Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/9Z-Nuee6IL7IyQB_4XLrNhjGKS0.roa
File: 9Z-Nuee6IL7IyQB_4XLrNhjGKS0.roa (raw, json)
Hash identifier: RKOygo9w6imutCVkXedMoV0bTqzrHFdgHbjSftosAIY=
Subject key identifier: F5:9F:8D:B9:E7:BA:20:BE:C8:C9:00:7F:E1:72:EB:36:18:C6:29:2D
Certificate issuer: /CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Certificate serial: 01A144D24A398870B60D07A4E4550A778A21
Authority key identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/9Z-Nuee6IL7IyQB_4XLrNhjGKS0.roa
Signing time: Fri 16 Oct 2026 13:06:34 +0000
ROA not before: Fri 16 Oct 2026 13:06:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199250
IP address blocks: 91.200.68.0/24 maxlen: 24
91.200.69.0/24 maxlen: 24
185.21.36.0/22 maxlen: 24
185.21.37.0/24 maxlen: 24
185.21.38.0/24 maxlen: 24
185.21.39.0/24 maxlen: 24
185.212.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:d2:4a:39:88:70:b6:0d:07:a4:e4:55:0a:77:8a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Validity
Not Before: Oct 16 13:06:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f59f8db9e7ba20bec8c9007fe172eb3618c6292d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:f5:17:cd:66:25:d6:73:63:f6:d7:46:a6:
12:c0:ac:b0:7a:c4:47:39:6f:47:61:2d:f8:2b:a5:
1a:6a:06:1c:0b:9a:d2:6f:d4:ea:be:1f:ee:c6:f7:
32:2e:18:a1:f9:a6:b1:de:e3:17:17:13:50:2d:5c:
df:33:38:fc:b3:1f:85:0b:91:52:8a:f5:36:12:3f:
b3:8d:d2:a6:9c:e3:0e:ec:e7:e8:4c:cd:14:08:85:
b6:6c:5e:bb:4e:61:a4:75:5d:55:7e:79:2c:6e:de:
93:65:79:de:4d:fb:3e:17:6e:2e:01:7c:8f:ae:f2:
e7:d9:03:1d:35:9c:69:23:d3:6e:86:15:44:c8:8b:
8d:0d:90:48:f3:9e:3f:1c:a7:88:16:7b:d7:4f:04:
94:ac:78:60:45:0e:ad:27:67:ad:63:22:e1:d0:03:
2f:a2:40:c5:1e:74:1f:4d:a7:ca:f5:2f:7c:4b:a7:
d7:9e:52:50:47:e6:35:8a:51:6c:2c:94:c3:d5:52:
48:e8:d9:eb:26:ec:06:31:eb:20:61:9a:bb:a3:2e:
bf:23:d4:d2:91:0d:26:08:44:3d:ba:79:c2:2d:47:
28:27:f1:9e:d9:94:ee:1d:f7:27:0e:8d:c3:46:42:
51:45:6e:59:18:69:44:8f:28:24:1e:97:98:6b:4e:
f4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9F:8D:B9:E7:BA:20:BE:C8:C9:00:7F:E1:72:EB:36:18:C6:29:2D
X509v3 Authority Key Identifier:
keyid:17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/9Z-Nuee6IL7IyQB_4XLrNhjGKS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.68.0/23
185.21.36.0/22
185.212.66.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f1:78:28:42:bd:6b:8a:cc:39:4c:f8:27:ec:af:69:2e:8b:
90:fe:04:71:a6:f5:3a:f9:74:02:c1:3e:db:f0:d7:aa:1f:df:
e7:eb:ac:7a:16:95:11:9d:e9:2a:01:2b:92:4b:50:dd:c1:6b:
fb:14:dc:de:df:30:c9:47:8b:fb:75:29:bf:25:61:51:7e:da:
fc:bc:52:e3:90:7f:44:f7:18:48:30:73:de:57:5b:c6:35:72:
e9:ec:42:98:9d:8b:63:0d:b5:f5:40:ac:1f:fb:6c:e4:8c:0e:
9e:03:1b:2f:77:73:f5:7d:67:e2:10:a3:e8:62:eb:d5:f0:f7:
05:70:15:0b:97:c5:8a:d9:66:a1:bb:cb:29:ad:01:01:ea:4a:
18:da:4f:77:c2:2f:ce:b1:ec:05:7e:7e:94:a7:3e:8a:c1:5c:
08:ed:cf:07:a0:44:32:2c:a4:ca:21:fb:cc:e7:00:0b:05:9f:
4b:3d:a1:b6:56:1e:b2:16:1e:a2:48:24:a4:c7:5d:90:c0:ae:
1c:25:a7:38:88:ad:56:5b:18:e9:80:8f:20:d6:e3:ba:97:3a:
02:97:bd:8a:e4:2a:7a:96:85:a5:78:ca:5c:eb:fc:7c:a6:bf:
d9:f1:b0:fb:7f:51:d4:10:04:87:ac:4e:bd:63:eb:f5:84:27:
19:97:18:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:31 2026 by rpki-client