Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/9yY8_kPwbJQlMVRK-s3WemN0vcw.roa
File: 9yY8_kPwbJQlMVRK-s3WemN0vcw.roa (raw, json)
Hash identifier: KyzvUMOsdrXGJh1N54OVOxKl71iRblVtyyR/BZvcxM8=
Subject key identifier: F7:26:3C:FE:43:F0:6C:94:25:31:54:4A:FA:CD:D6:7A:63:74:BD:CC
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FACD20DDA942CEE1A309478E0C567CE20
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/9yY8_kPwbJQlMVRK-s3WemN0vcw.roa
Signing time: Wed 29 Jul 2026 07:41:14 +0000
ROA not before: Wed 29 Jul 2026 07:41:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63099
IP address blocks: 212.189.7.0/24 maxlen: 24
212.189.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 14:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:d2:0d:da:94:2c:ee:1a:30:94:78:e0:c5:67:ce:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 29 07:41:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7263cfe43f06c942531544afacdd67a6374bdcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:95:87:f5:2b:f7:4a:6d:18:17:80:5b:f6:90:
7f:e4:ce:96:d3:15:42:78:52:b7:de:df:70:53:8b:
19:87:32:b0:65:49:99:76:4f:b7:b9:9a:28:6c:5c:
16:e4:88:37:34:9c:e4:9d:bc:7e:6a:48:f3:64:44:
45:65:6c:fe:bb:b7:b3:4d:e7:9b:4f:de:17:56:54:
a7:8a:40:45:2d:a6:a3:b1:86:01:cb:46:81:5a:b9:
61:a1:59:b0:ce:f3:e7:17:6d:54:d2:1c:b0:14:3e:
51:ae:ee:66:44:65:41:7e:59:41:74:d2:d7:e0:e4:
84:f0:8b:61:07:9a:a2:32:52:47:d4:0d:2a:20:30:
83:e1:60:f0:71:c3:15:97:54:f9:97:d4:f0:83:8b:
5f:03:d0:ac:93:76:4c:fa:29:f8:a4:43:34:c0:82:
7b:33:af:e6:36:02:14:03:5d:27:6e:92:75:77:61:
89:d3:7e:94:6a:82:41:2f:e8:41:4d:d5:15:d3:a4:
df:a7:ae:d0:15:95:61:37:26:b4:e1:9b:5b:16:f1:
ad:13:86:10:23:35:76:d3:a0:ab:34:6f:ea:9c:17:
16:39:fa:36:d8:06:18:45:97:b5:ba:33:d1:46:fe:
30:2d:1c:c4:c7:38:db:59:a5:f3:21:47:72:99:64:
3a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:26:3C:FE:43:F0:6C:94:25:31:54:4A:FA:CD:D6:7A:63:74:BD:CC
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/9yY8_kPwbJQlMVRK-s3WemN0vcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.7.0/24
212.189.61.0/24
Signature Algorithm: sha256WithRSAEncryption
de:37:dc:79:e1:16:6b:1a:68:7c:af:ab:1c:eb:76:a0:08:28:
63:f9:b3:a0:e6:52:36:cc:46:43:f0:5f:15:d1:2f:ea:a3:f0:
6a:36:b9:c3:f3:34:93:83:07:dc:12:40:20:cb:85:ac:14:0c:
5e:6e:38:38:65:87:d9:3c:9a:fc:e5:07:80:da:bd:2d:75:bc:
e6:82:cc:f3:2b:1e:f2:88:66:14:95:fc:d8:75:2c:9d:26:19:
e0:53:ef:24:bd:c5:43:e5:91:1c:8b:bd:a6:6f:23:26:5b:7c:
41:dd:a3:14:de:51:cd:bc:42:0f:d8:ba:99:4e:48:5b:19:55:
48:23:35:fa:fe:64:78:ba:56:c8:c0:09:51:6d:d4:4d:96:3c:
fe:6d:0f:2a:f5:a4:d5:59:82:7d:47:99:d1:1a:01:46:86:8e:
32:6a:a0:93:d8:45:da:9d:fe:ed:65:41:22:47:ba:e1:16:1a:
72:82:e7:6e:a0:c7:9c:7a:cd:41:27:23:e4:c3:a2:ed:14:35:
d9:a3:60:2f:64:18:d5:9f:e9:40:3b:65:91:26:1b:ad:b6:b5:
64:b0:82:cb:f5:7f:e8:ab:3e:3d:15:ed:24:e6:40:bd:46:56:
f6:0e:ef:20:22:94:52:a2:cd:9b:6b:7a:a2:56:41:e7:18:21:
ef:90:00:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 22:33:29 2026 by rpki-client