Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/9TWBsQcYt_3DqrpIxhr7ZchkbEs.roa
File: 9TWBsQcYt_3DqrpIxhr7ZchkbEs.roa (raw, json)
Hash identifier: S+4/zNMH2kmuHN+0Pj1sw0CtTfECJrrhZmhXHKALpLQ=
Subject key identifier: F5:35:81:B1:07:18:B7:FD:C3:AA:BA:48:C6:1A:FB:65:C8:64:6C:4B
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 019D9CF563051E23FD68DD6652B6043C6316
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/9TWBsQcYt_3DqrpIxhr7ZchkbEs.roa
Signing time: Fri 17 Apr 2026 19:40:20 +0000
ROA not before: Fri 17 Apr 2026 19:40:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30148
IP address blocks: 185.93.228.0/22 maxlen: 24
193.19.224.0/22 maxlen: 24
2a02:fe80:11::/48 maxlen: 48
2a02:fe80:12::/48 maxlen: 48
2a02:fe80:13::/48 maxlen: 48
2a02:fe80:14::/48 maxlen: 48
2a02:fe80:15::/48 maxlen: 48
2a02:fe80:16::/48 maxlen: 48
2a02:fe80:17::/48 maxlen: 48
2a02:fe80:18::/48 maxlen: 48
2a02:fe80:19::/48 maxlen: 48
2a02:fe80:20::/48 maxlen: 48
2a02:fe80:21::/48 maxlen: 48
2a02:fe80:22::/48 maxlen: 48
2a02:fe80:1010::/48 maxlen: 48
2a02:fe80:2010::/48 maxlen: 48
2a02:fe81::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:f5:63:05:1e:23:fd:68:dd:66:52:b6:04:3c:63:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Apr 17 19:40:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f53581b10718b7fdc3aaba48c61afb65c8646c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:98:b6:ce:37:53:68:49:a0:6e:a3:84:a3:
32:fa:88:f4:0e:39:8e:1b:47:30:a4:a5:c5:c2:ed:
d4:0d:b9:77:38:cd:6e:ba:74:a8:34:3a:22:39:36:
b3:cd:d0:c2:60:f1:77:e0:3f:a1:84:c8:ff:da:b8:
7f:04:f8:aa:d7:39:65:86:05:15:ea:cf:34:9e:79:
6a:07:b7:dc:be:4a:5f:36:9e:0c:5f:f4:77:3c:84:
65:b0:84:e2:4d:17:77:51:99:cb:9d:a1:d9:58:b7:
76:f8:81:55:c3:3e:2c:03:91:c8:85:2d:6a:79:76:
ce:e2:e9:27:f4:79:cc:fe:96:dd:5b:80:28:ca:dc:
77:f8:eb:1a:4c:3a:04:c2:67:ad:2d:b3:7c:f0:34:
ac:d0:a4:24:af:15:65:31:19:59:38:db:df:49:74:
76:5b:fd:d0:f1:ad:c8:05:1f:27:71:a4:ea:1f:49:
79:2c:63:e9:10:75:95:a1:19:98:e1:c0:83:2a:d6:
bf:f0:53:ae:91:fb:57:25:53:91:c4:66:9e:0f:6c:
6b:06:76:e1:a0:a3:ed:1e:bd:77:d5:80:f4:d1:a3:
6d:55:13:f5:8c:cf:57:1e:06:e7:21:8e:ab:a8:dd:
4b:12:99:d2:20:a1:b5:cc:62:cf:1f:05:c5:e5:d4:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:35:81:B1:07:18:B7:FD:C3:AA:BA:48:C6:1A:FB:65:C8:64:6C:4B
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/9TWBsQcYt_3DqrpIxhr7ZchkbEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.228.0/22
193.19.224.0/22
IPv6:
2a02:fe80:11::-2a02:fe80:19:ffff:ffff:ffff:ffff:ffff
2a02:fe80:20::-2a02:fe80:22:ffff:ffff:ffff:ffff:ffff
2a02:fe80:1010::/48
2a02:fe80:2010::/48
2a02:fe81::/45
Signature Algorithm: sha256WithRSAEncryption
b2:6f:d4:29:b5:52:2f:af:bb:bb:9a:6e:80:dc:32:f6:d1:67:
7f:72:a7:f0:fd:29:da:cf:d0:16:18:e5:da:62:0f:a1:e8:66:
59:d7:46:ef:21:b9:18:6e:d3:c9:fc:ba:b2:8d:de:78:1b:48:
b9:8e:19:87:d8:0d:07:c7:2e:77:10:ec:21:c5:8c:61:51:69:
31:59:47:59:d8:5f:73:7b:6e:11:59:13:d1:af:b7:dc:91:43:
f3:0f:06:7c:1a:e6:ed:68:e9:a4:49:3d:6d:fa:31:ec:5a:7a:
3f:f7:ea:5d:74:33:0d:ee:4d:c3:74:29:9d:ad:fd:e4:88:8c:
11:eb:eb:ad:c3:d6:3d:f2:4d:06:90:47:63:ff:c4:c6:b2:14:
22:c6:3a:a3:67:fe:ab:db:ff:3b:d5:2e:dc:ce:96:dd:ad:fd:
7a:41:d0:c1:0a:26:56:f6:51:5f:11:67:f4:a5:8c:86:e6:08:
06:48:99:a0:f1:34:8a:ac:6f:1a:64:fd:ff:9f:48:55:14:c2:
e3:9b:75:8c:81:00:5c:fd:bc:8f:d0:ae:b8:80:05:34:22:1c:
68:8a:9c:22:0b:b9:37:a2:d8:48:05:6a:8c:1b:a0:9e:82:68:
f6:90:74:af:17:76:83:ac:e6:4d:76:e0:81:03:86:a9:35:66:
c3:80:53:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:49:56 2026 by rpki-client