Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/fX9Ntx01MeYfchEoD86Q07pznOM.roa
File: fX9Ntx01MeYfchEoD86Q07pznOM.roa (raw, json)
Hash identifier: eS+MajeTkn8ySJPzagAdaZWH+HXRs8kG8NnJME6PFfU=
Subject key identifier: 7D:7F:4D:B7:1D:35:31:E6:1F:72:11:28:0F:CE:90:D3:BA:73:9C:E3
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 019FDC614AC3FDCB11CB1BF57E138C792377
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/fX9Ntx01MeYfchEoD86Q07pznOM.roa
Signing time: Fri 07 Aug 2026 13:19:51 +0000
ROA not before: Fri 07 Aug 2026 13:19:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214996
IP address blocks: 159.195.12.0/22 maxlen: 22
159.195.16.0/22 maxlen: 22
159.195.91.0/24 maxlen: 24
159.195.92.0/22 maxlen: 22
159.195.107.0/24 maxlen: 24
159.195.232.0/22 maxlen: 22
159.195.236.0/22 maxlen: 22
2a0a:4cc0:101::/48 maxlen: 48
2a0a:4cc0:101::/52 maxlen: 52
2a0a:4cc0:120::/43 maxlen: 43
2a0a:4cc0:2000::/43 maxlen: 48
2a0a:4cc0:2000::/48 maxlen: 48
2a0a:4cc0:2000:4300::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:61:4a:c3:fd:cb:11:cb:1b:f5:7e:13:8c:79:23:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Aug 7 13:19:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d7f4db71d3531e61f7211280fce90d3ba739ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:1c:b6:72:3d:8f:48:59:c2:9c:7d:82:32:
08:f4:53:18:8f:84:dc:5b:7c:b1:4a:55:ca:76:e3:
33:de:25:10:8d:25:f8:59:82:2d:b3:eb:b4:c4:01:
86:29:c4:e0:ab:e4:de:3a:22:a9:a3:9b:75:91:7c:
ec:01:81:fe:f3:8e:1c:63:94:d5:0c:ee:7a:41:f9:
65:02:a0:a3:68:e3:93:fc:36:58:a1:3a:3e:46:48:
53:4f:e4:74:c6:f1:db:67:1c:93:71:85:2c:4e:4e:
61:e8:fe:ca:7f:6b:38:1c:33:62:46:20:8a:69:d3:
1c:40:83:6e:ba:1e:a4:a0:dd:b4:6a:97:85:0e:24:
30:78:a7:bb:6d:34:b6:82:cb:fa:70:c1:3d:07:aa:
70:76:6d:8d:5e:27:56:ae:cf:d5:08:42:cb:e7:bd:
f7:7b:fb:d1:fa:87:9d:71:d5:dd:7c:f7:c6:0a:ec:
c0:be:66:77:81:14:93:82:1d:70:bd:5e:b5:f0:fd:
27:51:b1:3f:81:46:37:52:7f:17:79:d4:62:fd:8e:
56:b4:e2:2a:28:67:49:06:4d:5f:ef:ec:84:33:e3:
2d:e9:58:5f:61:42:51:36:f0:e6:df:c4:d2:d3:ec:
b7:f1:dd:89:54:e2:21:1e:73:7c:e9:79:44:58:8a:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7F:4D:B7:1D:35:31:E6:1F:72:11:28:0F:CE:90:D3:BA:73:9C:E3
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/fX9Ntx01MeYfchEoD86Q07pznOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.195.12.0-159.195.19.255
159.195.91.0-159.195.95.255
159.195.107.0/24
159.195.232.0/21
IPv6:
2a0a:4cc0:101::/48
2a0a:4cc0:120::/43
2a0a:4cc0:2000::/43
Signature Algorithm: sha256WithRSAEncryption
58:8e:e4:7e:af:0b:2f:cb:ab:89:9e:48:94:39:98:a8:a6:d5:
dd:d6:d9:0f:ae:23:24:54:68:0a:72:98:59:b5:e3:18:df:2e:
36:8d:6a:0f:7b:3c:a3:bb:c3:90:7e:b5:f0:de:3b:a2:98:2a:
ae:29:60:52:08:49:67:ed:a1:c5:f7:79:9b:0d:28:23:f2:0a:
5d:68:1d:20:78:a7:86:eb:62:11:95:5d:88:61:dc:6f:48:1d:
9a:be:67:76:79:8e:2f:ad:57:3a:01:8f:42:9e:63:cd:81:07:
b0:e0:2b:20:cb:2b:90:35:d1:fc:1d:cf:f8:31:d8:78:ea:8e:
da:6d:88:03:81:2b:16:3e:3a:d2:1b:8f:04:9a:0e:b4:83:94:
42:1b:42:73:df:11:c7:6c:97:00:fa:1b:37:78:95:f7:7f:21:
20:05:8d:7f:47:36:af:af:fc:8a:df:1e:05:52:a1:af:29:df:
40:a8:5b:2b:56:84:0d:7e:46:66:12:64:f5:72:29:3a:81:44:
a6:be:00:65:a5:fd:68:62:40:56:08:bf:0a:68:69:70:46:09:
0c:ef:cd:1c:f8:d9:f8:fe:31:78:96:da:ac:9c:00:27:e7:30:
dd:1b:16:21:80:18:20:49:a0:75:3b:49:af:53:84:c8:8e:8a:
87:1e:a9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:34 2026 by rpki-client