Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/9wCP3PMbBnmS6-UiNEuedROoXTw.roa
File: 9wCP3PMbBnmS6-UiNEuedROoXTw.roa (raw, json)
Hash identifier: KhAdg25sgV7MsRG8JOFc0GcnRrfuMdeFlXKsCa467C8=
Subject key identifier: F7:00:8F:DC:F3:1B:06:79:92:EB:E5:22:34:4B:9E:75:13:A8:5D:3C
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FFB779DBAA0FEF2F5B931AD2F15D108F6
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/9wCP3PMbBnmS6-UiNEuedROoXTw.roa
Signing time: Thu 13 Aug 2026 14:12:28 +0000
ROA not before: Thu 13 Aug 2026 14:12:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139642
IP address blocks: 85.202.173.0/24 maxlen: 24
160.238.97.0/24 maxlen: 24
217.18.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:77:9d:ba:a0:fe:f2:f5:b9:31:ad:2f:15:d1:08:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Aug 13 14:12:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7008fdcf31b067992ebe522344b9e7513a85d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:ca:e0:9b:52:f4:06:76:28:6b:56:69:c1:
37:06:13:4f:b6:ab:dc:55:11:02:fd:21:7f:45:36:
0b:5a:53:10:c4:e3:7b:6a:c3:b6:c4:3b:96:c5:01:
49:45:ca:98:f4:74:cc:78:dd:30:c8:de:99:ee:44:
d7:29:73:41:b0:46:8e:24:c9:12:6d:9d:ce:78:af:
14:1e:2e:82:b0:e3:46:9c:40:91:39:97:f7:17:1f:
b4:b8:0f:5e:e6:86:db:62:d3:d3:c0:03:af:72:71:
cb:b4:25:0f:6a:e5:ef:25:4f:27:06:86:fb:0c:e1:
e2:64:32:06:3c:9c:20:b9:05:f2:14:ce:90:36:02:
40:a8:a6:50:4d:45:5d:a1:9c:98:ee:53:42:29:ee:
5a:c3:be:7c:28:49:da:d5:2d:12:22:f0:9e:01:74:
4a:f6:af:5a:31:16:51:35:d1:48:4e:b8:d0:2a:c2:
03:a2:3c:ab:1b:9d:a0:45:1b:01:54:10:20:e5:b6:
04:e0:56:cf:b3:d0:05:95:ed:a9:8b:c2:f5:8f:d8:
21:ae:e9:2b:34:78:61:ef:e1:c4:58:bc:16:d9:37:
60:0b:06:cf:8f:2f:e6:a8:81:ca:e1:32:12:83:80:
80:53:64:d3:b8:37:c8:dc:d4:60:39:85:9e:bf:f3:
72:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:00:8F:DC:F3:1B:06:79:92:EB:E5:22:34:4B:9E:75:13:A8:5D:3C
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/9wCP3PMbBnmS6-UiNEuedROoXTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.173.0/24
160.238.97.0/24
217.18.59.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f6:b6:5d:b4:8d:3c:98:1f:78:a2:39:db:13:7f:f0:4e:d7:
1c:21:2f:0c:ed:64:7d:49:8d:82:49:05:ba:fe:1e:2c:a6:04:
64:c2:8e:21:be:e4:73:e5:30:80:77:df:2a:3d:af:2c:f7:7c:
11:73:0d:69:cd:58:d1:86:af:dd:00:b5:b1:d6:4f:f6:a5:54:
4e:23:40:42:00:16:d2:2c:b8:fd:2a:e1:bf:be:5e:27:91:b5:
b8:e6:47:23:be:50:cc:ee:b6:d9:8d:e3:e9:57:4a:e7:80:0d:
02:36:72:2a:90:fe:c7:7d:35:79:9e:1a:9e:44:f9:d6:2a:76:
49:f9:96:0d:ac:b0:13:6e:5f:36:07:3e:1f:8c:7d:4f:0c:10:
16:74:ff:4a:ab:0a:eb:5a:45:1d:22:4b:0f:ea:81:89:4f:d8:
2e:0a:5a:e5:cd:1d:e4:24:93:a3:c4:09:d9:4f:d1:07:5d:52:
f0:af:55:d5:6e:d6:97:8f:fd:02:97:96:51:ca:3d:e9:e2:56:
52:44:0d:b5:7f:9f:9a:4f:33:d3:b0:4c:6b:18:3e:d3:4f:3b:
de:9b:c5:08:b1:f0:7c:5a:46:9b:16:89:06:25:70:e0:d6:c8:
79:5c:76:22:cc:35:fb:d2:54:6d:dd:f9:b6:b4:f3:39:df:eb:
55:38:21:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:11:56 2026 by rpki-client