Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/9nbTY9pBE5ppQKT70vyCQjeMmZA.roa
File: 9nbTY9pBE5ppQKT70vyCQjeMmZA.roa (raw, json)
Hash identifier: GhcaTojY+Sq4kKVUmTSjnzft3uRijlYH2hhZLqJrurU=
Subject key identifier: F6:76:D3:63:DA:41:13:9A:69:40:A4:FB:D2:FC:82:42:37:8C:99:90
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01A08D0A252496C14DA718ACBA2D6110733B
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/9nbTY9pBE5ppQKT70vyCQjeMmZA.roa
Signing time: Thu 10 Sep 2026 20:37:27 +0000
ROA not before: Thu 10 Sep 2026 20:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218731
IP address blocks: 132.243.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:0a:25:24:96:c1:4d:a7:18:ac:ba:2d:61:10:73:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Sep 10 20:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f676d363da41139a6940a4fbd2fc8242378c9990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e6:fc:d4:ba:a4:c0:11:ae:d0:74:58:61:63:
8e:8a:f5:d0:c1:5f:b3:8c:e3:3d:c0:e0:ad:18:0f:
fa:5e:05:62:69:0f:34:62:79:b6:f4:8a:c9:03:ef:
eb:89:df:98:47:39:21:49:e5:c2:ee:b7:2d:02:36:
ac:9a:8e:28:60:6d:12:2a:1d:9b:b5:02:08:77:c5:
ce:4c:eb:0e:73:b8:4d:50:ad:9b:b5:b3:de:ff:89:
3c:15:3c:8e:f5:07:11:2b:7e:05:b1:42:84:30:eb:
89:9a:91:ab:87:a4:78:cc:54:de:af:ce:60:e6:fe:
b4:55:2d:34:51:0a:43:2e:49:e0:f0:c0:1b:8f:71:
02:a4:0d:68:a6:24:5d:26:99:bf:7e:fb:df:51:f7:
53:7f:2a:b0:4a:f4:45:5f:61:94:dc:9f:f0:d4:9e:
60:73:75:6d:fa:d5:24:ae:f8:1b:d9:64:08:e4:a8:
2f:5c:86:3b:44:8e:3b:1b:e3:21:00:48:91:ea:fa:
4b:bb:08:0d:76:1c:ee:af:af:d3:b7:5e:fb:44:ff:
05:b1:2f:27:99:28:30:82:e1:d0:6f:61:ad:3b:ee:
b8:ba:ef:51:f1:2c:17:b3:9b:cd:84:a5:d7:10:77:
e8:1f:db:d5:4e:05:08:48:9f:08:70:80:e5:08:b1:
35:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:76:D3:63:DA:41:13:9A:69:40:A4:FB:D2:FC:82:42:37:8C:99:90
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/9nbTY9pBE5ppQKT70vyCQjeMmZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.65.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a0:db:79:00:d0:9d:03:9e:69:68:7a:71:69:02:2e:ff:99:
49:9b:34:9c:2c:77:57:a0:55:7f:2e:52:ab:92:19:06:88:39:
29:19:81:fa:77:d9:01:31:bb:dd:4f:92:0e:d7:1e:ab:9c:81:
72:db:03:99:31:95:01:40:d0:d5:a4:99:df:a5:7f:38:3d:e9:
8f:fc:3f:f7:98:bc:e5:9d:26:01:ea:2e:39:ca:9b:20:c7:eb:
85:eb:f4:fc:b7:90:d2:35:36:9d:6f:75:44:17:5a:26:cc:2c:
5e:8c:e6:a6:89:81:d8:a0:08:27:66:2a:ed:c7:80:38:46:4f:
1f:fa:e0:b5:d3:80:b2:19:9a:d8:b4:f3:7e:70:fc:d0:ed:3a:
11:d0:3e:4b:e7:6d:67:12:da:92:a2:c8:00:ee:59:bc:55:1e:
77:3b:57:05:16:bc:60:48:c9:2c:bd:4b:90:b1:33:9c:90:22:
f5:9a:83:fe:3c:03:e5:21:56:00:08:f8:d4:5f:68:45:2d:49:
c3:cf:93:7c:e5:15:88:ea:40:33:d0:49:7d:65:f8:df:8d:eb:
51:2b:5a:6d:d4:b1:84:f8:51:13:10:a5:43:c9:38:dc:51:e7:
45:37:70:44:ac:be:99:49:3d:b3:a9:8d:1d:72:1f:c3:e2:05:
d8:64:0f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:31:15 2026 by rpki-client