Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9teMXC4mLBSCGNIUehi7f3dLwWk.roa
File: 9teMXC4mLBSCGNIUehi7f3dLwWk.roa (raw, json)
Hash identifier: 5fypp8GFWmb5Vto917sroxkhra7Waxwt2OnGeU/Y06o=
Subject key identifier: F6:D7:8C:5C:2E:26:2C:14:82:18:D2:14:7A:18:BB:7F:77:4B:C1:69
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0FCAADBA98CB2F618194EFDF17F118909
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9teMXC4mLBSCGNIUehi7f3dLwWk.roa
Signing time: Fri 02 Oct 2026 12:50:50 +0000
ROA not before: Fri 02 Oct 2026 12:50:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219177
IP address blocks: 9.247.159.0/24 maxlen: 24
78.17.194.0/23 maxlen: 23
78.17.242.0/23 maxlen: 23
206.245.138.0/23 maxlen: 23
206.245.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:aa:db:a9:8c:b2:f6:18:19:4e:fd:f1:7f:11:89:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 2 12:50:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6d78c5c2e262c148218d2147a18bb7f774bc169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:e2:e9:65:f5:58:b2:fc:60:74:15:d6:a8:
26:f8:28:27:e6:57:4b:88:28:74:fa:73:be:d5:48:
e2:29:76:ed:f7:f1:d1:25:f4:c6:05:05:1a:62:be:
a6:69:54:03:a5:04:84:1d:45:5c:20:ad:19:aa:fe:
52:7f:b6:25:d3:c5:8f:2c:61:22:ce:74:d0:5d:4a:
05:53:d0:97:6f:52:e6:02:9b:b9:83:20:ab:23:c9:
66:54:de:72:77:13:46:bf:16:08:37:61:f0:1e:45:
bd:76:26:fc:36:b3:db:d8:0e:86:f1:4c:0c:1e:aa:
ab:3a:52:17:aa:0a:5c:d3:61:4d:f3:08:16:b7:34:
5d:6a:11:ed:bb:1e:a1:71:40:0c:97:83:42:ff:f4:
7a:71:1e:00:89:83:a5:af:28:14:43:7e:d3:9e:19:
75:5d:d9:a9:71:a5:54:da:b1:c8:c7:70:ac:e5:85:
3b:72:6b:7a:6a:49:70:08:46:3b:ed:a8:1d:bd:cb:
53:8a:c1:54:49:6e:c6:36:1f:71:02:e7:f6:80:64:
73:81:ab:d4:db:7e:b7:b8:2a:14:47:1e:bf:f9:0a:
64:5c:41:9b:f6:ab:6c:5e:55:be:82:fd:22:9e:96:
0a:cc:9d:57:14:f5:df:ed:21:b5:1d:6c:65:2d:10:
87:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D7:8C:5C:2E:26:2C:14:82:18:D2:14:7A:18:BB:7F:77:4B:C1:69
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9teMXC4mLBSCGNIUehi7f3dLwWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.159.0/24
78.17.194.0/23
78.17.242.0/23
206.245.138.0/23
206.245.142.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:82:92:67:f8:b9:c0:bd:1e:90:ed:75:0f:1d:7f:ff:f1:18:
fe:fe:0f:78:7c:56:04:95:31:d8:96:e5:68:a4:ee:88:c4:99:
3e:db:b6:34:b0:dc:d4:c3:43:c0:89:46:8f:f9:89:d2:ad:11:
39:69:b3:b3:46:1b:6d:33:ea:48:ec:0a:40:a5:c0:10:2a:bb:
62:fb:6b:0b:e8:eb:57:fb:ee:fe:4f:d9:89:37:0a:10:fc:5a:
6e:63:43:5a:07:6f:ff:e2:94:eb:ea:aa:df:93:c9:a7:33:a5:
4c:3a:05:a3:85:bf:76:83:5f:cf:e8:64:d3:d9:11:39:19:9e:
98:50:de:d6:ed:ad:89:35:c1:44:8f:ad:48:7d:ac:b1:c6:a6:
37:c7:d2:81:24:ab:0f:de:cd:cb:ed:fd:03:f9:f4:40:69:90:
d0:0c:e5:22:8c:61:0f:c7:92:5c:fc:8b:1c:91:a1:8d:18:b2:
4d:d4:9d:49:4a:3f:7d:da:f2:95:c4:d7:88:ba:bd:ca:32:59:
89:ae:82:71:d7:8c:50:20:f9:45:67:bb:b5:31:62:42:0f:12:
5e:fc:b2:b7:c7:f7:3f:3f:83:1e:b5:7a:84:32:e2:21:6f:7f:
8c:13:13:4b:9c:d8:e3:ea:1c:8c:63:2d:bc:33:49:bb:86:fe:
61:91:bf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 15:23:13 2026 by rpki-client