Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/9PkOo2TNgEs6RrJqygS1OIvZsbo.roa
File: 9PkOo2TNgEs6RrJqygS1OIvZsbo.roa (raw, json)
Hash identifier: ybHDxR2XWOSAXhyh+5lF8BHc4WWKg+0pLGrT3ZFgjpM=
Subject key identifier: F4:F9:0E:A3:64:CD:80:4B:3A:46:B2:6A:CA:04:B5:38:8B:D9:B1:BA
Certificate issuer: /CN=10dec2716198ba3ebea332d859f49a53bea50df5
Certificate serial: 019F23686E2D2AB9478A677BC0CEEC972070
Authority key identifier: 10:DE:C2:71:61:98:BA:3E:BE:A3:32:D8:59:F4:9A:53:BE:A5:0D:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EN7CcWGYuj6-ozLYWfSaU76lDfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/9PkOo2TNgEs6RrJqygS1OIvZsbo.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203825
IP address blocks: 185.122.188.0/23 maxlen: 23
185.122.190.0/23 maxlen: 23
193.110.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/EN7CcWGYuj6-ozLYWfSaU76lDfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/EN7CcWGYuj6-ozLYWfSaU76lDfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EN7CcWGYuj6-ozLYWfSaU76lDfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6e:2d:2a:b9:47:8a:67:7b:c0:ce:ec:97:20:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10dec2716198ba3ebea332d859f49a53bea50df5
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4f90ea364cd804b3a46b26aca04b5388bd9b1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:64:a6:d7:a4:fe:5f:41:98:c6:5d:b0:ac:81:
c5:0f:34:01:ce:44:e5:c0:7a:d7:58:7b:90:61:5a:
b8:74:64:27:30:94:16:58:48:8e:a9:db:20:51:a3:
ce:ac:74:24:5a:1f:be:29:97:9c:f6:6e:70:d4:2d:
fa:fa:0a:bc:93:9d:bb:bf:8b:c1:a5:6e:be:ac:61:
1e:d0:83:28:19:75:6a:64:8e:6f:d7:84:ed:fd:1c:
ff:d5:57:ff:4b:96:2e:a4:21:5a:b1:9e:09:44:c0:
a5:6c:65:04:e0:be:c4:17:8e:05:66:ec:37:47:dc:
1d:eb:00:90:b0:22:be:f3:72:07:00:47:1f:81:6c:
3f:11:1c:7e:3a:4b:39:8d:6b:a5:b7:81:97:19:3a:
dc:34:dd:94:db:b9:26:ae:87:20:25:16:9d:23:ba:
f7:3a:6a:ff:7c:90:e7:b4:01:11:4e:0e:eb:29:87:
7f:9d:d2:6c:21:10:63:4a:1f:9f:8a:2e:09:06:8f:
23:c3:c1:bf:13:a6:bc:7d:b7:ea:2d:7c:e1:86:47:
cb:24:4c:1e:49:7c:f1:5c:79:56:a0:e7:da:56:fd:
7e:48:66:4e:45:97:8c:f8:d7:55:5c:22:57:fb:c7:
d3:ce:a5:bd:9c:1d:0c:2a:0e:29:84:2d:c3:e1:6c:
6a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F9:0E:A3:64:CD:80:4B:3A:46:B2:6A:CA:04:B5:38:8B:D9:B1:BA
X509v3 Authority Key Identifier:
keyid:10:DE:C2:71:61:98:BA:3E:BE:A3:32:D8:59:F4:9A:53:BE:A5:0D:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EN7CcWGYuj6-ozLYWfSaU76lDfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/9PkOo2TNgEs6RrJqygS1OIvZsbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/EN7CcWGYuj6-ozLYWfSaU76lDfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.188.0/22
193.110.196.0/22
Signature Algorithm: sha256WithRSAEncryption
00:4d:6f:7b:e0:dc:08:61:8a:ba:04:5d:57:b0:67:ba:6a:46:
e7:18:90:dd:ee:95:77:c2:83:42:19:4d:f6:5d:54:d8:e1:ca:
61:3c:62:a2:2e:e8:72:24:c6:53:49:21:41:f4:08:27:c9:a6:
e2:28:c2:07:c1:85:fa:07:c0:a7:5b:3d:dc:0f:d7:73:6f:ee:
ca:c0:cf:e1:11:43:d1:55:94:38:ab:fd:e0:53:f4:e5:cb:e7:
9c:57:cc:32:ba:6b:a1:85:ff:b3:89:76:f5:10:73:69:46:1b:
17:bd:c6:3e:20:94:bb:61:34:7b:b8:80:73:b9:b7:b8:a1:bd:
46:49:94:cd:c9:e6:0e:8d:d8:08:8a:ca:9e:68:22:67:3f:11:
b0:51:ec:22:85:23:c4:53:79:20:d9:3b:1b:e6:bf:75:41:85:
69:54:77:26:da:01:a4:b5:eb:8a:45:07:2b:ab:99:0c:22:93:
cf:34:89:1f:b0:9d:26:6c:6b:2d:56:03:4a:2d:99:4c:cf:13:
d7:b7:a2:17:58:52:dc:56:e4:15:be:f4:bf:af:ba:45:dc:dd:
8d:18:0a:87:d8:1d:f2:38:05:51:9e:61:c9:28:ae:3e:af:ed:
22:e7:8e:cd:19:c5:5c:14:f4:1b:0a:9a:7a:b4:4a:89:3e:02:
a7:56:c6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 03:23:57 2026 by rpki-client