Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9DOfn-jcwkb7_Vt_eX8HM0FCBHw.roa
File: 9DOfn-jcwkb7_Vt_eX8HM0FCBHw.roa (raw, json)
Hash identifier: Syr4QU4OlCAgg97ycWs8dJX2uO9dPqn7kr8l7X4lVUE=
Subject key identifier: F4:33:9F:9F:E8:DC:C2:46:FB:FD:5B:7F:79:7F:07:33:41:42:04:7C
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F410A568DBB5ED85D079A9D944DDEF1DF
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9DOfn-jcwkb7_Vt_eX8HM0FCBHw.roa
Signing time: Wed 08 Jul 2026 09:23:44 +0000
ROA not before: Wed 08 Jul 2026 09:23:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 81.168.58.0/24 maxlen: 24
89.213.202.0/23 maxlen: 24
217.144.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:0a:56:8d:bb:5e:d8:5d:07:9a:9d:94:4d:de:f1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 8 09:23:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4339f9fe8dcc246fbfd5b7f797f07334142047c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:27:f2:1d:4b:f0:68:9d:5b:40:5b:40:62:
da:63:11:d8:f5:7b:fa:a7:ee:03:1b:57:81:d5:43:
e9:8d:4d:c5:84:a5:7c:5c:76:94:2a:bb:3e:e3:34:
43:b8:39:83:41:57:90:8c:f7:70:aa:ff:cb:71:54:
ef:e5:de:94:d3:24:b8:9c:b2:de:ee:71:1e:37:75:
50:6c:79:64:aa:40:7e:5e:53:eb:d6:99:92:89:5e:
e8:4c:17:ec:fd:21:87:0b:5e:85:f0:a6:77:69:09:
29:e0:3c:ff:88:10:a4:99:06:8c:f6:89:54:42:5f:
0e:30:b0:0f:d5:7b:60:a4:67:15:a1:13:05:46:cf:
84:bb:3a:ad:94:41:8f:bb:39:b2:01:dd:5b:09:23:
5a:1c:a3:74:03:86:bb:03:18:ca:0e:15:30:b1:80:
6c:eb:29:45:d0:9e:0e:dd:0c:c7:fd:ca:0a:cf:0b:
cb:34:11:d7:fe:a7:6e:f5:0a:c5:b6:ae:80:dd:f9:
41:74:59:76:4b:ea:9d:96:87:b5:7f:0f:d1:36:79:
40:84:6c:85:71:f5:ae:9f:9c:f8:e3:d8:77:f8:49:
d5:2b:40:62:ea:e4:03:b2:32:2b:ca:6a:12:9a:bd:
30:fd:76:a9:b2:09:9f:0d:e2:0d:b1:33:20:9d:67:
38:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:33:9F:9F:E8:DC:C2:46:FB:FD:5B:7F:79:7F:07:33:41:42:04:7C
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9DOfn-jcwkb7_Vt_eX8HM0FCBHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.58.0/24
89.213.202.0/23
217.144.153.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f7:4f:e2:37:72:d8:be:38:e2:af:70:1a:56:37:fd:12:43:
05:bb:4b:22:68:14:9e:c4:62:f0:29:b0:f4:42:95:62:d4:2e:
0b:87:9a:aa:10:6d:a2:2d:5e:7c:65:e4:ac:2e:39:26:01:30:
bc:9e:0f:5e:3a:1b:2b:60:e7:e1:18:5b:8f:9a:7c:25:b4:8b:
b7:53:17:c5:9a:0d:7a:31:fc:35:a1:9b:61:13:b8:df:2a:34:
cf:10:83:25:c8:98:d8:37:d9:92:1b:c6:66:a0:74:85:40:73:
43:7f:10:cb:d5:cc:0f:28:25:2b:7a:1b:bd:7a:11:e8:9c:b1:
d0:c7:01:85:44:c3:5d:25:af:b0:d0:71:37:a1:eb:2c:a8:b2:
23:8c:15:9f:c0:2d:82:07:1c:2b:af:b2:83:e4:90:2c:04:26:
a2:25:9e:fc:b4:90:08:b8:e8:6c:ee:7e:81:f5:20:a5:b6:fc:
d3:d8:e6:2c:fe:83:34:d4:d0:f8:dd:7b:1c:bf:f4:fd:a6:06:
6a:45:98:6a:d0:3e:32:68:01:a5:d4:32:a1:89:18:25:69:55:
65:9e:75:f8:82:a1:a8:be:a9:d1:b8:84:e3:93:64:72:77:99:
71:81:0c:bd:9f:75:d7:b4:ec:d1:a5:0b:76:98:b0:cb:c3:02:
4b:3b:11:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:51 2026 by rpki-client