Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/qWgenfzNoLxVJUxMlJg8uksYE8w.roa
File: qWgenfzNoLxVJUxMlJg8uksYE8w.roa (raw, json)
Hash identifier: 5zL8rRPK4hffhP9A424Y5VU6wUWahVSgRZ2tOwMMBLo=
Subject key identifier: A9:68:1E:9D:FC:CD:A0:BC:55:25:4C:4C:94:98:3C:BA:4B:18:13:CC
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 019F6B1639FF3580C96B483845326BD1B304
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/qWgenfzNoLxVJUxMlJg8uksYE8w.roa
Signing time: Thu 16 Jul 2026 13:20:46 +0000
ROA not before: Thu 16 Jul 2026 13:20:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44076
IP address blocks: 9.204.0.0/16 maxlen: 32
9.206.0.0/16 maxlen: 32
45.129.40.0/21 maxlen: 32
45.135.244.0/22 maxlen: 32
45.137.172.0/22 maxlen: 32
45.141.72.0/22 maxlen: 32
45.142.4.0/22 maxlen: 32
188.34.64.0/18 maxlen: 32
192.214.160.0/19 maxlen: 32
193.19.129.0/24 maxlen: 32
193.19.130.0/24 maxlen: 32
193.148.160.0/19 maxlen: 32
213.17.0.0/18 maxlen: 32
2a05:b540::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:16:39:ff:35:80:c9:6b:48:38:45:32:6b:d1:b3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Jul 16 13:20:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9681e9dfccda0bc55254c4c94983cba4b1813cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:65:f3:80:97:b8:a7:8d:79:52:3d:f7:64:ee:
fa:07:b9:01:7c:11:6f:41:78:04:a7:4e:40:98:61:
b7:b4:c8:76:e2:3f:94:4d:9c:8f:b8:0d:9c:62:2a:
0a:5a:7b:8d:66:f8:5f:27:76:09:90:87:a9:8d:c6:
af:1e:59:87:78:a8:35:46:48:94:6d:42:14:80:10:
aa:8d:f9:8b:43:17:ec:dc:9a:53:00:76:1c:b9:cf:
91:a4:68:e4:12:d2:bf:e2:d0:2c:68:84:eb:a9:c9:
05:06:ae:b7:3f:0c:c0:43:51:db:fd:f4:04:99:33:
64:ef:2d:f9:12:77:eb:80:aa:da:be:49:d2:a1:bd:
3d:17:4d:0b:d8:5d:c5:83:e9:dc:82:20:c7:4f:07:
34:71:b2:aa:1c:f9:7d:92:bc:68:50:84:23:a7:88:
77:41:14:23:d5:0f:01:12:19:16:fa:9b:69:22:08:
48:66:25:d1:16:68:fb:6a:72:25:67:54:06:e0:cd:
78:9c:11:94:f9:8f:fa:26:bc:f2:a3:36:54:e6:f8:
1f:86:d5:59:85:de:8d:92:57:36:bc:ca:46:27:01:
1e:27:7d:3b:5d:8f:6c:76:d1:b7:13:e8:e9:6b:bd:
eb:22:21:62:2a:38:74:9e:10:34:39:d8:92:07:c4:
1b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:68:1E:9D:FC:CD:A0:BC:55:25:4C:4C:94:98:3C:BA:4B:18:13:CC
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/qWgenfzNoLxVJUxMlJg8uksYE8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.204.0.0/16
9.206.0.0/16
45.129.40.0/21
45.135.244.0/22
45.137.172.0/22
45.141.72.0/22
45.142.4.0/22
188.34.64.0/18
192.214.160.0/19
193.19.129.0-193.19.130.255
193.148.160.0/19
213.17.0.0/18
IPv6:
2a05:b540::/29
Signature Algorithm: sha256WithRSAEncryption
7a:b5:84:59:ec:89:67:1f:04:4b:5d:b0:ee:31:de:9f:80:d2:
85:2b:ef:08:f4:2d:50:84:95:10:56:41:76:7a:1a:77:a0:b9:
bd:52:e5:4f:aa:60:fd:26:6d:0f:65:ea:c8:67:b4:91:18:e1:
2b:37:e7:8a:6f:6a:89:09:8e:0b:14:cc:77:52:b3:09:d9:ce:
a6:db:6d:7e:d7:f6:3a:fe:9e:81:4d:2e:a6:df:93:7e:d2:e8:
f1:9a:a6:33:9d:cf:0c:40:8d:fc:8e:2b:76:e9:ad:78:9a:b6:
04:bc:82:08:dc:2c:7a:e5:5c:7c:17:49:0e:48:26:90:9d:49:
ec:aa:24:82:52:a0:a4:2e:c7:ca:bd:94:d3:22:e0:ef:d6:29:
95:8c:82:8c:83:9f:a1:56:98:29:47:61:9e:63:64:6e:a7:df:
c5:cf:ff:31:ee:38:8d:42:ed:3c:fa:8b:69:d5:c9:86:77:e1:
3a:2d:ff:b7:c8:f8:5d:98:b9:e8:cb:43:a9:cd:b6:dc:e5:93:
55:0c:a3:75:1f:71:6c:39:77:d4:a2:88:b4:6d:82:79:e3:4b:
bd:96:09:f5:5e:c3:a0:2a:63:37:6f:3c:49:18:7c:3b:0a:97:
f4:7c:d8:ca:d5:27:4d:63:82:23:2d:e8:79:f1:83:96:cd:ef:
7c:fd:06:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:43:50 2026 by rpki-client