Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/9L3U50vXnrZHvDkXweg9rCkbhrY.roa
File: 9L3U50vXnrZHvDkXweg9rCkbhrY.roa (raw, json)
Hash identifier: Y2oEmMQ+H+sFspRu0+it/tWlZrUGUN5NZppwSwZgOH4=
Subject key identifier: F4:BD:D4:E7:4B:D7:9E:B6:47:BC:39:17:C1:E8:3D:AC:29:1B:86:B6
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 019F766DC9ADA1A516AB34E4541943B85809
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/9L3U50vXnrZHvDkXweg9rCkbhrY.roa
Signing time: Sat 18 Jul 2026 18:12:14 +0000
ROA not before: Sat 18 Jul 2026 18:12:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 185.54.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:6d:c9:ad:a1:a5:16:ab:34:e4:54:19:43:b8:58:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Jul 18 18:12:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4bdd4e74bd79eb647bc3917c1e83dac291b86b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:06:4e:69:70:b9:4c:25:0c:15:f8:26:54:
e9:cf:30:ef:99:b7:d4:0c:7a:08:db:30:ff:e4:af:
b9:18:c4:12:97:0f:45:40:11:c2:5e:5e:ad:b5:b9:
31:9e:87:8b:c4:c6:da:1f:78:ad:f2:7f:bf:0e:cc:
b2:f3:bb:3e:61:c1:c9:2c:6b:5c:f8:25:42:2e:fe:
df:ed:3c:bb:17:3d:6c:a9:42:1c:d0:3c:bc:2f:c9:
c7:7a:74:6d:04:4f:17:ec:e8:5e:7f:ac:f8:3e:99:
5d:f7:8f:69:85:7b:e4:81:9f:cb:d7:85:c4:d6:3f:
a9:ff:60:1a:64:e7:10:ae:b4:76:9a:46:b7:24:86:
b1:05:02:98:ff:56:d1:ed:c6:cb:3c:e4:2e:0b:cd:
f7:43:82:66:9c:48:84:2e:b6:a0:74:e3:ce:5f:12:
3c:0f:b9:4d:a0:1f:a2:f9:04:51:c4:32:af:27:8d:
dd:ac:2f:8b:7a:da:6f:e7:d6:76:6d:10:53:49:8d:
8e:aa:d4:fa:8c:75:25:49:2b:aa:3d:f4:a5:41:8c:
32:31:cb:6a:a4:da:26:5e:ac:b6:92:0b:1d:b9:e5:
f1:fa:c3:db:1c:0e:59:7e:4a:58:e3:ea:cc:9c:19:
59:5c:bf:24:5a:f4:8e:65:2a:75:c5:06:43:94:9a:
57:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BD:D4:E7:4B:D7:9E:B6:47:BC:39:17:C1:E8:3D:AC:29:1B:86:B6
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/9L3U50vXnrZHvDkXweg9rCkbhrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.14.0/23
Signature Algorithm: sha256WithRSAEncryption
68:0c:b2:3b:ac:2b:85:65:e1:c9:1f:7e:0a:1b:1d:4e:97:f8:
e6:fd:df:e0:91:84:2e:c7:8c:09:8d:38:24:73:74:93:73:d5:
a5:1f:39:df:14:91:16:18:ff:63:bd:d2:23:29:83:a4:f0:76:
ce:5d:d1:37:16:f9:d4:8e:30:d3:d0:ef:14:88:a1:41:93:3c:
68:f5:97:27:ea:a7:db:b1:5c:aa:66:c0:0f:f3:24:0c:6f:24:
a2:a0:4f:ad:d2:8c:82:a0:f2:9a:b6:4f:47:4c:39:74:8a:7e:
67:24:d9:75:46:07:29:7a:71:32:ff:50:bc:ab:1a:6c:4b:04:
6f:aa:cc:57:0b:f1:cf:27:c9:d0:7d:9d:22:05:5c:ba:0a:0f:
7e:0f:b4:fb:f2:21:f4:4d:8a:59:c1:c7:0a:c3:15:c8:d2:26:
da:44:5d:fe:be:38:c0:74:b6:7f:82:70:69:8e:8c:b7:60:a0:
00:e0:b4:32:cf:05:8f:33:96:cc:e4:a9:6a:93:b1:3d:76:0c:
a4:c7:5b:b2:3c:00:f3:ab:42:fc:51:52:a4:52:2e:05:7d:86:
a7:68:27:ff:60:71:40:c6:df:c0:2e:8a:04:08:cc:e6:47:b7:
b8:97:03:c4:5a:db:b7:f4:a3:29:44:c2:16:bd:ed:07:a8:29:
2e:ec:48:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 14:53:16 2026 by rpki-client