Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/gEzZUlWbAQcOnetalzOMXX46Me4.roa
File: gEzZUlWbAQcOnetalzOMXX46Me4.roa (raw, json)
Hash identifier: nbjAHqL/ZXv7+M3ySmn6VCPxArgAI/byxBtrbJxgrpo=
Subject key identifier: 80:4C:D9:52:55:9B:01:07:0E:9D:EB:5A:97:33:8C:5D:7E:3A:31:EE
Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial: 019F1923CA08A96491C2E73047C6784B2BDE
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/gEzZUlWbAQcOnetalzOMXX46Me4.roa
Signing time: Tue 30 Jun 2026 15:26:43 +0000
ROA not before: Tue 30 Jun 2026 15:26:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 91.123.0.0/24 maxlen: 24
91.123.1.0/24 maxlen: 24
91.123.2.0/24 maxlen: 24
91.123.3.0/24 maxlen: 24
91.123.4.0/24 maxlen: 24
91.123.5.0/24 maxlen: 24
91.123.6.0/24 maxlen: 24
91.123.7.0/24 maxlen: 24
91.123.8.0/24 maxlen: 24
91.123.9.0/24 maxlen: 24
91.123.10.0/24 maxlen: 24
91.123.11.0/24 maxlen: 24
91.123.12.0/24 maxlen: 24
91.123.13.0/24 maxlen: 24
91.123.14.0/24 maxlen: 24
91.123.15.0/24 maxlen: 24
190.106.160.0/24 maxlen: 24
190.106.161.0/24 maxlen: 24
190.106.162.0/24 maxlen: 24
190.106.163.0/24 maxlen: 24
190.106.164.0/24 maxlen: 24
190.106.165.0/24 maxlen: 24
190.106.166.0/24 maxlen: 24
190.106.167.0/24 maxlen: 24
190.106.168.0/24 maxlen: 24
190.106.169.0/24 maxlen: 24
190.106.170.0/24 maxlen: 24
190.106.171.0/24 maxlen: 24
190.106.172.0/24 maxlen: 24
190.106.173.0/24 maxlen: 24
190.106.175.0/24 maxlen: 24
190.106.176.0/24 maxlen: 24
190.106.177.0/24 maxlen: 24
190.106.178.0/24 maxlen: 24
190.106.179.0/24 maxlen: 24
190.106.180.0/24 maxlen: 24
190.106.181.0/24 maxlen: 24
190.106.182.0/24 maxlen: 24
190.106.183.0/24 maxlen: 24
190.106.184.0/24 maxlen: 24
190.106.185.0/24 maxlen: 24
190.106.186.0/24 maxlen: 24
190.106.187.0/24 maxlen: 24
190.106.188.0/24 maxlen: 24
190.106.189.0/24 maxlen: 24
190.106.190.0/24 maxlen: 24
190.106.191.0/24 maxlen: 24
206.195.128.0/24 maxlen: 24
206.195.129.0/24 maxlen: 24
206.195.130.0/24 maxlen: 24
206.195.131.0/24 maxlen: 24
206.195.132.0/24 maxlen: 24
206.195.133.0/24 maxlen: 24
206.195.134.0/24 maxlen: 24
206.195.135.0/24 maxlen: 24
206.195.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:23:ca:08:a9:64:91:c2:e7:30:47:c6:78:4b:2b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Validity
Not Before: Jun 30 15:26:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=804cd952559b01070e9deb5a97338c5d7e3a31ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:de:90:9c:50:cb:09:e7:21:16:1b:59:3f:
33:7b:1a:ee:44:2b:61:d2:62:71:17:5f:47:4b:79:
f9:04:73:b4:13:11:e2:9d:f8:b6:a7:87:6f:d0:d2:
98:fd:15:f8:2e:cb:d1:45:29:f3:9a:33:c2:b5:5f:
81:22:4d:f6:34:76:c6:12:d8:f1:b9:d8:28:45:ad:
42:a2:80:83:94:9b:f7:9c:27:be:96:58:4b:a4:f4:
17:3c:54:8a:90:30:e6:ec:40:d7:65:c0:cb:8e:24:
41:18:8f:a3:75:e3:f3:0f:2d:6b:0d:f4:1d:ad:78:
19:5b:03:e1:37:d0:12:02:87:33:19:9b:ad:dc:30:
d1:09:fd:72:7b:cc:c2:31:c7:bc:f9:19:7f:ee:da:
07:96:87:1d:e0:3a:de:c6:92:cb:dc:5b:31:c6:e3:
7f:bd:57:0c:ed:9c:f8:96:df:8a:8f:6b:1a:1a:05:
4d:10:60:ee:76:89:ff:89:5f:a5:37:93:ca:6f:45:
79:e4:13:9f:b3:13:06:53:01:25:13:75:ef:a5:e1:
fa:95:e4:94:92:20:17:6f:c8:a0:9f:a4:6d:a9:44:
95:2c:eb:af:23:d8:4f:e6:9b:ae:3a:13:0f:b9:4c:
03:08:2e:df:2e:62:f4:f2:c9:fb:2a:34:04:cf:d8:
00:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4C:D9:52:55:9B:01:07:0E:9D:EB:5A:97:33:8C:5D:7E:3A:31:EE
X509v3 Authority Key Identifier:
keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/gEzZUlWbAQcOnetalzOMXX46Me4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.123.0.0/20
190.106.160.0-190.106.173.255
190.106.175.0-190.106.191.255
206.195.128.0-206.195.136.255
Signature Algorithm: sha256WithRSAEncryption
7a:2c:43:fd:39:d7:73:6b:e3:3d:ec:df:2a:dc:b4:4b:7a:60:
03:8a:1c:85:64:23:45:f3:60:da:d5:6e:f1:90:fc:1f:7b:ab:
ed:80:7f:45:c4:56:23:4b:06:80:f3:74:91:a6:d9:b1:f8:11:
de:1d:06:d7:45:93:fc:51:e4:41:a7:a2:3b:59:f0:0a:db:55:
7e:6e:fb:bf:51:48:7e:58:22:2b:8a:64:7c:6e:c4:91:85:92:
88:ad:b6:86:cf:b1:db:9e:e2:85:36:37:31:39:20:bd:11:ab:
ad:54:15:6a:f8:36:e6:09:f9:3d:ee:89:4c:f0:d3:85:06:b3:
39:2c:41:56:aa:ac:9f:bb:74:65:80:08:17:1e:9d:6d:8d:00:
56:75:61:66:12:b4:af:37:ac:5e:fc:81:fb:10:09:f5:aa:eb:
59:01:34:4c:9e:50:a1:83:52:fe:7d:cf:f4:9b:73:54:90:3e:
d1:58:3c:c4:db:de:12:2b:63:40:5d:d4:03:40:fe:f0:33:7e:
27:82:a0:84:b2:55:42:81:2c:28:31:e5:60:f7:3c:6e:35:f7:
ec:47:c1:2f:06:59:6d:31:ab:61:17:a5:d4:7d:8f:36:83:ef:
75:3a:9b:0e:9b:13:00:11:8c:1c:e6:8f:f2:c0:58:c8:b1:c0:
e8:16:5c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:52 2026 by rpki-client