Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/9Hu5_KEvVkuaYsN5m6cQzzKMIjI.roa
File: 9Hu5_KEvVkuaYsN5m6cQzzKMIjI.roa (raw, json)
Hash identifier: p+jhtgM1l26n79s209lOfRrA6/2Vzy+6l6es1YSywE4=
Subject key identifier: F4:7B:B9:FC:A1:2F:56:4B:9A:62:C3:79:9B:A7:10:CF:32:8C:22:32
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 019EF934E7B42E5D5619687EE08A5B6874C0
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/9Hu5_KEvVkuaYsN5m6cQzzKMIjI.roa
Signing time: Wed 24 Jun 2026 10:37:34 +0000
ROA not before: Wed 24 Jun 2026 10:37:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4755
IP address blocks: 141.137.232.0/24 maxlen: 24
141.137.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:34:e7:b4:2e:5d:56:19:68:7e:e0:8a:5b:68:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Jun 24 10:37:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f47bb9fca12f564b9a62c3799ba710cf328c2232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:79:eb:67:d8:75:1f:88:63:84:f8:90:3e:e9:
7b:45:54:31:85:01:69:56:c9:88:c3:0a:6b:36:24:
54:15:f0:e2:72:9a:fb:b0:31:06:d5:45:9b:1f:06:
37:c6:70:d6:d2:47:43:02:14:05:b0:2b:ac:02:ab:
58:e0:c2:18:a7:c7:eb:f3:ae:49:39:1d:c9:f6:44:
fa:5c:e5:d3:e3:a1:52:5b:d2:26:b0:45:e5:c0:c6:
64:f0:bd:91:58:9d:f2:92:c7:95:59:1d:78:26:a6:
81:62:da:c0:51:5e:45:8e:37:40:c9:0b:c9:14:9e:
e9:7c:8c:45:65:5f:31:6a:92:3a:80:bb:a6:62:a4:
3b:ae:4d:33:8c:fb:46:ce:d4:26:81:7a:f2:88:e8:
fb:65:be:0c:69:25:e4:db:68:86:bd:ee:d1:b3:c1:
30:c9:f6:56:ab:19:c8:a5:b9:58:ca:8a:65:73:66:
68:a6:c8:16:fa:69:2f:65:a7:aa:0c:94:07:bc:5c:
fc:f1:5f:f5:7a:8f:ed:18:c3:2f:34:a8:0d:9a:c7:
ed:c5:53:16:25:66:8d:93:7b:b9:aa:21:70:c4:76:
75:53:cd:21:f8:e6:e4:5b:38:d4:9c:57:d7:12:8d:
84:fd:6c:28:7e:eb:55:44:1c:72:41:9f:a7:f8:bb:
0c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7B:B9:FC:A1:2F:56:4B:9A:62:C3:79:9B:A7:10:CF:32:8C:22:32
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/9Hu5_KEvVkuaYsN5m6cQzzKMIjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.137.232.0/23
Signature Algorithm: sha256WithRSAEncryption
26:28:7f:88:f5:4d:6a:59:9f:26:28:87:ff:93:e7:77:fb:87:
8d:d7:8e:96:2a:74:8f:24:1c:ef:01:99:23:2c:51:8c:63:9c:
3d:d4:89:ad:67:c4:90:eb:df:e2:90:db:3c:a5:9f:c0:7c:bd:
96:03:7d:48:7d:3b:f3:27:25:28:91:d8:52:ac:92:51:67:16:
9b:77:06:8b:09:37:99:ff:a5:e3:e5:65:20:ab:5b:10:69:aa:
12:a9:d1:ef:99:6d:32:f8:f5:0a:f2:03:aa:f7:b5:12:b4:a9:
7c:1a:5d:94:cf:bf:a6:45:33:43:4f:49:b3:fe:fb:7b:61:d6:
a1:5b:09:26:4b:94:a8:80:2b:8d:f6:1f:94:e6:62:2b:6b:e1:
90:54:81:e7:86:d7:f8:5a:70:f0:17:e9:a8:28:3d:f3:b6:32:
ec:7b:5f:e5:72:ec:56:21:2b:33:4a:db:7d:0c:1e:19:2e:16:
bd:7c:fb:0b:aa:9d:e1:45:34:75:d7:3d:31:23:c5:9f:22:cd:
fd:6d:46:72:2a:88:25:ab:86:5a:01:f1:5a:ec:d8:63:4a:4d:
33:99:66:37:e9:4d:53:f8:89:64:e8:b7:83:be:0f:b5:33:d5:
83:1f:82:0f:92:72:27:70:99:ba:74:34:00:00:60:83:98:7c:
5d:60:69:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:17 2026 by rpki-client