:c1:03:85:ff:8c:49:7d:a1:2d:2e:60:3f:d7:ef:c4:
80:0d:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 10:30:29 2026 by rpki-client