Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/9y9vUW18OgMTeEnJ_6NHhJaCuGE.roa
File: 9y9vUW18OgMTeEnJ_6NHhJaCuGE.roa (raw, json)
Hash identifier: VPYfKLh4X+Cxtn4NwGg/AMQBRlBu4LVEqeIjyHaPvbE=
Subject key identifier: F7:2F:6F:51:6D:7C:3A:03:13:78:49:C9:FF:A3:47:84:96:82:B8:61
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A12105DF136EC73B9C39F31D4B67D95654
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/9y9vUW18OgMTeEnJ_6NHhJaCuGE.roa
Signing time: Fri 09 Oct 2026 14:16:35 +0000
ROA not before: Fri 09 Oct 2026 14:16:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 109.229.223.0/24 maxlen: 24
185.220.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:05:df:13:6e:c7:3b:9c:39:f3:1d:4b:67:d9:56:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Oct 9 14:16:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f72f6f516d7c3a03137849c9ffa347849682b861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dd:d5:2b:f9:3d:7c:75:34:90:4e:8b:82:ee:
7d:d6:97:c1:8b:92:44:e8:ed:47:2a:b5:68:c2:66:
db:3a:99:d4:2c:5a:fe:42:e5:26:a0:85:18:cc:51:
82:62:31:72:5f:d9:e1:2f:2f:7f:03:c3:b7:a6:6a:
6e:44:9c:84:b7:46:84:cd:2a:11:f6:09:96:07:1c:
c4:29:85:8d:04:e0:ba:6b:60:cd:a9:46:f6:87:fd:
18:40:e6:42:a7:8e:a8:6e:33:ff:1f:5d:5d:48:76:
c2:9b:2f:ee:92:94:42:fb:dc:87:0c:35:67:cd:e6:
a5:8d:5e:b2:a9:0f:c0:95:9c:70:77:2b:98:a8:15:
fb:47:2d:a8:d3:af:3b:db:36:29:d6:dc:51:a5:6c:
af:60:49:bc:ed:b1:f0:96:2c:85:9f:5b:f6:94:63:
84:bb:c4:b8:2b:b9:aa:c7:22:8a:14:ca:7c:c6:27:
81:44:8b:f0:d0:35:9a:93:ea:18:65:93:7f:15:fd:
0e:30:b2:1d:9a:24:d4:3d:1a:ae:75:e7:20:5f:b4:
da:d2:44:5a:f3:ae:90:ce:e2:b7:de:2a:f3:79:65:
d3:bf:05:9a:4a:d3:bc:69:96:1f:92:ab:1f:89:9c:
76:d2:11:83:9b:1d:61:a1:88:01:0e:4a:ac:fa:c5:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2F:6F:51:6D:7C:3A:03:13:78:49:C9:FF:A3:47:84:96:82:B8:61
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/9y9vUW18OgMTeEnJ_6NHhJaCuGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.229.223.0/24
185.220.196.0/24
Signature Algorithm: sha256WithRSAEncryption
80:6e:8e:66:bf:a7:fa:94:68:df:52:ad:0d:11:39:60:61:01:
0e:70:ea:6e:d4:0a:f6:a9:01:72:a7:96:16:85:7a:9f:64:da:
5b:2b:cd:27:1a:9e:ff:da:1d:03:98:f5:1c:d8:3e:fa:84:8e:
04:98:31:3b:5e:7a:38:6c:f7:98:61:bc:63:ae:e3:3c:82:f3:
43:07:74:76:f4:cc:03:9d:4b:0d:cc:11:50:e7:f4:28:a2:14:
b4:ab:63:00:7b:0c:1d:bf:7f:4b:5f:66:03:9f:eb:51:19:c1:
1b:1a:13:00:9d:c8:94:89:38:e0:83:28:1d:bf:5b:ab:57:b5:
52:e8:20:59:d6:ba:cc:c2:6d:33:f4:5e:aa:7f:a3:4e:3d:7c:
a4:1e:eb:90:aa:43:77:1a:c7:b3:8d:b3:3b:11:73:1d:8d:0c:
20:62:5a:4f:ff:1e:b4:33:33:95:cd:8a:d7:9d:58:12:cb:db:
a4:82:16:7b:70:75:52:7e:e6:4a:06:18:42:a3:4d:9e:d4:ec:
57:e5:8a:39:4a:87:ed:2b:9e:a5:5c:dd:b4:fd:66:31:38:25:
5f:ce:51:90:64:af:6d:b9:fe:0f:c2:d5:ef:06:c5:41:2c:dd:
21:a0:4e:f1:f2:4b:63:6e:82:4e:3b:fa:3a:d5:90:28:af:40:
76:56:13:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:10:59 2026 by rpki-client