Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/n9Ht5cc9EC52PXPY-DcLQ4kK8iE.roa
File: n9Ht5cc9EC52PXPY-DcLQ4kK8iE.roa (raw, json)
Hash identifier: B1iM2N3YyMrY/9zWi0s2/kFXHtr59fgeW1lnvkzfrZc=
Subject key identifier: 9F:D1:ED:E5:C7:3D:10:2E:76:3D:73:D8:F8:37:0B:43:89:0A:F2:21
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019DA656D1F2786ED89251A2F58879DA200B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/n9Ht5cc9EC52PXPY-DcLQ4kK8iE.roa
Signing time: Sun 19 Apr 2026 15:23:20 +0000
ROA not before: Sun 19 Apr 2026 15:23:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 81.18.48.0/24 maxlen: 24
109.121.37.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
178.219.1.0/24 maxlen: 24
178.219.6.0/24 maxlen: 24
178.253.221.0/24 maxlen: 24
178.253.229.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.164.0/24 maxlen: 24
188.255.198.0/24 maxlen: 24
212.69.8.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 15:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:56:d1:f2:78:6e:d8:92:51:a2:f5:88:79:da:20:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 19 15:23:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fd1ede5c73d102e763d73d8f8370b43890af221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:40:b5:2e:39:00:c9:4a:65:3e:be:77:8e:39:
50:d4:bc:8d:ba:69:7e:60:af:d2:f9:3b:e8:0a:3d:
44:62:96:31:68:35:c6:c6:1a:04:35:53:ac:b7:3b:
7b:cd:f1:75:1d:9f:7c:bc:ad:43:bf:cd:03:9b:89:
01:18:a7:66:00:98:28:d5:27:40:f7:d2:b9:da:ef:
93:34:95:ef:79:86:eb:0f:54:67:04:51:a7:d9:4c:
c1:a2:ec:aa:db:34:2e:04:1a:a3:45:60:a4:26:59:
48:38:e1:95:ac:b4:00:70:06:e6:4c:88:7e:17:87:
79:a2:58:dd:b1:bb:9f:21:ba:ae:ec:6d:7d:f0:35:
c2:ef:81:0e:07:96:af:77:89:52:54:89:fc:26:bd:
87:34:21:69:d8:a6:fc:f5:be:e3:54:a5:61:c4:a0:
9a:4f:c2:63:4b:55:b9:06:92:b1:35:9a:37:f5:8d:
c3:e3:15:51:42:58:e1:88:92:70:a0:4f:03:21:42:
0e:44:ab:fb:c9:94:a4:52:09:48:76:9c:c8:b2:d8:
ae:c3:9c:b5:1e:da:b1:78:8e:90:11:57:1e:07:c7:
6b:db:33:4d:d9:04:a4:cc:17:45:4f:9c:48:60:6f:
6b:ec:ff:a2:6f:70:c8:82:b8:f7:71:fb:94:d4:83:
68:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D1:ED:E5:C7:3D:10:2E:76:3D:73:D8:F8:37:0B:43:89:0A:F2:21
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/n9Ht5cc9EC52PXPY-DcLQ4kK8iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.18.48.0/24
109.121.37.0/24
109.121.45.0/24
178.219.1.0/24
178.219.6.0/24
178.253.221.0/24
178.253.229.0/24
185.47.91.0/24
188.255.164.0/24
188.255.198.0/24
212.69.8.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:30:e3:2d:ff:cf:55:49:68:a1:1d:7f:cd:37:8d:77:89:27:
86:91:27:10:73:b5:ba:14:0c:23:94:0a:1d:cc:9c:50:69:41:
15:2b:a0:a3:14:b4:4b:d1:b9:5c:73:5e:1d:d1:1e:6c:c3:9e:
25:2c:90:7d:eb:18:82:a0:d1:1f:3f:60:ca:c1:41:bb:b4:11:
2b:43:81:8e:06:45:68:8a:e6:84:9a:58:fa:c7:ae:5f:15:3d:
87:18:d5:51:22:46:77:3e:f6:19:29:ce:e2:40:b4:cf:58:ae:
8c:a3:18:bc:17:f3:c2:15:d6:31:81:49:70:c7:3c:d3:bd:c4:
ca:8e:92:cc:a0:3c:b0:62:a4:4d:07:15:e7:62:c1:ab:00:fe:
46:b2:82:84:03:d0:c9:66:0b:c6:9c:30:3a:ff:0a:b8:0d:ab:
4e:c5:d0:a8:33:10:2b:72:d2:5e:03:7f:6e:8f:a8:c9:6b:b5:
bf:22:fd:68:ea:85:68:0c:bc:ac:dc:56:9e:8f:58:67:aa:3c:
4e:ea:61:65:e5:d7:cb:3f:7c:f7:b0:d1:29:f2:ad:f3:d3:99:
b7:63:45:8f:5e:07:d8:26:e0:b7:37:5b:42:aa:f9:d6:b7:09:
f4:94:9a:6a:c9:ea:c8:35:b2:5f:67:db:52:28:de:b0:ae:88:
06:cd:94:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 00:25:16 2026 by rpki-client