Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/sSLL9k_GNaLdFta4_f5P1UHmR7g.roa
File: sSLL9k_GNaLdFta4_f5P1UHmR7g.roa (raw, json)
Hash identifier: LwBt7bM7PDXkDNGp0Fd2PCvLwCzUJYU/BH9mgT76T90=
Subject key identifier: B1:22:CB:F6:4F:C6:35:A2:DD:16:D6:B8:FD:FE:4F:D5:41:E6:47:B8
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0D41DBF6135720B534652C135DFBF6DEF
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/sSLL9k_GNaLdFta4_f5P1UHmR7g.roa
Signing time: Thu 24 Sep 2026 15:51:54 +0000
ROA not before: Thu 24 Sep 2026 15:51:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2.56.44.0/22 maxlen: 22
5.253.160.0/22 maxlen: 22
45.67.176.0/22 maxlen: 22
83.150.238.0/24 maxlen: 24
83.150.239.0/24 maxlen: 24
85.209.136.0/22 maxlen: 22
89.36.174.0/24 maxlen: 24
141.98.92.0/22 maxlen: 22
152.89.8.0/22 maxlen: 22
171.22.36.0/22 maxlen: 22
185.206.129.0/24 maxlen: 24
185.206.130.0/23 maxlen: 23
188.92.27.0/24 maxlen: 24
188.119.88.0/22 maxlen: 22
193.168.180.0/22 maxlen: 22
194.32.162.0/24 maxlen: 24
194.38.28.0/22 maxlen: 22
195.211.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:1d:bf:61:35:72:0b:53:46:52:c1:35:df:bf:6d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 24 15:51:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b122cbf64fc635a2dd16d6b8fdfe4fd541e647b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:0a:9d:19:9c:e6:46:aa:13:f2:08:ae:a8:
89:b6:7f:24:58:a5:4b:0d:33:f3:39:a5:27:1b:1f:
53:d9:62:0a:fe:88:a4:89:08:36:39:0f:8d:fd:f2:
0f:78:af:7e:e5:02:4e:4c:e0:e4:36:3d:a7:64:34:
7f:ee:28:fe:c8:b9:eb:37:3f:a8:9b:28:51:16:b5:
ae:75:14:30:91:a5:38:1d:5d:9b:cf:43:15:b8:36:
e3:01:78:8b:44:94:a4:98:ab:29:b9:2e:10:95:83:
29:c7:e0:57:49:08:96:dc:cf:99:7a:4d:9b:ff:53:
e3:b5:d9:b0:b0:8b:8a:6c:0c:0b:a5:f6:d6:e0:72:
d3:16:0d:b4:41:fd:eb:de:91:f8:18:79:38:6c:bd:
a1:bd:69:79:f7:e3:07:11:78:5a:33:85:ca:e0:22:
57:ba:b1:07:03:c9:4a:aa:b2:8a:c6:57:30:41:1a:
81:5a:cf:4b:23:2a:b8:43:0a:92:7d:ee:71:94:7f:
0e:86:21:1e:46:11:8f:19:f8:0d:26:fb:69:74:d0:
ef:06:e7:bc:fb:7f:bd:3c:42:2d:45:5c:bb:70:b5:
50:a7:8d:a9:18:d9:77:eb:26:bd:17:b8:29:b9:d6:
07:11:2a:30:dc:27:e0:75:44:3d:37:84:30:cd:0b:
c7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:22:CB:F6:4F:C6:35:A2:DD:16:D6:B8:FD:FE:4F:D5:41:E6:47:B8
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/sSLL9k_GNaLdFta4_f5P1UHmR7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.44.0/22
5.253.160.0/22
45.67.176.0/22
83.150.238.0/23
85.209.136.0/22
89.36.174.0/24
141.98.92.0/22
152.89.8.0/22
171.22.36.0/22
185.206.129.0-185.206.131.255
188.92.27.0/24
188.119.88.0/22
193.168.180.0/22
194.32.162.0/24
194.38.28.0/22
195.211.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:49:d4:b0:76:58:52:d5:f1:7b:b6:ce:c9:66:f5:2b:e0:b8:
8d:24:69:b5:00:ec:6e:3b:96:97:de:96:6b:48:3d:87:67:91:
d3:4c:64:14:1d:43:4f:de:08:1a:1a:57:d6:81:f9:1e:ab:40:
e7:87:ec:ac:44:d5:ba:11:76:1c:9d:5b:f2:b3:86:e9:ca:1d:
65:4f:4e:2a:08:df:8b:53:90:1f:a1:24:24:f5:47:a1:6d:46:
75:b6:63:27:f6:ca:be:56:ea:1a:30:99:84:a2:c9:9c:93:64:
a5:b0:d9:c3:7b:88:15:ce:27:ff:2d:30:26:e6:be:03:57:22:
3a:45:62:43:78:29:33:15:69:b6:7d:f2:34:3d:0d:86:71:29:
c1:8c:be:1c:f2:ae:71:8e:e2:dc:ee:bf:aa:19:0b:2b:df:75:
c5:7c:15:78:1b:f5:e9:9d:4f:58:79:53:aa:51:43:9d:31:05:
98:82:08:63:84:c5:c0:86:0d:9a:fe:d1:c4:66:2b:d9:0a:79:
9d:27:21:ff:96:b9:42:9b:75:3c:bd:67:ea:b4:f3:b2:67:7c:
26:fa:a3:0d:d5:a3:3e:6e:ab:93:45:8f:ea:74:ab:ee:6c:fa:
10:3d:6f:93:86:05:52:85:71:7a:ad:ad:a0:82:76:f8:82:e9:
00:32:99:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:44:01 2026 by rpki-client