Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/9OxDWufNnv1B2C-qPmgpikF7iaw.roa
File: 9OxDWufNnv1B2C-qPmgpikF7iaw.roa (raw, json)
Hash identifier: dL8qSlWuBeannbfUKKeK7j1b+LVimlrkYaTHvjJkkuY=
Subject key identifier: F4:EC:43:5A:E7:CD:9E:FD:41:D8:2F:AA:3E:68:29:8A:41:7B:89:AC
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019FCE4A2E36A8C48D85118245F65D9E9FAD
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/9OxDWufNnv1B2C-qPmgpikF7iaw.roa
Signing time: Tue 04 Aug 2026 19:39:55 +0000
ROA not before: Tue 04 Aug 2026 19:39:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43391
IP address blocks: 185.185.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:4a:2e:36:a8:c4:8d:85:11:82:45:f6:5d:9e:9f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 4 19:39:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4ec435ae7cd9efd41d82faa3e68298a417b89ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:f7:3a:dc:88:38:0b:cf:b7:6d:8a:f0:88:
4b:53:02:2a:ab:7f:19:18:2f:43:77:d8:7e:f0:52:
a6:82:7f:0d:ea:47:a9:06:c1:c5:af:fa:d8:84:3c:
57:6c:17:4f:be:7f:90:91:24:12:26:03:6d:0d:eb:
d4:7e:dc:60:76:ff:23:fc:44:0d:f1:a3:f0:b9:d2:
e7:38:d1:8e:02:96:50:ec:31:f2:f8:e9:34:94:33:
20:7f:43:ad:c6:87:ab:03:f1:2a:22:5c:a8:8f:08:
f3:f9:66:05:83:52:31:20:47:92:9c:19:68:cb:e8:
80:2a:b5:4f:30:10:e3:d5:2d:af:64:d6:79:9f:73:
01:34:72:1f:de:47:76:80:88:52:7d:74:59:f4:59:
0f:98:07:5a:e8:57:75:6e:b0:b0:a7:03:cd:35:0d:
7f:c6:49:44:9a:84:59:2f:ce:1f:d0:68:07:ea:84:
d1:de:d5:38:a9:85:e4:03:4a:09:d7:19:fd:fd:9b:
5e:c4:9a:01:a0:37:77:66:2b:a2:4c:35:b4:c4:e1:
11:1d:a7:3a:e5:35:e4:e0:5f:4e:66:03:41:31:a7:
24:7f:4a:27:7c:c2:ee:d2:d3:7b:26:b8:20:aa:4d:
96:4c:5e:ad:76:f1:a1:d4:8c:53:6b:2f:e1:97:6c:
1b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EC:43:5A:E7:CD:9E:FD:41:D8:2F:AA:3E:68:29:8A:41:7B:89:AC
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/9OxDWufNnv1B2C-qPmgpikF7iaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.233.0/24
Signature Algorithm: sha256WithRSAEncryption
13:70:bb:52:62:11:f0:c1:57:6e:e6:c2:b3:94:d5:53:55:50:
8d:ab:22:7f:69:81:e3:d9:25:c3:d2:61:6f:4f:c7:cd:e3:4c:
7c:d7:30:e7:a4:9c:1c:42:fe:26:aa:da:b0:36:60:a7:8a:15:
bd:18:1c:fd:71:d5:31:9c:55:25:32:b1:8f:81:75:b7:48:6f:
46:63:89:25:13:59:82:8c:1d:d8:41:3f:93:13:ce:90:6d:4e:
7f:a2:ee:cb:a1:16:7f:b6:c7:d3:b4:4c:95:e5:ad:de:1e:90:
8d:5a:34:38:d1:e1:70:e4:a6:ad:57:f6:d3:7e:ac:ae:31:95:
ff:79:ae:29:24:79:3f:0a:99:ff:bb:35:7e:22:01:f8:bf:8c:
86:87:4c:64:31:a2:1b:f1:36:a7:d5:91:75:84:a7:94:0e:a9:
2d:83:e9:61:09:2b:05:a3:19:d8:3a:7c:2c:47:a4:78:37:2a:
8e:05:9b:6d:e1:43:fc:12:1c:f5:ed:0a:45:dc:d1:8d:05:84:
38:47:21:2c:56:ab:55:14:cf:cd:43:85:e6:ab:cb:7a:b5:4b:
81:4a:3e:9c:99:dd:27:fc:a8:61:dd:48:80:1a:5a:03:b3:21:
d4:00:42:e6:be:b0:5c:86:8f:e3:b9:bd:cc:23:c0:aa:fd:76:
5f:0e:74:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:49 2026 by rpki-client