Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/BE9SKr84ZzNinvDUOtQsxIus1PU.roa
File: BE9SKr84ZzNinvDUOtQsxIus1PU.roa (raw, json)
Hash identifier: NJy50Gb8QXCb9hwDocalr71wywFzdVxA+AKgOp5RhCQ=
Subject key identifier: 04:4F:52:2A:BF:38:67:33:62:9E:F0:D4:3A:D4:2C:C4:8B:AC:D4:F5
Certificate issuer: /CN=f90cffcb29ec758cae3f54c6f50ab3bf69530f1a
Certificate serial: 019F2369456CE0BE835C5EB02C83678D8C37
Authority key identifier: F9:0C:FF:CB:29:EC:75:8C:AE:3F:54:C6:F5:0A:B3:BF:69:53:0F:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/BE9SKr84ZzNinvDUOtQsxIus1PU.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201801
IP address blocks: 185.140.53.0/24 maxlen: 24
2a07:1a84::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:45:6c:e0:be:83:5c:5e:b0:2c:83:67:8d:8c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90cffcb29ec758cae3f54c6f50ab3bf69530f1a
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=044f522abf386733629ef0d43ad42cc48bacd4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5c:d4:02:8f:d0:95:09:66:21:af:fe:eb:7a:
54:24:5d:e6:22:3d:60:07:3e:98:d9:28:2f:34:14:
c2:47:26:9a:41:6b:cb:8d:cf:31:1c:26:48:80:96:
7b:fb:cb:a4:8a:31:ca:88:ce:bf:24:3a:ad:df:e9:
11:71:a7:8f:f3:ab:0f:35:03:b4:b0:5e:b8:b2:64:
fc:a5:1e:32:43:2a:3e:2d:f2:1f:c6:b6:0d:9b:71:
96:6f:94:b1:d6:7b:30:1e:79:ec:2f:44:5f:2b:31:
08:db:0f:db:1f:18:26:9a:a0:13:ca:9d:2b:95:76:
98:86:52:0e:59:1d:a9:ba:78:31:47:fa:23:e2:eb:
bb:48:0a:3c:f7:52:f2:a6:d5:fa:96:eb:0f:ba:a0:
3c:5d:2b:9b:db:72:68:0c:d1:ac:d1:6f:b2:f9:3a:
24:9a:55:f0:fd:4d:29:c4:f8:02:62:92:4c:b8:c5:
bc:3d:1a:f8:0a:cf:76:1b:f5:30:53:02:08:3b:f3:
95:3a:54:d1:46:26:1d:93:53:23:89:6e:e9:14:17:
c9:4f:30:8d:d2:ae:b5:7d:03:e0:da:4e:5b:d0:27:
19:86:5d:2b:27:01:00:eb:c7:28:58:45:47:d9:c4:
e8:4c:05:8b:a0:fd:8f:5d:b4:44:6f:ab:a5:cc:b5:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4F:52:2A:BF:38:67:33:62:9E:F0:D4:3A:D4:2C:C4:8B:AC:D4:F5
X509v3 Authority Key Identifier:
keyid:F9:0C:FF:CB:29:EC:75:8C:AE:3F:54:C6:F5:0A:B3:BF:69:53:0F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/BE9SKr84ZzNinvDUOtQsxIus1PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.53.0/24
IPv6:
2a07:1a84::/44
Signature Algorithm: sha256WithRSAEncryption
50:a1:a0:5e:d7:56:46:c8:d4:92:05:f7:11:b4:be:06:a7:6e:
20:ef:8e:1f:aa:c9:1f:a1:17:7f:d1:52:02:23:9d:14:35:25:
0d:20:f5:10:21:3f:36:46:2b:6b:ea:26:bc:f4:c5:b2:a9:4c:
e4:da:94:42:0a:f9:d2:d8:77:d1:aa:5f:78:19:d2:d5:3d:f8:
3e:87:ce:60:df:42:a4:0e:a8:3e:b6:f2:f5:2d:15:6c:4c:90:
5f:46:38:11:92:58:1e:3f:97:71:33:4b:b5:ef:ff:ed:5e:f5:
64:a4:b0:98:b8:1f:34:4b:72:58:e5:99:7b:f1:98:9d:6e:94:
b1:fc:be:f9:49:9a:69:11:99:09:f4:65:24:23:78:b9:65:1b:
83:0c:7f:75:bb:c3:1c:38:1c:dd:9f:30:15:dc:0e:03:f0:85:
09:48:97:03:0c:f3:7b:f8:76:b3:1f:e3:14:1b:47:20:5d:7e:
99:fa:e3:03:5f:65:4e:a2:93:41:97:c1:02:9e:53:e1:ba:7c:
7c:ca:da:04:ed:e0:0c:80:f2:da:c9:36:b0:36:27:11:01:f9:
3d:48:49:96:98:af:a0:b2:f7:f8:25:35:9d:40:2e:85:45:b4:
89:82:d9:7e:22:66:ae:15:a5:70:5d:83:84:47:e4:1c:86:02:
7d:1c:17:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 19:52:50 2026 by rpki-client