Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RB1mFZZoegvDZWyjuSL_ymCIOFg.roa
File: RB1mFZZoegvDZWyjuSL_ymCIOFg.roa (raw, json)
Hash identifier: 36P+P8voV2IlwfwHHV9A6BfW2x/1hKcunEifQfp4aJU=
Subject key identifier: 44:1D:66:15:96:68:7A:0B:C3:65:6C:A3:B9:22:FF:CA:60:88:38:58
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0D7DE84B1ECFADD0F85BC7CB96415FF8D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RB1mFZZoegvDZWyjuSL_ymCIOFg.roa
Signing time: Fri 25 Sep 2026 09:21:19 +0000
ROA not before: Fri 25 Sep 2026 09:21:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40994
IP address blocks: 9.247.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:de:84:b1:ec:fa:dd:0f:85:bc:7c:b9:64:15:ff:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 25 09:21:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=441d661596687a0bc3656ca3b922ffca60883858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6a:66:8e:94:d7:37:0a:a9:da:98:d3:ab:a5:
88:2a:77:9a:af:be:90:c4:43:15:77:fc:07:7c:74:
6c:84:d5:87:66:64:1f:9b:6b:d7:08:1a:f1:b4:42:
1d:31:b3:b9:bc:a9:06:f4:e7:ba:72:3c:e9:b8:92:
4f:36:39:4f:42:f0:ff:eb:c1:10:08:b8:e3:c1:f7:
5c:10:7a:3c:79:0a:ff:3f:b1:0d:d4:7a:e1:a4:a0:
2f:72:c1:00:28:74:a9:25:18:52:be:de:af:93:71:
77:b7:a2:b1:56:9b:64:4a:47:81:f4:21:27:b7:e5:
14:f9:f6:ed:5f:28:48:56:fe:b0:30:23:60:64:cb:
87:99:7f:1d:9f:e0:cc:77:40:73:e5:dd:f7:33:d8:
bb:d6:6e:9b:a0:75:f1:b0:40:94:b5:fa:0e:e5:f5:
39:e8:16:3f:5c:5f:47:27:95:9b:12:e8:d6:c4:c4:
c2:fd:9e:d8:72:bd:35:02:55:0b:79:b8:a6:f5:3c:
ee:0d:a6:83:59:d2:90:cf:4c:bd:52:28:cc:f2:43:
ac:ba:75:b3:fd:68:22:bb:dc:a4:e6:9c:21:7a:6e:
cf:34:fc:1e:3f:ef:e1:c0:c3:f4:9a:53:c8:3d:5d:
1a:8c:9d:33:9e:c4:d3:6e:8c:fe:d4:bf:e5:0b:ed:
f4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1D:66:15:96:68:7A:0B:C3:65:6C:A3:B9:22:FF:CA:60:88:38:58
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RB1mFZZoegvDZWyjuSL_ymCIOFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.60.0/24
Signature Algorithm: sha256WithRSAEncryption
45:65:4e:88:21:f9:4d:c5:01:e3:25:51:e1:38:0e:35:c3:2d:
22:c6:6c:94:13:12:33:76:43:14:7c:4f:38:91:4b:55:73:59:
8f:06:d6:6b:a0:0f:e6:35:88:89:97:b7:ba:e2:27:98:22:64:
17:0e:ab:ea:b4:da:ad:3b:4c:24:f9:f3:bb:e9:11:1c:22:95:
35:88:ae:40:8f:1d:6f:9c:af:a3:64:14:91:aa:52:10:d9:13:
9c:10:25:c9:37:7a:7d:3c:a7:8d:80:ed:ff:db:45:93:9f:00:
5a:d3:9e:e7:40:25:cb:59:40:f5:04:ee:fe:9f:32:03:58:39:
09:9c:c4:b3:5b:4c:5f:9e:cf:84:80:33:22:82:4a:ab:61:08:
22:ca:fd:dd:88:72:39:ed:fb:9b:b2:4c:c2:0a:6e:fe:18:02:
d9:18:07:e5:03:8a:4f:54:86:33:f1:81:8a:d9:7b:44:84:24:
70:ba:f4:d6:29:7a:ba:5b:d6:75:de:16:8a:49:d2:bd:93:61:
24:cc:e4:6e:b7:3f:aa:5f:1b:94:73:88:a9:88:4d:ce:84:e8:
da:44:7a:69:c7:e2:a2:fb:52:72:c3:dc:4d:0d:56:5f:45:0a:
47:d3:83:80:b2:3f:be:fd:6c:b5:67:1a:d9:6c:40:fd:ae:c7:
70:3f:a5:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDX3oSx7PrdD4W8fLlkFf+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwOTI1MDkyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDFkNjYxNTk2Njg3YTBiYzM2NTZjYTNiOTIyZmZjYTYwODgzODU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72pmjpTXNwqp2pjTq6WIKnear76Q
xEMVd/wHfHRshNWHZmQfm2vXCBrxtEIdMbO5vKkG9Oe6cjzpuJJPNjlPQvD/68EQ
CLjjwfdcEHo8eQr/P7EN1HrhpKAvcsEAKHSpJRhSvt6vk3F3t6KxVptkSkeB9CEn
t+UU+fbtXyhIVv6wMCNgZMuHmX8dn+DMd0Bz5d33M9i71m6boHXxsECUtfoO5fU5
6BY/XF9HJ5WbEujWxMTC/Z7Ycr01AlULebim9TzuDaaDWdKQz0y9UijM8kOsunWz
/Wgiu9yk5pwhem7PNPweP+/hwMP0mlPIPV0ajJ0znsTTboz+1L/lC+30gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEQdZhWWaHoLw2Vso7ki/8pgiDhYMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvUkIxbUZaWm9lZ3ZEWld5anVTTF95bUNJT0ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACfc8MA0G
CSqGSIb3DQEBCwUAA4IBAQBFZU6IIflNxQHjJVHhOA41wy0ixmyUExIzdkMUfE84
kUtVc1mPBtZroA/mNYiJl7e64ieYImQXDqvqtNqtO0wk+fO76REcIpU1iK5Ajx1v
nK+jZBSRqlIQ2ROcECXJN3p9PKeNgO3/20WTnwBa057nQCXLWUD1BO7+nzIDWDkJ
nMSzW0xfns+EgDMigkqrYQgiyv3diHI57fubskzCCm7+GALZGAflA4pPVIYz8YGK
2XtEhCRwuvTWKXq6W9Z13haKSdK9k2EkzORutz+qXxuUc4ipiE3OhOjaRHppx+Ki
+1Jyw9xNDVZfRQpH04OAsj++/Wy1ZxrZbED9rsdwP6XR
-----END CERTIFICATE-----
Generated at Wed Oct 21 05:23:26 2026 by rpki-client