Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/r9sOkUJSTIYwYByOsBG7rQ5fUU4.roa
File: r9sOkUJSTIYwYByOsBG7rQ5fUU4.roa (raw, json)
Hash identifier: 6XJeDwvqeUvD80Gd8Az6ZX6d/AoW+pC7ZiXXSru7U5o=
Subject key identifier: AF:DB:0E:91:42:52:4C:86:30:60:1C:8E:B0:11:BB:AD:0E:5F:51:4E
Certificate issuer: /CN=bbf6625518de171750df9dd1ddde5ce4f013514b
Certificate serial: 019FF05C569A8F136D3DE9F459B5A5878433
Authority key identifier: BB:F6:62:55:18:DE:17:17:50:DF:9D:D1:DD:DE:5C:E4:F0:13:51:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_ZiVRjeFxdQ353R3d5c5PATUUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/r9sOkUJSTIYwYByOsBG7rQ5fUU4.roa
Signing time: Tue 11 Aug 2026 10:26:51 +0000
ROA not before: Tue 11 Aug 2026 10:26:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41379
IP address blocks: 185.66.116.0/22 maxlen: 22
194.50.55.0/24 maxlen: 24
194.50.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_ZiVRjeFxdQ353R3d5c5PATUUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:5c:56:9a:8f:13:6d:3d:e9:f4:59:b5:a5:87:84:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf6625518de171750df9dd1ddde5ce4f013514b
Validity
Not Before: Aug 11 10:26:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afdb0e9142524c8630601c8eb011bbad0e5f514e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:db:81:76:c2:12:53:35:22:08:b0:61:5c:67:
cf:ea:64:0d:7d:d3:04:ee:cf:e8:7b:17:88:29:7e:
55:40:65:9f:c4:3e:b8:d4:eb:67:9a:46:98:f9:46:
e9:6a:70:60:b9:f7:c4:b0:b1:f2:ea:ee:5d:aa:9c:
01:40:9f:29:02:aa:58:ed:d1:34:e9:e4:31:ff:fa:
3f:cd:bb:88:30:b7:89:f9:64:0b:c9:21:57:d2:76:
2a:f1:ab:b6:55:1b:c7:34:52:c7:a9:6f:06:8f:02:
f8:09:8e:4f:35:55:72:52:3f:e4:69:d1:75:22:53:
25:79:2d:85:cb:38:05:3a:3e:b9:80:a4:2a:18:b1:
b6:2a:ea:51:89:ac:7d:1e:27:3e:6e:b6:65:d9:c9:
15:f4:66:8f:35:8b:88:4c:75:0c:d7:b7:02:94:66:
04:fb:12:cc:33:a1:5e:dc:64:0e:7a:90:e1:c5:c0:
9a:a4:dc:ab:09:50:a9:8a:ae:2c:7a:a6:78:46:f0:
19:3e:c6:62:59:d9:c4:d8:3d:2e:1b:e6:85:99:16:
03:19:9b:34:dd:25:18:4e:ad:bb:3b:ec:4a:74:c8:
8b:90:f8:98:b8:d8:2d:4c:44:56:3b:62:9e:1b:cd:
96:de:0c:f2:94:5c:d1:f9:df:09:ac:f7:ca:cd:08:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DB:0E:91:42:52:4C:86:30:60:1C:8E:B0:11:BB:AD:0E:5F:51:4E
X509v3 Authority Key Identifier:
keyid:BB:F6:62:55:18:DE:17:17:50:DF:9D:D1:DD:DE:5C:E4:F0:13:51:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_ZiVRjeFxdQ353R3d5c5PATUUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/r9sOkUJSTIYwYByOsBG7rQ5fUU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.116.0/22
194.50.55.0-194.50.56.255
Signature Algorithm: sha256WithRSAEncryption
52:e3:f0:2a:db:bc:8a:ab:a6:08:a1:07:59:59:72:4b:95:3d:
cd:08:56:5f:11:d3:cf:0a:cc:bc:a0:40:46:3b:0c:f8:5b:b3:
cb:36:d0:6e:15:0f:bb:a1:de:26:08:e9:15:d6:cb:3c:df:e7:
cb:8e:16:a1:53:42:a4:79:c7:85:48:dc:dd:6b:5b:48:17:cf:
7b:e8:d9:82:25:bc:c0:d9:44:9e:19:8a:ec:a0:10:a0:36:4e:
d3:1a:91:19:5a:51:c2:5e:cb:4d:b4:c9:77:ce:7e:a0:9b:c4:
fa:d0:31:90:34:56:63:ff:39:3a:fa:1f:23:6c:4a:5a:f0:b2:
20:db:d3:8f:9b:03:8f:56:a2:79:b2:cc:08:c4:9d:02:8e:28:
ee:da:d2:3d:c7:38:de:34:61:bc:8f:32:ae:0d:da:c9:57:3e:
1b:8c:11:51:96:ce:25:51:1f:a5:21:bb:5f:01:82:5c:9a:a2:
44:7a:82:43:6a:e7:77:c5:87:e1:ac:60:66:0e:43:9c:bc:48:
db:d7:98:d6:a9:14:c5:b8:d9:22:0f:a3:93:30:62:40:de:0b:
f8:f7:a7:74:e7:00:1b:8d:10:44:ce:e9:37:95:b2:1a:b3:17:
e4:04:0d:d3:d8:72:db:67:dc:9e:66:89:dc:3f:86:cb:88:16:
8d:f3:c4:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:47:28 2026 by rpki-client