Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/9fiT-dO7XPwFcEwx0HZP2sS9UxA.roa
File: 9fiT-dO7XPwFcEwx0HZP2sS9UxA.roa (raw, json)
Hash identifier: qEn0+InsBxH+mpCDmqSBzcIIMnrAvNNmhijeZpT72pU=
Subject key identifier: F5:F8:93:F9:D3:BB:5C:FC:05:70:4C:31:D0:76:4F:DA:C4:BD:53:10
Certificate issuer: /CN=1ecee5934105c98b53725564b4f747bba7b451c6
Certificate serial: 019F2368CA47F1429932807DFEC0DE58F3EE
Authority key identifier: 1E:CE:E5:93:41:05:C9:8B:53:72:55:64:B4:F7:47:BB:A7:B4:51:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hs7lk0EFyYtTclVktPdHu6e0UcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/9fiT-dO7XPwFcEwx0HZP2sS9UxA.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205644
IP address blocks: 185.68.182.0/24 maxlen: 24
2a13:8b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/Hs7lk0EFyYtTclVktPdHu6e0UcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/Hs7lk0EFyYtTclVktPdHu6e0UcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hs7lk0EFyYtTclVktPdHu6e0UcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ca:47:f1:42:99:32:80:7d:fe:c0:de:58:f3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecee5934105c98b53725564b4f747bba7b451c6
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5f893f9d3bb5cfc05704c31d0764fdac4bd5310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:19:86:c9:78:a4:ef:d7:0b:8d:64:40:64:
fd:3d:a7:e5:38:9e:68:c8:e7:40:54:20:08:2e:03:
46:45:3b:df:ec:05:45:19:21:d0:d3:fa:72:9b:ed:
e9:9b:de:37:f0:8d:4e:46:ca:cb:9d:b5:73:f2:92:
8b:bc:fb:64:c0:9e:ea:5b:06:86:6a:47:0e:34:8a:
c0:f0:cf:93:16:93:fa:b2:43:03:d4:86:74:4d:94:
6b:89:f4:20:06:9e:c0:53:f2:f7:13:c8:ee:98:12:
a3:a2:2a:29:01:97:93:37:85:ce:31:ce:75:38:38:
b1:f6:5d:02:1b:86:d8:b4:34:64:99:eb:eb:54:5f:
a1:77:62:b3:8f:7c:ad:a9:06:f9:79:80:7f:4a:5f:
f1:24:0a:6b:dd:da:01:ec:63:27:41:08:6d:ca:8d:
a8:cd:18:8b:ba:ac:da:b9:0a:36:08:42:85:b3:c7:
dc:26:b4:8f:04:da:63:b8:1f:07:f7:25:0e:27:68:
3b:54:26:8f:90:40:93:be:ae:6b:5f:ef:cf:42:9d:
28:67:46:e8:32:a0:22:35:57:5d:40:7f:bc:5f:3b:
77:38:56:33:21:80:4f:52:e3:f3:9a:97:87:fd:f4:
7f:ea:84:cb:1b:c3:e2:b1:8c:19:0b:21:98:44:b7:
1d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F8:93:F9:D3:BB:5C:FC:05:70:4C:31:D0:76:4F:DA:C4:BD:53:10
X509v3 Authority Key Identifier:
keyid:1E:CE:E5:93:41:05:C9:8B:53:72:55:64:B4:F7:47:BB:A7:B4:51:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hs7lk0EFyYtTclVktPdHu6e0UcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/9fiT-dO7XPwFcEwx0HZP2sS9UxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/Hs7lk0EFyYtTclVktPdHu6e0UcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.182.0/24
IPv6:
2a13:8b00::/29
Signature Algorithm: sha256WithRSAEncryption
66:37:ef:a8:7b:73:b3:ed:c2:ee:66:16:ee:b2:1a:92:36:3e:
6d:7e:3d:9b:7f:f5:fb:cd:91:a5:af:b3:eb:3e:3e:39:bd:40:
1d:b7:9b:47:97:85:80:ed:dd:6a:ac:f7:eb:5b:8b:c9:32:e7:
4d:09:90:1d:1a:d5:0e:bc:94:0f:cf:59:b3:ea:30:da:dc:bb:
92:a7:cb:b9:19:4a:d9:51:4c:5d:7b:50:0c:50:91:5f:85:0f:
79:e1:6d:c3:ed:e6:db:fb:d9:ee:55:13:a4:94:23:25:55:31:
1b:58:af:94:7c:a3:dd:45:b1:43:1a:27:d6:45:7b:ce:68:8f:
15:65:1c:bf:67:e4:9c:ad:ee:98:e8:8f:3d:da:ee:54:ea:26:
36:56:05:f0:15:dd:ae:74:a8:93:c5:c8:01:96:5d:ac:43:1a:
f6:59:37:2b:bb:9b:9f:07:ee:33:2c:94:ef:20:06:b7:9a:81:
9a:ce:49:88:17:c2:dc:88:7d:92:2d:a4:8e:2f:76:f5:ac:2a:
07:30:1e:2a:a6:a0:b7:57:9b:40:d7:cf:0d:71:f5:49:d5:bc:
fa:c9:c7:08:e3:d2:af:3d:ff:45:b5:25:70:15:05:af:6c:bd:
26:85:6b:e5:1c:54:c7:6e:21:62:70:9a:a0:6f:8b:04:7b:84:
b8:66:12:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:21:37 2026 by rpki-client