Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/h9kEZ8UFchng7Fgn18sKMWP2dfE.roa
File: h9kEZ8UFchng7Fgn18sKMWP2dfE.roa (raw, json)
Hash identifier: 29jgxbbdfoE54njVDtPkxlAECQ/NKqThVd1YymiTX4c=
Subject key identifier: 87:D9:04:67:C5:05:72:19:E0:EC:58:27:D7:CB:0A:31:63:F6:75:F1
Certificate issuer: /CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Certificate serial: 019F2368B0A9F0FF0E70E83987F25E51600D
Authority key identifier: 25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/h9kEZ8UFchng7Fgn18sKMWP2dfE.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 666
IP address blocks: 84.205.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b0:a9:f0:ff:0e:70:e8:39:87:f2:5e:51:60:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87d90467c5057219e0ec5827d7cb0a3163f675f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:0f:89:00:4e:f1:93:c4:2b:04:81:b0:bd:
0d:91:7d:eb:e0:1a:1d:a7:c1:f2:45:a3:8b:6b:76:
af:31:38:77:de:14:69:f4:57:b8:db:d0:d5:6a:ca:
bc:d4:32:2f:d8:47:37:08:ad:00:fa:0e:42:a0:ad:
40:02:04:08:52:09:ad:2b:28:7f:24:f3:d8:19:56:
ec:61:29:22:b2:8b:0c:00:56:55:06:7a:92:51:74:
16:1a:31:39:32:e1:03:f7:01:ff:f3:85:9f:87:d4:
5f:e6:9f:48:b4:31:b1:e0:dc:08:9f:9b:f0:af:c9:
83:88:f3:78:b3:27:4b:17:a8:06:bd:c8:cf:0f:d5:
ae:2e:b4:50:cd:eb:e3:65:3c:c7:a0:05:20:32:9b:
b5:ff:cb:b8:23:db:b8:ea:ea:88:97:f5:ab:03:01:
14:b6:b2:92:e7:fc:62:08:f2:e3:18:aa:c1:68:4e:
74:44:47:14:49:63:62:58:3c:5d:f8:d8:9b:6c:3d:
34:91:ec:30:8a:c6:3c:db:e3:02:7a:cd:5a:e7:70:
88:c2:bd:6e:00:ef:86:bb:09:31:83:4e:24:43:57:
22:d7:15:2b:96:ec:69:83:85:11:69:00:4f:84:de:
a1:65:4b:a5:8a:84:45:72:f9:6c:85:8e:12:73:55:
14:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D9:04:67:C5:05:72:19:E0:EC:58:27:D7:CB:0A:31:63:F6:75:F1
X509v3 Authority Key Identifier:
keyid:25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/h9kEZ8UFchng7Fgn18sKMWP2dfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.81.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:74:b4:97:db:22:8e:2c:33:13:7a:bb:27:7a:26:33:8c:2f:
8d:ff:8d:02:ff:f7:67:4a:2c:ea:a3:bc:3c:bf:24:b8:c0:0a:
bc:44:6e:02:38:84:c7:3c:42:53:6e:89:8f:02:a3:cf:47:2e:
68:1c:02:75:90:2c:c5:e2:43:90:8c:d9:94:37:0f:85:a0:19:
48:59:a3:ef:37:24:1d:01:7c:6d:a8:18:60:d5:b2:dd:8a:af:
4a:be:25:91:d9:48:46:d7:d4:ab:69:ca:34:49:ad:63:93:d0:
78:b1:f4:47:90:4b:85:f7:03:e6:c9:b6:1f:d2:ce:4f:f5:2f:
7f:2b:50:69:a1:54:74:af:9c:f7:0b:cc:f1:e1:ce:72:f6:e6:
a5:5e:db:a4:98:7f:0e:76:0e:1d:ee:18:c7:eb:e1:8e:18:33:
22:72:bd:8e:88:89:bd:8a:05:6f:eb:b6:2b:70:2d:2d:65:e9:
6b:b7:7e:ef:73:39:51:f6:5d:da:c5:3c:3f:2f:19:4d:09:87:
75:05:49:a9:68:8c:18:93:e1:3e:e2:bf:fe:34:01:94:c2:cd:
96:5b:54:e6:98:81:dc:54:40:de:1e:ef:a8:07:2d:00:b2:26:
a3:af:4f:ab:d2:4c:d9:f5:29:18:35:08:84:f4:91:d6:c8:20:
b7:c7:fb:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaLCp8P8OcOg5h/JeUWANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDkzYTgxMDBkNGIzN2VkM2NkOGJiYzFhNzllOWYyMGQw
NjRhOTkwHhcNMjYwNzAyMTUxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2Q5MDQ2N2M1MDU3MjE5ZTBlYzU4MjdkN2NiMGEzMTYzZjY3NWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSkPiQBO8ZPEKwSBsL0NkX3r4Bod
p8HyRaOLa3avMTh33hRp9Fe429DVasq81DIv2Ec3CK0A+g5CoK1AAgQIUgmtKyh/
JPPYGVbsYSkisosMAFZVBnqSUXQWGjE5MuED9wH/84Wfh9Rf5p9ItDGx4NwIn5vw
r8mDiPN4sydLF6gGvcjPD9WuLrRQzevjZTzHoAUgMpu1/8u4I9u46uqIl/WrAwEU
trKS5/xiCPLjGKrBaE50REcUSWNiWDxd+NibbD00kewwisY82+MCes1a53CIwr1u
AO+Guwkxg04kQ1ci1xUrluxpg4URaQBPhN6hZUulioRFcvlshY4Sc1UUtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIfZBGfFBXIZ4OxYJ9fLCjFj9nXxMB8GA1UdIwQY
MBaAFCXZOoEA1LN+082LvBp56fINBkqZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRrNmdRRFVzMzdUell1OEdubnA4ZzBHU3BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt
ZTY2MzY5NjQ5NDExLzEvaDlrRVo4VUZjaG5nN0ZnbjE4c0tNV1AyZGZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx
LzEvSmRrNmdRRFVzMzdUell1OEdubnA4ZzBHU3BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVM1RMA0G
CSqGSIb3DQEBCwUAA4IBAQB8dLSX2yKOLDMTersneiYzjC+N/40C//dnSizqo7w8
vyS4wAq8RG4COITHPEJTbomPAqPPRy5oHAJ1kCzF4kOQjNmUNw+FoBlIWaPvNyQd
AXxtqBhg1bLdiq9KviWR2UhG19Sraco0Sa1jk9B4sfRHkEuF9wPmybYf0s5P9S9/
K1BpoVR0r5z3C8zx4c5y9ualXtukmH8Odg4d7hjH6+GOGDMicr2OiIm9igVv67Yr
cC0tZelrt37vczlR9l3axTw/LxlNCYd1BUmpaIwYk+E+4r/+NAGUws2WW1TmmIHc
VEDeHu+oBy0Asiajr0+r0kzZ9SkYNQiE9JHWyCC3x/t+
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:59:00 2026 by rpki-client