Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/9_bPlGUj5iXU8FSHc2iYYMrUhFI.roa
File: 9_bPlGUj5iXU8FSHc2iYYMrUhFI.roa (raw, json)
Hash identifier: a7ijHe46CpPJ54j8yOXhnml59/jtp51CtVfRaD2QfYM=
Subject key identifier: F7:F6:CF:94:65:23:E6:25:D4:F0:54:87:73:68:98:60:CA:D4:84:52
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A00F18F13B1A253363FCF939E329B8641B
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/9_bPlGUj5iXU8FSHc2iYYMrUhFI.roa
Signing time: Mon 17 Aug 2026 09:41:27 +0000
ROA not before: Mon 17 Aug 2026 09:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 109.66.62.0/23 maxlen: 24
109.66.64.0/23 maxlen: 24
109.66.82.0/23 maxlen: 24
109.66.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:18:f1:3b:1a:25:33:63:fc:f9:39:e3:29:b8:64:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 17 09:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7f6cf946523e625d4f0548773689860cad48452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:31:82:ac:d7:0d:62:7d:59:b9:eb:bb:dd:f7:
d9:a2:a1:25:ad:cf:dc:66:6b:a3:a4:df:df:0d:49:
7a:09:19:de:31:81:37:ab:23:e3:8e:91:66:99:bb:
54:4e:38:8e:1b:a7:94:62:5e:91:d9:e8:2d:95:84:
d2:6d:a9:70:8b:5c:f5:f3:22:f1:4a:e2:30:a5:34:
c4:e0:59:5b:75:ad:81:56:c8:d5:00:c5:a9:4e:5a:
db:a2:5e:0d:68:39:c6:09:55:21:b1:9b:4d:9f:06:
c2:57:c6:99:e2:2d:bd:7b:e5:65:a1:20:6c:7b:61:
a9:48:c5:92:7f:57:66:7b:e3:00:d6:29:d1:3b:ef:
dd:16:93:15:31:13:b1:dd:8a:96:e2:a9:37:94:14:
84:5d:2b:79:d6:fb:f0:ee:5f:e2:c5:5e:90:41:60:
c3:e6:5b:a9:1f:3d:91:45:c9:b1:15:6c:d7:74:65:
4c:a1:b1:83:91:71:8a:de:6a:20:5b:a4:8b:37:c0:
68:9e:77:12:d8:0d:25:cb:0c:b1:42:91:d1:26:69:
28:d7:08:4c:30:23:85:4b:2e:67:9e:ad:72:97:99:
40:3a:f5:c0:09:5a:aa:20:b1:c4:a3:84:92:5d:74:
f5:57:a1:e0:ef:59:22:ed:f7:06:43:7e:4b:23:1a:
af:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F6:CF:94:65:23:E6:25:D4:F0:54:87:73:68:98:60:CA:D4:84:52
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/9_bPlGUj5iXU8FSHc2iYYMrUhFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.62.0-109.66.65.255
109.66.82.0/23
109.66.92.0/23
Signature Algorithm: sha256WithRSAEncryption
54:95:54:8d:ee:84:2b:8a:55:91:bd:9a:69:61:1d:2c:0b:a8:
01:3b:3e:82:c3:14:5c:2b:a9:34:e0:57:b2:3d:09:f3:f1:b6:
44:47:b4:e5:e8:b9:38:9d:2d:a9:9f:ed:7a:a1:50:64:8f:13:
96:6f:93:f2:cb:af:6e:09:36:0b:45:ad:3e:3e:6a:5e:69:a6:
e5:34:43:a5:e3:2e:97:c1:5e:11:e0:71:87:6c:bd:0f:0d:19:
04:b9:47:7e:80:73:01:43:41:29:a0:25:c9:2f:2e:e9:0d:3b:
0a:c8:63:f8:99:3d:a1:4a:3b:5d:b7:2f:8e:a8:c9:ac:34:74:
76:40:ec:2e:f9:19:95:0f:25:8f:a8:fc:19:ef:fd:e0:2d:71:
94:98:6c:74:3c:ad:26:85:d7:2a:08:bb:0c:61:e9:ca:82:65:
91:cd:9e:76:f4:5f:39:f0:d6:29:88:39:8b:cf:c8:5e:7c:e4:
e5:d6:d5:00:be:1f:1c:63:63:67:41:fb:5c:f1:84:0d:52:c3:
5b:67:48:8d:71:e9:12:3d:83:85:60:a8:b7:18:77:cc:86:44:
ea:c6:15:d0:d8:2f:20:6d:8f:4e:f2:54:1b:d2:05:31:8e:50:
a8:bb:23:b1:09:f1:8a:5a:c4:30:aa:f0:ba:0f:75:ec:b0:59:
9f:8b:24:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 22:34:37 2026 by rpki-client