Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9HZnddZ9s7xvd2t84YQGAcC07Q0.roa
File: 9HZnddZ9s7xvd2t84YQGAcC07Q0.roa (raw, json)
Hash identifier: kSiTKArzStPOSrOnM3busPJbNvwLoEfByySP3gOwDSw=
Subject key identifier: F4:76:67:75:D6:7D:B3:BC:6F:77:6B:7C:E1:84:06:01:C0:B4:ED:0D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FD0CEB737D9B11D40F8528AC243CD4860
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9HZnddZ9s7xvd2t84YQGAcC07Q0.roa
Signing time: Wed 05 Aug 2026 07:23:56 +0000
ROA not before: Wed 05 Aug 2026 07:23:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219447
IP address blocks: 82.108.135.0/24 maxlen: 24
82.109.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:ce:b7:37:d9:b1:1d:40:f8:52:8a:c2:43:cd:48:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 5 07:23:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4766775d67db3bc6f776b7ce1840601c0b4ed0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:08:d0:6b:49:7e:32:72:33:44:9b:71:1c:
31:47:05:03:4f:a4:b8:11:5c:62:78:aa:f4:03:e2:
fd:f9:cb:07:6a:88:dd:d4:63:ee:9f:2e:bb:be:42:
09:74:00:83:be:c1:e8:57:67:1d:80:be:f4:46:28:
25:84:c0:55:b5:96:ed:5b:5c:bd:f2:58:25:e4:59:
3e:42:f3:13:99:80:79:b6:d2:5c:ea:20:13:f3:5d:
4b:1a:46:ca:d9:74:cf:4f:f3:35:26:de:a4:e2:b7:
1b:2a:d5:e1:ee:91:5f:ca:a3:c9:ac:2e:6c:79:0b:
3f:63:3a:56:27:e4:be:76:b3:9c:73:9b:cf:2c:cc:
9c:c3:0c:d3:de:21:e1:82:be:45:d5:78:5b:24:38:
3b:f2:94:08:fe:67:19:b7:25:cf:17:2e:00:32:23:
39:48:b9:91:e9:e7:01:3e:34:c8:2c:2e:7d:aa:e6:
d6:63:f0:5c:45:1c:bd:15:02:1d:a3:27:bd:58:c6:
91:09:e4:4c:0e:f8:0a:15:45:63:a9:1e:f2:03:2b:
2a:f9:b5:d9:61:ee:c8:e2:ed:39:fb:3e:1d:b2:5c:
d7:25:ee:8f:e9:c7:d5:53:5f:cd:d0:aa:dc:19:b9:
88:8d:a8:10:31:fa:2b:81:2f:f8:b3:58:44:33:97:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:76:67:75:D6:7D:B3:BC:6F:77:6B:7C:E1:84:06:01:C0:B4:ED:0D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9HZnddZ9s7xvd2t84YQGAcC07Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.135.0/24
82.109.158.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a3:1f:ee:94:ff:03:2e:fd:32:84:73:53:4b:42:bc:c5:a3:
fb:25:2e:92:cf:0a:21:7e:b8:95:38:22:b7:b9:a6:c7:f7:36:
80:c3:a3:4b:e8:c0:93:8e:21:65:c1:78:ae:33:41:75:5a:4c:
81:f6:45:93:b8:47:e7:79:9d:84:99:bd:3a:88:9e:06:5c:44:
9c:f3:50:b2:5c:dd:25:8b:53:f5:b4:a9:4d:fa:04:01:a8:3a:
f6:30:74:db:f4:a9:9e:55:a0:f8:42:64:bb:b1:d3:f8:1d:b8:
05:17:dc:c9:f3:a2:d0:43:c7:b0:77:4c:60:9c:13:9f:6e:b1:
f4:10:f2:24:54:fa:99:96:39:04:1f:8b:e9:c2:4a:ed:72:d8:
86:45:1f:d2:bb:96:c2:1f:44:6b:90:a2:88:b6:8a:a7:af:b4:
09:a9:fe:9b:07:1b:3a:b1:1b:a3:4f:54:55:88:ec:de:85:5f:
16:cf:78:45:e7:fd:47:2f:78:60:c7:b2:df:1e:2a:cf:66:a2:
23:8d:74:cf:24:8a:07:61:ad:11:cb:9b:17:bb:d1:ba:65:1d:
9d:32:63:29:46:b2:dd:d2:3f:0f:f2:55:e1:49:bd:42:0a:7b:
61:d8:6c:34:47:04:53:87:2a:74:8b:ec:cd:b7:e4:01:e3:a3:
47:b7:13:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 16:56:53 2026 by rpki-client