Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/9_iw07uqSclZNlHgZLeP5dBYFZ0.roa
File: 9_iw07uqSclZNlHgZLeP5dBYFZ0.roa (raw, json)
Hash identifier: Ha4TzflNkZ6J4gu6KdD+YSepG6TSyldMr4LJCh0su8E=
Subject key identifier: F7:F8:B0:D3:BB:AA:49:C9:59:36:51:E0:64:B7:8F:E5:D0:58:15:9D
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 01A0F2074CA363D9BACCCF03045AA65616AE
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/9_iw07uqSclZNlHgZLeP5dBYFZ0.roa
Signing time: Wed 30 Sep 2026 11:15:59 +0000
ROA not before: Wed 30 Sep 2026 11:15:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218534
IP address blocks: 91.250.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:07:4c:a3:63:d9:ba:cc:cf:03:04:5a:a6:56:16:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Sep 30 11:15:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7f8b0d3bbaa49c9593651e064b78fe5d058159d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:7c:54:86:39:6d:07:93:8f:10:6b:9d:ff:
21:8d:77:ad:d0:7d:05:8f:bf:70:c6:bf:58:3b:c1:
35:97:69:d2:8b:18:03:b5:10:dc:bf:49:eb:1b:4b:
18:0c:92:d6:45:a9:28:93:84:e4:33:36:ab:0e:aa:
1e:5e:a6:fe:37:47:e5:de:21:99:cb:7a:46:33:ba:
2a:94:d8:6c:d3:01:17:25:64:8f:30:c5:2a:da:08:
65:72:e1:bb:61:c5:62:7b:64:18:1a:b6:3e:53:bf:
46:f9:38:35:10:9b:6f:71:3a:c6:04:d3:e0:9f:a8:
ce:b2:7c:27:89:d0:7c:cc:58:78:33:23:14:d7:f3:
f5:67:6e:f5:b0:fe:ab:56:d7:41:ab:d4:7c:52:da:
ad:ea:1a:8b:a1:34:3c:16:14:d2:02:f5:b2:23:1c:
80:6c:59:01:e9:28:2d:d7:4c:1b:53:f6:1b:64:4f:
e8:9c:46:bb:a7:ac:34:d6:4c:79:23:49:99:95:1a:
b9:26:a7:e6:26:52:4f:41:39:69:80:32:ed:bc:73:
97:d1:94:67:6a:a9:35:69:1a:03:bf:3b:f1:25:8f:
ed:b3:7d:40:12:b7:d5:72:69:0f:88:0b:b5:90:b4:
cc:f8:e2:82:b8:96:34:41:3b:b6:2d:3a:df:5f:a0:
f6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F8:B0:D3:BB:AA:49:C9:59:36:51:E0:64:B7:8F:E5:D0:58:15:9D
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/9_iw07uqSclZNlHgZLeP5dBYFZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.250.253.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:56:5b:0d:24:75:8f:a0:20:85:9f:81:bb:4d:79:69:df:9f:
93:ab:c3:c6:11:1a:a2:12:c1:a3:40:79:82:e2:65:50:53:45:
9d:fd:04:5a:00:66:6f:e4:b8:7e:44:0b:29:d6:7c:b1:ce:25:
da:68:35:da:2c:2d:78:5e:07:41:6e:ca:b5:8c:6c:2d:ac:3a:
d1:2a:b0:6c:c0:6c:a4:ee:7c:ee:96:28:65:b5:8b:2f:b1:70:
8c:e3:e1:0a:7e:5a:8c:e3:b4:66:61:3a:11:72:79:6e:fb:86:
83:1c:b2:23:e7:4f:c0:ea:21:23:f2:80:fb:b7:cd:f0:dd:dd:
5d:a7:56:f3:60:66:90:d7:ac:8d:a2:54:57:6c:da:a3:9c:06:
3c:df:37:a6:af:88:20:8b:7e:54:e8:46:70:4e:f0:cc:1e:e6:
1f:5b:1f:5a:95:ae:74:98:92:ff:ad:6a:68:c0:8e:5d:87:7a:
61:5f:fb:f4:9a:ac:86:ed:bb:5d:2e:d8:b9:c9:90:eb:ec:57:
ef:8e:31:83:02:5c:1d:43:fc:9d:87:a2:ee:8d:c9:37:85:4c:
bb:9d:c2:6a:83:b7:5a:d1:a2:a0:f3:8a:bb:e7:29:17:98:06:
34:cc:bb:84:90:e2:c8:81:20:00:78:53:e2:ec:be:0c:37:4f:
45:67:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:00:39 2026 by rpki-client