Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/j9udvZV4wqSgwynVtG1Tk9etNZM.roa
File: j9udvZV4wqSgwynVtG1Tk9etNZM.roa (raw, json)
Hash identifier: UE8Eda0TblFVo748GuwkA3iQLV6Av85UPlTb1UeTNtU=
Subject key identifier: 8F:DB:9D:BD:95:78:C2:A4:A0:C3:29:D5:B4:6D:53:93:D7:AD:35:93
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 01A0A95B4B36D0997EEE7863235967CD75F7
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/j9udvZV4wqSgwynVtG1Tk9etNZM.roa
Signing time: Wed 16 Sep 2026 08:35:27 +0000
ROA not before: Wed 16 Sep 2026 08:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 62.68.66.0/24 maxlen: 24
87.236.148.0/24 maxlen: 24
185.184.219.0/24 maxlen: 24
185.249.53.0/24 maxlen: 24
194.9.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:5b:4b:36:d0:99:7e:ee:78:63:23:59:67:cd:75:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Sep 16 08:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fdb9dbd9578c2a4a0c329d5b46d5393d7ad3593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:25:37:ed:80:a7:a5:0f:42:08:8f:87:a2:
ba:b4:f1:56:01:8b:a8:15:73:35:d9:cb:05:35:3a:
9f:96:f0:df:0b:bf:95:b9:83:bb:5f:4e:87:6e:c1:
9a:e0:a5:f9:35:90:3d:43:c4:68:4d:2f:a9:d5:53:
f2:e9:20:b0:d2:f5:dd:b4:5a:53:30:da:28:b3:3e:
47:ee:2e:dc:24:b0:37:4e:d1:e7:3c:03:22:ab:fe:
ae:27:38:e4:68:15:a3:d0:1a:43:c0:00:cb:87:c2:
8b:93:a5:99:9d:8a:15:8b:06:84:a1:b4:97:a2:a1:
69:11:09:75:54:21:f5:9d:e9:17:7c:d4:9f:6d:25:
e2:b4:21:4d:cd:aa:a3:cf:92:ab:74:54:88:8d:97:
dc:d8:50:f2:40:b0:90:3b:f3:b7:79:cb:c8:f5:ff:
c7:f8:6a:c2:d2:9b:cb:b4:cc:6a:cd:6c:09:66:eb:
7f:b0:ca:cc:37:a0:f6:bf:aa:26:ae:72:e4:39:72:
46:86:b6:aa:da:d2:af:98:f5:d1:3e:4a:88:ec:37:
76:97:fc:ef:51:6c:5b:6c:85:35:88:d2:95:03:1d:
3f:21:f3:c6:68:2d:19:84:b1:40:20:2d:26:b8:6b:
9e:af:09:c1:eb:e4:24:7e:5b:4b:db:81:84:be:0f:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DB:9D:BD:95:78:C2:A4:A0:C3:29:D5:B4:6D:53:93:D7:AD:35:93
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/j9udvZV4wqSgwynVtG1Tk9etNZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.66.0/24
87.236.148.0/24
185.184.219.0/24
185.249.53.0/24
194.9.181.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:21:80:65:c4:64:ce:5c:3d:8a:34:bc:8d:09:6f:8a:46:e2:
86:54:53:0f:32:35:02:e3:e3:0e:40:f3:18:db:0b:7e:d3:8b:
87:3b:2b:5b:35:3c:2c:7b:1b:0a:8c:24:99:e4:16:55:89:65:
b1:e2:7b:ba:91:a0:b9:55:e1:22:db:34:e0:ec:12:d8:df:39:
77:97:3a:c9:6f:97:7d:9e:50:f9:cf:ce:82:85:2a:76:63:c5:
15:1e:10:eb:f2:92:a4:ae:b2:4d:ff:71:97:48:e9:d4:06:ec:
5d:53:65:23:d5:20:91:7a:29:6b:ab:2b:f8:2d:b5:cc:61:ae:
5e:15:a4:56:df:52:3b:94:34:b7:8e:41:5c:16:95:4f:eb:84:
8d:6f:88:5e:2d:3f:02:51:be:8f:75:bb:82:09:f7:a1:f1:e9:
f2:49:56:0e:9f:d3:09:0b:8e:6d:a6:63:83:c1:9a:41:e2:e4:
eb:5e:17:4d:0f:38:8b:49:c0:48:71:56:d9:e8:77:74:f9:89:
58:34:2f:c0:e3:29:d3:30:95:b1:15:26:d5:61:c2:99:17:98:
c5:ed:48:b0:1e:8d:56:b9:d6:6f:98:1b:5d:b7:95:40:d4:55:
c2:50:40:aa:ea:29:be:9c:ff:e0:6a:02:bf:77:67:76:38:20:
70:f2:3f:ce
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaCpW0s20Jl+7nhjI1lnzXX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh
ZGFlNzUwHhcNMjYwOTE2MDgzNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmRiOWRiZDk1NzhjMmE0YTBjMzI5ZDViNDZkNTM5M2Q3YWQzNTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktYlN+2Ap6UPQgiPh6K6tPFWAYuo
FXM12csFNTqflvDfC7+VuYO7X06HbsGa4KX5NZA9Q8RoTS+p1VPy6SCw0vXdtFpT
MNoosz5H7i7cJLA3TtHnPAMiq/6uJzjkaBWj0BpDwADLh8KLk6WZnYoViwaEobSX
oqFpEQl1VCH1nekXfNSfbSXitCFNzaqjz5KrdFSIjZfc2FDyQLCQO/O3ecvI9f/H
+GrC0pvLtMxqzWwJZut/sMrMN6D2v6omrnLkOXJGhraq2tKvmPXRPkqI7Dd2l/zv
UWxbbIU1iNKVAx0/IfPGaC0ZhLFAIC0muGuerwnB6+QkfltL24GEvg85twIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFI/bnb2VeMKkoMMp1bRtU5PXrTWTMB8GA1UdIwQY
MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt
YmM2Nzk0ZTk1ZTVhLzEvajl1ZHZaVjR3cVNnd3luVnRHMVRrOWV0TlpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh
LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAPkRCAwQA
V+yUAwQAubjbAwQAufk1AwQAwgm1MA0GCSqGSIb3DQEBCwUAA4IBAQAcIYBlxGTO
XD2KNLyNCW+KRuKGVFMPMjUC4+MOQPMY2wt+04uHOytbNTwsexsKjCSZ5BZViWWx
4nu6kaC5VeEi2zTg7BLY3zl3lzrJb5d9nlD5z86ChSp2Y8UVHhDr8pKkrrJN/3GX
SOnUBuxdU2Uj1SCReilrqyv4LbXMYa5eFaRW31I7lDS3jkFcFpVP64SNb4heLT8C
Ub6PdbuCCfeh8enySVYOn9MJC45tpmODwZpB4uTrXhdNDziLScBIcVbZ6Hd0+YlY
NC/A4ynTMJWxFSbVYcKZF5jF7UiwHo1WudZvmBtdt5VA1FXCUECq6im+nP/gagK/
d2d2OCBw8j/O
-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:41 2026 by rpki-client