Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/P9I3lzqOObCX4RMl_3bSfYK9SZw.roa
File: P9I3lzqOObCX4RMl_3bSfYK9SZw.roa (raw, json)
Hash identifier: xEo1sUxwl82iYKIJBd8gK1fhKXg6yV6cG1k704gVD0s=
Subject key identifier: 3F:D2:37:97:3A:8E:39:B0:97:E1:13:25:FF:76:D2:7D:82:BD:49:9C
Certificate issuer: /CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Certificate serial: 01A14BA25E4E6489C6EFED4CBFCFBF3EBC54
Authority key identifier: 6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/P9I3lzqOObCX4RMl_3bSfYK9SZw.roa
Signing time: Sat 17 Oct 2026 20:51:34 +0000
ROA not before: Sat 17 Oct 2026 20:51:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34760
IP address blocks: 80.80.88.0/23 maxlen: 23
185.240.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:a2:5e:4e:64:89:c6:ef:ed:4c:bf:cf:bf:3e:bc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Validity
Not Before: Oct 17 20:51:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fd237973a8e39b097e11325ff76d27d82bd499c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:e5:eb:f2:ac:b6:b8:31:03:3d:4d:e3:21:
1e:0f:f8:71:81:2e:72:32:fc:c5:03:bd:79:b3:a4:
e0:64:f9:7c:e1:33:be:ad:17:50:87:75:ff:a4:fb:
99:52:9a:f9:1c:58:58:dc:d8:a3:f2:fa:d8:a3:40:
df:5c:08:31:d7:7b:1b:0b:7a:f9:a5:b6:3a:87:06:
1f:5a:aa:1c:6a:38:f7:92:4b:3d:16:25:7d:ed:9d:
b5:24:4a:05:6a:7f:8e:9f:09:d9:04:62:e5:27:76:
b8:28:6d:51:68:79:60:9b:10:67:05:dc:40:e4:a8:
a9:3e:62:39:c7:92:37:2e:de:6b:eb:04:d8:3d:50:
91:24:a0:4d:73:1f:b2:20:f2:13:0e:78:b0:77:28:
56:94:e2:d3:c2:4e:54:ba:09:69:5f:97:d4:95:d5:
6c:d4:92:d7:69:fc:97:72:0d:60:cd:bd:6d:cc:37:
14:c4:6c:29:a1:d9:e9:58:e5:02:cf:87:6c:ac:24:
d8:95:11:60:67:5a:59:4b:87:ea:5d:81:5d:63:42:
00:56:ab:8a:2b:83:61:a8:80:cd:0d:2b:c8:05:99:
1d:c6:4c:be:1f:c0:59:a1:e5:a9:60:cc:57:26:46:
14:46:6d:88:0e:3f:03:ec:22:f2:74:78:4b:0c:5c:
60:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D2:37:97:3A:8E:39:B0:97:E1:13:25:FF:76:D2:7D:82:BD:49:9C
X509v3 Authority Key Identifier:
keyid:6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/P9I3lzqOObCX4RMl_3bSfYK9SZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.88.0/23
185.240.212.0/22
Signature Algorithm: sha256WithRSAEncryption
44:e5:cc:94:8d:3a:7e:ef:f4:5a:1d:f0:b0:05:92:d6:e5:fd:
df:23:f5:bb:28:9b:1a:ec:93:54:50:a0:7e:29:e2:4c:f5:7c:
b2:d1:16:a9:1f:06:e3:80:d6:d2:63:83:64:a4:38:8a:d3:1c:
ab:86:f3:e2:b4:dc:9b:d8:a4:49:47:89:41:48:6c:56:0d:68:
7c:3f:d6:01:c3:1e:3f:7c:fb:90:5a:83:db:0d:ae:38:4f:1b:
36:40:b7:89:bb:4a:38:11:0b:e8:02:85:31:26:5a:26:2f:93:
f9:07:63:a0:51:1b:7c:ab:7d:d1:79:82:61:9e:d9:1e:77:8f:
c5:51:70:19:db:4e:e2:a4:61:30:6a:46:08:9f:b7:3c:7d:02:
5c:2b:f4:16:0d:0d:31:3f:cd:08:7e:08:7a:42:d4:01:d4:2c:
7c:63:2d:47:ea:c8:98:6f:f9:67:10:37:b6:0f:8a:5c:5d:ce:
85:17:69:dd:57:18:bd:cc:b1:70:f1:91:4a:3f:7e:d8:ec:f0:
b5:e4:e3:b3:cb:cf:4d:a4:f7:15:a8:42:bd:0c:14:bd:23:a5:
fd:3f:4e:0d:95:9d:c0:e7:7c:8f:54:68:2f:3b:8f:5e:b1:8c:
7f:53:37:a2:95:7c:0c:4d:7c:e6:14:24:57:0e:f9:ea:6d:f4:
3a:a9:86:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:57:11 2026 by rpki-client