Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/9vuNVZAnUYEtseSzb83gMmDG1Iw.roa
File: 9vuNVZAnUYEtseSzb83gMmDG1Iw.roa (raw, json)
Hash identifier: zQTRabkQemCVyRfwPnuEUbFOgOhrF95LrsZh0t+gsCw=
Subject key identifier: F6:FB:8D:55:90:27:51:81:2D:B1:E4:B3:6F:CD:E0:32:60:C6:D4:8C
Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial: 019FD683E00C804E5DEA3BBCED61D49ADD0D
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/9vuNVZAnUYEtseSzb83gMmDG1Iw.roa
Signing time: Thu 06 Aug 2026 09:59:54 +0000
ROA not before: Thu 06 Aug 2026 09:59:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49418
IP address blocks: 194.153.135.0/24 maxlen: 24
2a01:ecc0:3::/48 maxlen: 48
2a01:ecc0:4::/48 maxlen: 48
2a01:ecc0:10::/48 maxlen: 48
2a01:ecc0:280::/42 maxlen: 42
2a01:ecc0:640::/42 maxlen: 42
2a01:ecc0:740::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:83:e0:0c:80:4e:5d:ea:3b:bc:ed:61:d4:9a:dd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Validity
Not Before: Aug 6 09:59:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6fb8d55902751812db1e4b36fcde03260c6d48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:db:39:05:80:23:6e:d2:7d:af:d6:11:db:8e:
9a:e9:e1:e8:5d:99:ea:1d:18:e1:3f:fb:48:ae:e8:
15:8f:ec:34:ad:68:fc:28:3f:8c:a2:f3:f7:e1:34:
45:e3:6f:05:d5:d4:d7:b8:81:e4:77:cd:41:fd:1b:
0e:a3:89:32:0e:5b:ad:b7:68:9b:ca:ee:db:6e:5f:
53:a0:64:fb:bc:c5:ad:5d:ac:23:a2:d4:3f:72:dc:
a4:11:5a:fc:22:5f:f8:b5:90:df:fa:ac:d0:2b:1e:
64:c9:cf:e6:74:68:2f:a0:cf:9a:dd:93:c3:c4:8d:
c9:fa:5f:74:0e:0c:20:bb:96:a4:51:d5:94:a5:fd:
7f:ec:39:43:12:d0:73:5b:a6:bb:30:c3:85:06:1d:
c1:3c:44:77:16:0f:cf:4c:6d:be:f6:d4:67:d2:5d:
29:54:63:88:bc:73:70:16:69:5c:5b:97:61:b8:37:
84:3e:72:c3:97:b9:9f:f8:2f:16:b2:60:ec:d6:fb:
d0:26:68:c4:cc:45:00:43:04:1e:87:8e:88:96:9d:
4c:d7:5f:9c:82:51:ab:31:1f:3d:21:79:1e:92:0f:
97:ae:e5:7d:ef:a9:e1:31:54:12:08:17:28:9a:fc:
2a:a9:b4:75:89:97:29:61:a0:59:bc:18:c3:16:15:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FB:8D:55:90:27:51:81:2D:B1:E4:B3:6F:CD:E0:32:60:C6:D4:8C
X509v3 Authority Key Identifier:
keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/9vuNVZAnUYEtseSzb83gMmDG1Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.135.0/24
IPv6:
2a01:ecc0:3::-2a01:ecc0:4:ffff:ffff:ffff:ffff:ffff
2a01:ecc0:10::/48
2a01:ecc0:280::/42
2a01:ecc0:640::/42
2a01:ecc0:740::/42
Signature Algorithm: sha256WithRSAEncryption
17:f5:f8:39:3a:83:cd:9a:91:55:d0:05:79:04:15:2d:b2:bc:
16:9c:56:fb:13:e1:c9:1f:fe:58:f1:b2:89:9b:1f:eb:ac:71:
f5:01:74:bf:3d:da:91:58:b2:d0:d9:4e:a9:8f:8a:9d:5c:f2:
65:ff:98:ab:3a:7f:48:99:7e:7d:df:d9:f6:d9:9d:fa:42:a5:
3d:b6:db:06:02:26:8e:5e:3d:ac:01:84:04:98:44:23:58:9c:
c2:23:61:a8:56:bd:e8:d2:46:bd:30:18:f2:f1:c4:76:ed:0b:
c8:0c:b5:fa:fd:f1:fc:c8:b8:bd:99:77:77:a1:c5:90:01:a8:
c7:82:a2:1c:9a:d3:5e:12:83:b9:1f:92:b5:b7:9d:1a:06:e4:
ce:be:5f:10:6f:b7:e4:86:fd:cb:a8:f2:d1:b5:47:e9:dc:b3:
f7:44:8e:ed:b7:e2:a1:9d:fc:1e:a8:93:ea:6a:e6:a2:c5:00:
a1:f0:0e:a6:ba:c2:b3:13:63:8e:19:47:f1:f7:01:00:22:6d:
48:51:a5:7e:84:8c:54:f3:31:2c:8b:c8:7a:08:b9:37:31:8c:
5e:12:f6:bc:62:84:6e:ee:a3:b5:cd:ca:a9:bc:76:a0:eb:79:
e9:f8:52:e2:d7:20:46:3a:a4:a7:0d:70:73:8a:89:72:20:d5:
8c:e0:62:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:29:45 2026 by rpki-client