Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7382e1-acd8-4f8b-92b8-107a27220071/1/9a7AiwDzEdepE21q5QIgpC-QQJg.roa
File: 9a7AiwDzEdepE21q5QIgpC-QQJg.roa (raw, json)
Hash identifier: J06hMIeVTSaFdIFwsDShPyHIC1yuFakT1lXZGtETdE8=
Subject key identifier: F5:AE:C0:8B:00:F3:11:D7:A9:13:6D:6A:E5:02:20:A4:2F:90:40:98
Certificate issuer: /CN=bea9f30ae939e2f2aef7ff56a702d0de7f7765c1
Certificate serial: 019E973DE09AB9401D7522F15F564EA07146
Authority key identifier: BE:A9:F3:0A:E9:39:E2:F2:AE:F7:FF:56:A7:02:D0:DE:7F:77:65:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqnzCuk54vKu9_9WpwLQ3n93ZcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/7382e1-acd8-4f8b-92b8-107a27220071/1/9a7AiwDzEdepE21q5QIgpC-QQJg.roa
Signing time: Fri 05 Jun 2026 10:04:35 +0000
ROA not before: Fri 05 Jun 2026 10:04:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 188.241.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/7382e1-acd8-4f8b-92b8-107a27220071/1/vqnzCuk54vKu9_9WpwLQ3n93ZcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/7382e1-acd8-4f8b-92b8-107a27220071/1/vqnzCuk54vKu9_9WpwLQ3n93ZcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqnzCuk54vKu9_9WpwLQ3n93ZcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:3d:e0:9a:b9:40:1d:75:22:f1:5f:56:4e:a0:71:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea9f30ae939e2f2aef7ff56a702d0de7f7765c1
Validity
Not Before: Jun 5 10:04:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5aec08b00f311d7a9136d6ae50220a42f904098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:b5:39:49:32:15:9e:75:88:d2:69:76:c9:
4f:60:0d:16:08:ba:c7:ce:f0:69:94:90:3b:75:1a:
a5:00:ed:b0:ae:05:f3:af:1e:5e:02:eb:59:f7:2b:
b1:d4:a0:dc:0c:f7:7c:9c:52:65:36:d9:c5:95:4c:
a2:de:34:c1:06:70:a8:95:4a:21:b3:13:4a:76:d5:
81:4f:9b:ec:34:66:e9:53:89:1c:45:eb:46:d0:96:
18:f0:1d:4f:54:d2:81:07:fe:85:31:66:a4:a7:f4:
c4:9e:60:88:ed:46:c5:7a:5b:bb:14:7d:aa:6a:2c:
c0:ab:a2:c1:64:e0:f7:8c:2c:a7:51:c8:33:3e:1e:
8f:63:b6:10:92:88:13:50:86:c3:b3:18:6c:d3:f3:
f9:9c:62:61:1a:b0:f5:3d:6b:c5:fe:a9:46:99:79:
e8:d2:78:f1:18:3f:98:da:c2:04:32:cc:fe:58:da:
6a:b1:68:35:01:07:2a:56:d2:63:78:dd:20:e1:21:
b2:6b:a7:33:3a:1a:6b:88:57:e0:f5:1e:2f:c6:9f:
8b:33:9c:80:75:b9:58:a3:43:1e:7c:15:1e:94:f0:
89:48:f4:0a:83:84:9b:6d:c7:70:e4:d6:78:bb:4a:
f8:e4:3c:75:69:f8:69:c7:76:5b:e1:96:9c:13:29:
01:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AE:C0:8B:00:F3:11:D7:A9:13:6D:6A:E5:02:20:A4:2F:90:40:98
X509v3 Authority Key Identifier:
keyid:BE:A9:F3:0A:E9:39:E2:F2:AE:F7:FF:56:A7:02:D0:DE:7F:77:65:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqnzCuk54vKu9_9WpwLQ3n93ZcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7382e1-acd8-4f8b-92b8-107a27220071/1/9a7AiwDzEdepE21q5QIgpC-QQJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7382e1-acd8-4f8b-92b8-107a27220071/1/vqnzCuk54vKu9_9WpwLQ3n93ZcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.220.0/24
Signature Algorithm: sha256WithRSAEncryption
51:c6:29:3a:7a:90:30:0a:c3:87:30:75:d3:2c:d3:3e:b9:fe:
73:bf:46:0a:36:c4:31:65:64:dd:5d:65:70:b8:f4:ba:21:35:
4f:e7:d1:b0:52:34:38:67:3c:6e:d3:20:51:6d:7b:d3:ea:e1:
8e:c2:f7:27:d2:1c:9f:ed:98:72:7b:60:1d:fc:4a:e9:ce:38:
b8:bb:18:a8:7a:5e:0e:58:8f:82:2b:ba:bc:06:c8:8a:b2:2f:
05:36:1c:ee:4b:e0:24:fd:90:2a:87:7e:f8:20:34:75:3f:a0:
69:72:8a:0d:db:a5:98:c0:95:f1:f9:46:42:44:74:74:1d:52:
a0:bb:ed:cf:82:5a:d7:01:04:8f:a0:f6:44:a4:a0:5d:c2:10:
ed:e7:12:a0:9c:58:4e:13:76:f0:31:a8:31:91:91:56:93:4a:
d2:3c:bc:68:81:a1:e2:23:1b:fe:b7:37:34:d1:fa:cd:a5:22:
6e:50:46:11:86:54:6e:97:cf:5d:5e:49:23:f6:11:0a:a1:e7:
e5:a6:42:5f:50:02:31:58:0f:5c:31:bc:a9:2e:e1:b8:6a:cf:
2e:05:33:2b:ce:c9:fc:28:f2:94:8c:f5:be:d2:db:2a:74:08:
90:8e:ae:2d:c5:90:0b:bc:0d:eb:a4:14:b1:e1:5d:db:06:1e:
6c:67:47:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:30 2026 by rpki-client