Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/b9Dh_UeOJvMX7mS9n4z8FGHg4Ac.roa
File: b9Dh_UeOJvMX7mS9n4z8FGHg4Ac.roa (raw, json)
Hash identifier: TsKKF7D/c/MjkTAoubzU5UyUbp2KE6LY4Yz6BNqvcX4=
Subject key identifier: 6F:D0:E1:FD:47:8E:26:F3:17:EE:64:BD:9F:8C:FC:14:61:E0:E0:07
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019DAA641C6AFDA9E74BB1FABCBC55B58406
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/b9Dh_UeOJvMX7mS9n4z8FGHg4Ac.roa
Signing time: Mon 20 Apr 2026 10:16:20 +0000
ROA not before: Mon 20 Apr 2026 10:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40950
IP address blocks: 185.143.72.0/24 maxlen: 24
185.143.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:aa:64:1c:6a:fd:a9:e7:4b:b1:fa:bc:bc:55:b5:84:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Apr 20 10:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fd0e1fd478e26f317ee64bd9f8cfc1461e0e007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:16:67:25:76:d7:3e:d9:46:35:12:58:7e:1c:
7f:5f:c4:5b:9b:ae:77:7c:cd:02:85:b5:7e:d0:7b:
c5:ee:1e:8b:19:7c:f8:d4:f7:9b:3c:6a:94:21:56:
76:52:9c:92:6f:b2:92:0e:bc:69:5a:33:52:30:6d:
35:d1:75:2b:cb:6f:32:c8:f5:dc:c1:34:c9:ef:a9:
ed:5b:9d:bd:d6:93:41:e8:51:b7:b3:e2:b1:e5:cd:
cf:86:29:88:21:05:ac:49:f5:7b:2a:d0:22:34:54:
15:01:a2:50:21:c7:49:fb:13:96:4f:da:76:00:e7:
e7:54:14:97:a3:37:b4:4e:64:f7:dc:e0:02:b7:c7:
4a:4e:3e:1c:08:85:bd:5e:f8:42:a8:cc:ea:ba:67:
62:f3:b7:4b:c4:ed:c7:64:18:43:b1:cb:58:6c:05:
21:a6:b0:be:c1:50:cc:a8:79:8b:fb:2f:ec:a8:c1:
ed:b1:56:06:21:1c:f5:35:14:61:dc:05:a9:95:fd:
26:62:9b:9a:2c:a3:4c:b5:48:6a:60:68:3d:bf:da:
79:22:aa:35:aa:89:c9:e9:6d:3a:ab:d2:3f:e2:33:
96:6d:c3:bb:5f:e3:69:c4:fc:ee:a5:d8:cb:8d:d9:
e8:e4:03:45:c6:5f:1f:59:1d:ae:26:64:f7:d6:31:
a8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D0:E1:FD:47:8E:26:F3:17:EE:64:BD:9F:8C:FC:14:61:E0:E0:07
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/b9Dh_UeOJvMX7mS9n4z8FGHg4Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.72.0/23
Signature Algorithm: sha256WithRSAEncryption
21:f6:ad:cf:28:12:e4:90:1c:3f:8c:53:dc:03:ac:98:21:b6:
7b:6e:73:73:04:54:57:40:e6:35:9e:0f:7a:12:ad:81:42:5f:
a0:04:13:3f:7f:c5:f0:81:9d:2f:de:42:05:39:bf:96:49:18:
b8:6c:3d:c1:c6:51:7c:8e:dc:22:e7:19:4e:3b:60:6b:1c:51:
54:4a:00:82:af:39:d4:08:3e:11:72:d2:76:df:78:f9:9f:ac:
8b:29:89:10:88:a9:56:e5:84:63:e8:38:5e:c8:1f:34:1d:bf:
87:32:e8:80:8a:15:18:07:d9:af:22:ef:bc:91:26:54:19:58:
28:12:71:d1:3f:8a:9a:ae:ea:7e:b1:17:c9:f1:56:9d:78:18:
35:ae:5e:80:b8:63:3a:e1:55:71:9e:b0:2b:3e:1b:fe:57:57:
a5:bb:e1:8e:7c:14:50:33:49:39:8f:87:3d:bb:38:7e:6b:61:
22:10:5f:40:0e:38:9b:77:f1:4d:28:46:18:50:45:99:8a:50:
51:cf:77:1e:d4:3e:eb:c2:15:69:5c:f3:fb:cd:cb:82:40:35:
d6:a9:d7:ed:1e:6f:91:80:dd:d4:d5:5a:00:ce:e0:c7:04:a5:
82:6b:61:60:62:57:89:a1:eb:3c:7c:4a:fe:67:18:18:f3:05:
e3:ab:09:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:21:21 2026 by rpki-client