Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/9Ot4LfD8syhvLh9Ifr0FCFwLEzc.roa
File: 9Ot4LfD8syhvLh9Ifr0FCFwLEzc.roa (raw, json)
Hash identifier: Ki5d21YTK35TH8/C6KguWNkQvrHy2I0GMdqoTjO4QkM=
Subject key identifier: F4:EB:78:2D:F0:FC:B3:28:6F:2E:1F:48:7E:BD:05:08:5C:0B:13:37
Certificate issuer: /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial: 01A11C9283BC95881DF0B7E3A4053819BDD1
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/9Ot4LfD8syhvLh9Ifr0FCFwLEzc.roa
Signing time: Thu 08 Oct 2026 17:32:06 +0000
ROA not before: Thu 08 Oct 2026 17:32:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12971
IP address blocks: 195.110.192.0/20 maxlen: 20
195.110.208.0/24 maxlen: 24
195.110.209.0/24 maxlen: 24
195.110.210.0/23 maxlen: 23
195.110.212.0/22 maxlen: 22
195.110.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:92:83:bc:95:88:1d:f0:b7:e3:a4:05:38:19:bd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Validity
Not Before: Oct 8 17:32:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4eb782df0fcb3286f2e1f487ebd05085c0b1337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:1c:6b:0b:7e:11:15:71:47:97:18:9b:24:
71:5c:f7:8e:1a:f9:77:80:01:25:25:2b:01:82:02:
19:68:7b:6b:8d:5a:b9:6a:71:29:76:a6:cd:6d:29:
2e:43:1d:86:02:aa:6c:db:63:23:ab:06:32:43:ef:
65:3b:92:96:46:ab:16:9f:e1:b0:27:75:e8:c6:3a:
40:7e:60:2e:58:30:18:99:b4:68:23:04:57:c9:32:
02:10:c9:14:b8:3b:6a:9b:25:39:ac:b4:1c:83:2d:
fb:96:56:75:33:1f:52:50:17:29:72:59:11:f9:e2:
45:1a:39:0e:e9:02:b3:37:2f:8c:a2:88:ef:d8:b8:
71:6f:1c:84:ac:5a:d4:42:27:f8:84:6f:9a:f9:52:
c1:28:d3:70:71:cf:e0:eb:0f:0c:ef:45:0b:58:b7:
e3:80:00:11:78:18:6f:32:fb:81:e6:e4:bb:de:b9:
2a:13:47:7e:fc:a1:38:fd:e4:af:83:99:10:dd:a9:
ff:05:13:ce:29:c2:3e:ba:c4:96:f6:b6:db:75:c3:
8e:1c:99:f3:f7:84:b6:94:5d:04:7c:3b:5f:32:58:
9e:b5:7e:bd:78:66:02:54:49:7d:3b:99:c8:3c:69:
9c:20:c0:b9:ef:9e:3d:7a:c5:2b:3a:8e:da:f8:ca:
99:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EB:78:2D:F0:FC:B3:28:6F:2E:1F:48:7E:BD:05:08:5C:0B:13:37
X509v3 Authority Key Identifier:
keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/9Ot4LfD8syhvLh9Ifr0FCFwLEzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.192.0-195.110.215.255
195.110.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:50:01:17:d3:09:9f:27:e8:96:0e:75:e5:1a:22:4b:44:f0:
d0:fa:9c:9b:43:97:e0:ff:dc:a1:41:d3:d9:d2:6a:77:aa:a9:
cb:1f:8f:83:6f:41:c3:51:43:5a:04:a3:11:7f:f3:7c:17:7a:
56:65:cb:d8:bd:c9:10:17:84:47:53:7e:70:85:04:2c:bc:86:
03:d8:c2:57:dd:1e:fe:a3:7a:09:93:f7:9b:a9:0d:2e:7b:94:
91:4d:23:a4:a6:26:ae:38:2d:69:22:bf:ed:e2:d6:e8:8c:05:
56:71:31:33:df:7f:d6:91:66:f8:af:4e:fe:2a:9d:65:c4:69:
c9:8a:df:27:2b:33:8f:42:18:7a:47:00:c6:a4:2b:c4:d4:65:
10:75:e6:a3:54:de:5d:37:5b:7c:31:39:fa:35:d0:27:9e:15:
25:3b:e9:8e:7c:41:92:8c:19:91:94:24:d4:aa:43:ff:09:d3:
65:aa:46:54:a9:16:e2:32:a9:4c:0f:cc:1e:d1:21:b1:44:3d:
ab:70:5d:ba:db:cc:20:23:56:c9:64:ad:f9:23:ce:09:f9:01:
30:3e:ad:4e:83:60:71:8d:af:9b:79:62:d8:f5:0e:5e:c8:c5:
83:4b:59:3d:bf:86:0b:09:2c:30:7a:fa:95:2c:cc:b1:fc:a5:
ad:5d:88:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:26 2026 by rpki-client