Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/w99y4hewi91ft6cwvKNdLfccWvI.roa
File: w99y4hewi91ft6cwvKNdLfccWvI.roa (raw, json)
Hash identifier: hVyVHtHx29BIURMLUBs5I7jbwrsqatz5PdTOMV6ZOCA=
Subject key identifier: C3:DF:72:E2:17:B0:8B:DD:5F:B7:A7:30:BC:A3:5D:2D:F7:1C:5A:F2
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 01A0578E346E2AFDA8C2DE1C080265E1F0CF
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/w99y4hewi91ft6cwvKNdLfccWvI.roa
Signing time: Mon 31 Aug 2026 11:22:12 +0000
ROA not before: Mon 31 Aug 2026 11:22:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398830
IP address blocks: 185.104.136.0/24 maxlen: 24
185.104.137.0/24 maxlen: 24
185.104.138.0/24 maxlen: 24
185.104.139.0/24 maxlen: 24
217.65.132.0/24 maxlen: 24
217.65.133.0/24 maxlen: 24
217.65.134.0/24 maxlen: 24
217.65.135.0/24 maxlen: 24
2a10:97c0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:8e:34:6e:2a:fd:a8:c2:de:1c:08:02:65:e1:f0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Aug 31 11:22:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3df72e217b08bdd5fb7a730bca35d2df71c5af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:d8:c5:a8:8b:5b:bd:de:67:40:16:91:a1:
4f:ba:2e:6b:1d:70:00:cb:4d:01:37:e5:f2:7f:3a:
64:2f:77:07:a2:8e:48:c7:5f:3e:56:cc:a5:9f:b4:
85:f6:45:90:ac:42:f2:cd:f0:dd:43:da:9e:a3:91:
02:5b:9d:a5:66:e9:e8:21:fc:09:f0:e8:c3:ce:4f:
3f:28:33:47:a2:5d:d1:53:b3:91:1f:5a:65:e0:6a:
b3:ea:37:22:f2:30:21:98:28:d5:b0:9a:0d:af:13:
f7:0a:1a:43:72:be:9d:69:2e:ca:7d:a3:e1:85:4e:
1b:70:01:89:ae:0f:b2:01:bb:40:82:f0:55:37:85:
19:b8:6f:ca:80:ee:5b:22:a2:98:d9:a0:ff:ba:c9:
e2:d0:72:43:b6:2a:0f:25:52:13:11:66:17:36:f2:
d0:90:b9:86:a3:b4:0c:82:ad:18:97:22:4b:fb:a4:
d8:54:47:43:aa:6f:30:42:95:f0:cd:0e:12:ca:90:
b2:d1:b7:0a:d0:6d:2e:62:46:b4:fc:59:2a:a9:d3:
d9:6f:11:2e:72:77:0c:2e:95:68:94:72:60:4b:80:
80:82:6b:cc:11:84:55:7e:7f:f5:7d:a6:0e:55:60:
27:f2:a2:3f:36:54:6d:55:83:d1:6d:2d:34:39:a8:
e0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DF:72:E2:17:B0:8B:DD:5F:B7:A7:30:BC:A3:5D:2D:F7:1C:5A:F2
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/w99y4hewi91ft6cwvKNdLfccWvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.136.0/22
217.65.132.0/22
IPv6:
2a10:97c0:3::/48
Signature Algorithm: sha256WithRSAEncryption
8c:11:d6:7d:a4:35:e5:21:d0:30:bc:d4:36:e2:97:4a:d3:31:
a6:7f:d3:17:c6:8f:e3:78:50:77:c1:7f:d4:2a:f2:d0:af:a9:
07:d0:ba:8e:ae:a6:a3:6a:78:4c:b3:a8:c3:a1:60:66:60:0f:
0c:24:66:b9:23:a1:11:4e:d3:c8:db:4d:c0:ea:91:d4:06:1b:
61:f1:c9:a9:04:68:38:65:87:a0:5f:63:28:01:82:55:85:22:
0d:a2:ce:1e:37:b9:f3:ae:b8:28:3d:f6:ae:0a:77:0b:ec:b6:
de:ec:2d:6f:71:a6:fe:b5:e5:d2:d8:a0:2f:86:66:08:b0:89:
a7:ba:d0:03:27:ee:b1:d8:9f:8a:ba:db:06:b0:5f:81:8b:99:
24:19:c1:0c:1c:8f:11:41:b3:ff:c4:89:cd:9c:b9:f6:5f:d7:
3c:a7:39:40:59:ce:e2:80:40:11:c1:ce:f5:d7:2c:d4:6e:22:
59:ff:ef:4e:e2:75:51:10:b0:b7:5c:46:88:8e:ae:51:26:90:
f3:e2:be:d1:8f:a6:9d:87:6a:da:a7:6a:bb:de:3a:72:05:a0:
1d:8b:c3:ae:24:0c:e9:a4:11:26:ed:4d:a6:f2:9c:0b:11:02:
bc:ed:e1:53:31:bc:1a:8d:73:19:1b:2d:44:df:2b:47:4c:1c:
d5:2f:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 02:39:31 2026 by rpki-client