Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/9StrTLCfqGV3R6lUHBbjcUPbtgE.roa
File: 9StrTLCfqGV3R6lUHBbjcUPbtgE.roa (raw, json)
Hash identifier: hKyGuDQdq7Wwmsr9xKC9vViQNuynbDmlDvA0XQY2P9E=
Subject key identifier: F5:2B:6B:4C:B0:9F:A8:65:77:47:A9:54:1C:16:E3:71:43:DB:B6:01
Certificate issuer: /CN=ffe043db37ea25c92d85ce65a76d1a4e513624aa
Certificate serial: 019F236832FA1C647639B9E67ABB48FFFECF
Authority key identifier: FF:E0:43:DB:37:EA:25:C9:2D:85:CE:65:A7:6D:1A:4E:51:36:24:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/9StrTLCfqGV3R6lUHBbjcUPbtgE.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56638
IP address blocks: 192.162.216.0/24 maxlen: 24
192.162.217.0/24 maxlen: 24
192.162.218.0/24 maxlen: 24
192.162.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:32:fa:1c:64:76:39:b9:e6:7a:bb:48:ff:fe:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe043db37ea25c92d85ce65a76d1a4e513624aa
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f52b6b4cb09fa8657747a9541c16e37143dbb601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:91:47:f5:26:43:46:fb:c9:7f:a8:3f:57:f3:
94:42:4d:4d:04:01:ff:0e:98:3f:f0:15:76:ec:8c:
78:59:f9:02:4a:d8:a0:a8:db:2a:f0:fb:2d:dd:4a:
8b:7c:12:a9:70:ad:06:d6:fb:a4:e2:51:63:ab:6e:
5b:5a:fe:40:74:cb:eb:ba:c5:e3:56:f3:af:f8:19:
89:f3:4d:d1:83:e3:31:8e:bb:77:05:f0:52:35:53:
9f:9b:cf:cb:a0:75:08:f9:14:b6:84:f2:a4:71:e8:
6f:ca:c3:2a:9e:48:1c:94:28:bc:b4:71:97:db:1b:
a0:a2:62:be:66:b6:a6:fe:eb:a5:27:31:e0:c3:06:
9a:66:9d:bd:ef:d0:85:42:fb:37:e4:e5:c9:64:97:
a8:3c:ba:cb:50:c1:84:51:38:e0:d0:c9:67:c1:b1:
d7:5f:79:1b:41:27:5c:69:49:5a:58:de:a4:74:9f:
d3:25:5f:5e:64:9d:24:25:03:18:70:c7:50:12:26:
57:8a:de:4e:08:8f:71:f5:da:f0:69:e8:3f:19:1d:
28:3c:a4:8f:b1:d8:13:a7:bb:ec:97:2a:f1:ff:a1:
85:64:d7:6f:ea:17:2a:b0:40:25:76:6d:80:13:e3:
bc:4b:c5:93:7e:b8:ea:db:f6:f2:2e:73:fd:8a:a3:
ad:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2B:6B:4C:B0:9F:A8:65:77:47:A9:54:1C:16:E3:71:43:DB:B6:01
X509v3 Authority Key Identifier:
keyid:FF:E0:43:DB:37:EA:25:C9:2D:85:CE:65:A7:6D:1A:4E:51:36:24:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/9StrTLCfqGV3R6lUHBbjcUPbtgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.216.0/22
Signature Algorithm: sha256WithRSAEncryption
68:b4:ef:4d:44:e7:3c:98:bd:d9:ad:c2:8d:d0:63:a8:48:95:
e4:f1:e4:00:cf:65:71:43:8d:89:81:99:00:40:29:b1:1a:44:
01:b9:9d:28:35:88:e7:e9:9d:d4:0d:d6:c0:cd:31:a8:19:01:
e8:3a:a4:4c:ab:fd:2f:30:0b:a1:ce:a4:e7:a8:ec:87:10:ea:
3d:7c:57:88:ac:ae:ed:61:c9:0b:8d:10:11:7e:a0:b6:11:e3:
07:ea:61:54:2a:94:6b:98:41:e4:7f:d2:84:98:16:45:62:93:
00:54:80:36:0a:bc:09:94:dd:b9:2e:e3:b1:d3:9d:d4:6c:98:
29:00:1d:ab:d4:38:42:b4:40:4e:86:1d:f4:c6:1d:0c:09:06:
e3:2f:02:05:a1:83:06:e0:b8:9c:3d:4b:3d:73:8d:ab:32:ea:
36:50:49:85:77:01:d5:ec:a6:c5:ae:71:ad:63:83:61:b3:7a:
4e:a0:a6:34:10:e4:c2:48:ad:4a:dd:93:b9:bf:84:b9:42:c9:
65:fb:80:96:db:a3:7c:bc:d7:4d:9b:2a:9e:6d:c6:5d:28:f6:
7d:01:51:de:ea:bd:3c:57:66:c8:93:3d:b6:58:cf:81:d9:46:
0b:28:45:8b:68:b8:83:07:2b:04:2f:81:20:53:9b:ba:ac:91:
ae:38:51:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:59:00 2026 by rpki-client