Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9jVnUzzn7CSC_Un4lKWaM4UPLTM.roa
File: 9jVnUzzn7CSC_Un4lKWaM4UPLTM.roa (raw, json)
Hash identifier: koTTNHdXUvAwo7tjFuchlJEOvSv0kqhGg2679UUK130=
Subject key identifier: F6:35:67:53:3C:E7:EC:24:82:FD:49:F8:94:A5:9A:33:85:0F:2D:33
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F236921485363DA26C310E907B7D1F1E3
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9jVnUzzn7CSC_Un4lKWaM4UPLTM.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400810
IP address blocks: 80.240.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:21:48:53:63:da:26:c3:10:e9:07:b7:d1:f1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f63567533ce7ec2482fd49f894a59a33850f2d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:9d:c1:c3:53:13:b8:7d:c5:83:ee:fa:bb:
b9:64:72:91:c6:74:c3:7f:d0:fe:d2:d5:a0:6e:27:
3b:f6:cd:cb:78:bc:e7:df:05:b5:f0:dd:fc:39:f5:
56:79:9e:74:09:1b:e2:8a:5c:89:eb:27:10:4c:dd:
e7:c9:d3:16:51:ee:bc:5a:eb:c0:08:6f:e3:b1:89:
52:e0:f5:80:33:fb:53:ff:a6:3f:d5:61:e4:c4:b4:
07:df:59:d0:6d:e4:7b:cf:65:45:c2:09:32:47:4e:
49:0c:5e:fb:78:e6:d6:10:5a:e5:73:ff:00:b6:63:
a2:fe:f8:7c:97:ac:0e:e0:a2:d7:d0:ff:f6:49:0a:
5c:98:f8:7c:e3:79:4e:68:2f:d1:1d:3d:79:98:49:
91:48:32:ce:d7:0d:32:07:59:ba:92:62:de:8c:68:
36:dc:6d:9b:7e:a5:ee:dc:6f:2b:dc:00:b9:5f:8a:
d1:03:06:00:e0:3f:a4:f8:c5:79:69:af:16:ec:fb:
8d:a6:a4:87:fb:2c:e3:60:ce:a0:4b:7e:5b:d0:df:
59:26:8b:97:5d:a8:77:e7:8f:b2:d9:0b:a3:53:54:
ff:e9:36:7b:1b:57:8c:c4:03:ce:3a:6b:85:e3:e7:
d9:f8:e9:7d:c9:8d:f8:d4:cd:88:51:e9:27:71:9d:
d8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:35:67:53:3C:E7:EC:24:82:FD:49:F8:94:A5:9A:33:85:0F:2D:33
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9jVnUzzn7CSC_Un4lKWaM4UPLTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.84.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ac:c3:81:9b:fa:13:0b:c0:3b:1f:85:30:1f:c3:22:c8:63:
41:55:4d:97:42:a9:be:64:ba:f5:a4:d6:b7:e8:26:00:f7:a4:
9b:d1:a2:bb:d1:05:81:df:3e:b4:53:9b:cf:e8:c4:6e:f2:53:
c2:1e:d4:1f:1d:2e:4c:75:17:a6:fe:cd:ea:ad:96:d9:33:f3:
6a:47:31:2f:c3:94:07:16:79:b9:3d:80:58:f8:a7:e7:d5:7b:
46:e3:71:ec:57:b2:2c:34:6a:58:2b:ea:f3:79:64:a4:9c:8e:
23:bc:06:ea:47:7d:20:89:9b:98:54:36:99:6b:58:d2:ea:31:
6c:50:99:17:1a:59:de:46:85:06:b3:80:73:87:1c:0a:ac:a8:
5c:fa:86:db:54:8c:7e:98:52:1e:64:e4:d4:96:c5:6e:26:3d:
1f:23:b6:ed:f4:0e:20:2d:3e:09:48:ee:7c:13:e8:fa:e7:26:
b5:a1:b5:79:f3:4f:91:c1:bb:e3:17:d7:88:60:03:51:fd:14:
3f:a7:e8:d7:74:82:4b:3e:27:2f:a6:f7:c8:02:7f:27:de:5e:
69:90:e2:c5:39:0e:d6:d2:be:ef:9e:84:e5:4e:a0:99:7a:ae:
5e:bd:5f:64:d0:a7:d6:49:fd:83:2c:6d:8e:60:3b:b0:4b:9a:
2c:8c:a6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:15:57 2026 by rpki-client