Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/9QcZs2zkek-gn2Ui4swbuoO2vr4.roa
File: 9QcZs2zkek-gn2Ui4swbuoO2vr4.roa (raw, json)
Hash identifier: 6q/w90WCRN2heb1yDVdybCSeCfBGkK6uBIDIiKl07Rk=
Subject key identifier: F5:07:19:B3:6C:E4:7A:4F:A0:9F:65:22:E2:CC:1B:BA:83:B6:BE:BE
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01A0422183D377FA4CB1F0F6E36FA0F3C41F
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/9QcZs2zkek-gn2Ui4swbuoO2vr4.roa
Signing time: Thu 27 Aug 2026 07:31:27 +0000
ROA not before: Thu 27 Aug 2026 07:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 185.232.18.0/24 maxlen: 24
185.246.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:21:83:d3:77:fa:4c:b1:f0:f6:e3:6f:a0:f3:c4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Aug 27 07:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f50719b36ce47a4fa09f6522e2cc1bba83b6bebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c9:4a:df:d5:82:eb:51:c6:83:da:69:85:b1:
df:06:f9:fb:f2:d7:3e:3c:74:c9:55:8d:49:4a:7e:
1d:8b:fd:a4:19:a8:4c:87:4d:7e:34:fa:42:63:0d:
e3:94:29:b6:9c:a8:2b:aa:c9:50:34:d0:8b:9b:d4:
a6:91:d0:d3:e4:82:ea:6d:fd:77:50:63:8d:81:d5:
91:28:b4:91:fc:f9:64:22:a7:b6:50:bd:90:9c:ac:
b4:5b:cd:9d:ae:fa:78:c3:2a:77:ea:4d:58:ac:82:
14:6c:ce:fc:3d:ca:3c:39:23:f4:bb:e8:de:46:c0:
cf:d4:a1:9d:c6:b0:2b:c0:78:09:2c:26:64:9b:14:
25:dc:f1:a5:28:9e:a0:6a:2c:81:93:6c:1b:95:49:
79:81:75:b4:d4:9c:d8:3e:55:ba:e2:26:ab:0a:25:
28:da:5a:a6:34:70:77:eb:86:30:32:1d:20:f7:e9:
32:5d:90:39:d2:8f:7d:ec:49:40:1a:67:bb:f5:ee:
e3:0f:02:4b:d6:b3:b7:e2:b4:39:98:d1:96:d6:c2:
98:4b:25:1e:5c:1a:eb:e3:a1:25:eb:e5:00:85:b5:
c7:8b:77:bb:ce:f2:b3:74:62:0f:65:28:c7:07:fb:
7c:77:bd:93:2f:2b:8b:aa:41:01:7b:72:b0:0d:73:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:07:19:B3:6C:E4:7A:4F:A0:9F:65:22:E2:CC:1B:BA:83:B6:BE:BE
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/9QcZs2zkek-gn2Ui4swbuoO2vr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.18.0/24
185.246.216.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:16:21:dc:cf:4d:e5:60:d0:f3:e2:9c:6e:2c:0c:04:96:86:
49:fd:fa:61:39:cc:af:51:cd:14:92:c5:29:60:9c:c2:c6:8d:
ff:a3:ba:6d:23:bf:5f:79:51:73:26:d4:1e:14:a2:0b:eb:3d:
6c:0a:8b:5d:2a:3b:8a:38:af:7b:f7:b0:d6:e5:9d:1b:d7:00:
c5:af:93:21:9c:65:aa:3d:89:0a:33:88:b7:4a:f1:cb:1c:7c:
3a:4c:7b:6c:82:23:e5:e3:d0:0b:20:37:6f:05:d6:01:44:55:
2a:47:70:61:11:22:de:15:d7:89:64:f5:24:10:e1:ec:5b:99:
fb:8f:15:19:7e:c2:89:19:48:d4:d4:c4:0e:11:22:4d:51:08:
e5:bc:c8:2a:8c:1c:d0:22:6c:ca:3c:10:3a:de:7c:7e:9c:ad:
90:a4:6b:a4:05:fc:ca:de:bb:d6:a0:d9:4a:44:4c:44:f3:a7:
00:aa:0d:47:9c:93:76:f5:6c:8f:d7:dc:35:6a:96:12:38:61:
b5:09:f4:d7:00:25:82:98:81:49:4c:5d:30:f8:6f:ca:dd:6b:
26:c6:36:a1:e8:71:e0:df:17:8d:44:9d:ec:ce:30:98:6d:d3:
ec:d3:5e:d7:d7:6b:4e:bd:f0:02:d9:d2:a8:c3:3e:dd:35:ed:
17:c1:f7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:04 2026 by rpki-client