Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/9CV2ccBp-wqUL_fP6QBnKryYIpM.roa
File: 9CV2ccBp-wqUL_fP6QBnKryYIpM.roa (raw, json)
Hash identifier: EVfvSX2FaZ2DaE0/qfbpH/rDdeen/hkG4N8QfWHeB08=
Subject key identifier: F4:25:76:71:C0:69:FB:0A:94:2F:F7:CF:E9:00:67:2A:BC:98:22:93
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 019FDD16907C857AFC90EC9F29ED4004A23F
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/9CV2ccBp-wqUL_fP6QBnKryYIpM.roa
Signing time: Fri 07 Aug 2026 16:37:51 +0000
ROA not before: Fri 07 Aug 2026 16:37:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15415
IP address blocks: 185.211.102.0/24 maxlen: 24
212.102.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:16:90:7c:85:7a:fc:90:ec:9f:29:ed:40:04:a2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Aug 7 16:37:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4257671c069fb0a942ff7cfe900672abc982293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:27:62:bb:97:9f:b8:1c:e0:37:78:e6:85:
58:a4:1d:ea:31:a8:52:c7:1c:18:e5:e5:37:1a:62:
b6:fe:b1:e7:c3:cf:3b:2f:ef:5a:ed:80:fa:59:33:
f2:3f:c1:a5:fc:8d:70:cb:65:cb:53:8a:d4:0b:5c:
8f:06:3b:8a:63:18:a3:8f:2b:88:eb:89:65:66:03:
80:99:f2:96:8f:6f:15:c9:e7:70:4f:33:db:b8:f4:
df:e3:76:a0:15:c2:9f:79:86:f1:45:32:30:9e:89:
27:1e:77:9e:80:b7:81:cd:50:14:52:a0:cb:cb:d5:
5d:a8:81:94:d7:5b:fd:0c:6d:87:54:40:31:f0:b6:
ed:ec:08:63:2a:d3:16:9c:1e:2f:d7:f3:b1:9d:90:
be:b1:49:52:2e:47:cc:24:6f:b7:5b:af:5a:dc:79:
9d:f8:a6:eb:63:1f:56:5f:e8:37:55:30:b0:ee:fd:
f1:f1:a3:cc:65:32:a7:e2:ec:e0:b1:1e:d7:95:08:
3d:d4:94:07:26:f7:f2:0c:68:03:82:ea:db:0e:c9:
1b:dc:20:15:10:d8:6f:0d:aa:31:db:e8:17:fb:2e:
ac:b5:c0:2e:07:ef:90:a3:fc:b0:b1:80:98:67:ce:
75:17:85:cf:f0:4f:7c:7d:ca:c1:4a:9b:8c:4f:79:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:25:76:71:C0:69:FB:0A:94:2F:F7:CF:E9:00:67:2A:BC:98:22:93
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/9CV2ccBp-wqUL_fP6QBnKryYIpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.102.0/24
212.102.228.0/24
Signature Algorithm: sha256WithRSAEncryption
54:09:bb:91:dc:63:81:09:1e:e2:d5:93:78:3f:e3:48:6f:6a:
90:c2:09:33:ce:56:76:5f:ee:be:12:1f:11:a1:0a:9d:7d:ac:
71:99:f9:d8:44:af:e9:7e:e8:0f:7c:d5:11:38:f7:fb:2c:c6:
0a:26:59:87:54:4f:06:d6:1b:6b:9a:65:99:1b:ee:75:bf:82:
bc:8a:8f:8e:90:ed:36:c3:83:4e:1e:14:0f:2d:06:7e:c3:75:
37:b3:77:43:a7:05:c0:23:f2:43:6a:07:5b:37:c6:8c:28:1c:
a3:4d:55:cd:d3:a5:41:bf:af:cd:03:df:b5:79:96:a5:2a:58:
2f:e6:3e:7a:a2:a2:1d:fa:93:ee:a1:19:e3:a1:fd:66:8e:c5:
80:6c:8d:37:cb:ad:da:a6:63:b3:65:7c:4a:2f:5e:be:f8:8e:
5a:b8:1b:5c:06:3a:41:28:24:22:28:0e:ad:f0:ae:10:9f:89:
47:a0:1e:23:96:f4:58:2b:71:36:e7:c5:56:05:45:5f:5a:72:
e1:41:cb:c9:36:d1:b1:51:16:bc:ac:05:5f:10:1b:97:f1:79:
99:e9:31:71:7a:11:fa:19:c0:b2:5e:3f:ee:3c:dc:2b:4f:36:
d8:1c:31:10:75:7b:04:78:39:27:4e:be:ef:08:ba:d6:89:93:
e0:83:cf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 15:54:23 2026 by rpki-client