Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/n9qmpAoSA1R8U4GD0I8j4Vv63a8.roa
File: n9qmpAoSA1R8U4GD0I8j4Vv63a8.roa (raw, json)
Hash identifier: 0W/3KMbd9i97+6xPnkab6k58PJSfQhVOYX4+RwN9fLY=
Subject key identifier: 9F:DA:A6:A4:0A:12:03:54:7C:53:81:83:D0:8F:23:E1:5B:FA:DD:AF
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A1608222D7370073BF12FFA5A10C0D9E23
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/n9qmpAoSA1R8U4GD0I8j4Vv63a8.roa
Signing time: Wed 21 Oct 2026 22:08:23 +0000
ROA not before: Wed 21 Oct 2026 22:08:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136809
IP address blocks: 85.209.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:82:22:d7:37:00:73:bf:12:ff:a5:a1:0c:0d:9e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 21 22:08:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fdaa6a40a1203547c538183d08f23e15bfaddaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:77:6f:9f:a3:e1:e9:20:2f:fc:0d:4d:fe:2c:
f4:87:52:5a:71:c3:9e:be:b8:2e:da:8c:07:7b:b7:
a5:a5:74:60:d7:e6:cf:1a:83:f7:54:ca:d0:d6:3e:
c8:b0:f1:74:88:d5:2f:e0:40:f5:42:72:ed:f8:12:
6e:31:4b:1d:f9:27:a1:b2:40:65:7e:47:56:a7:df:
5e:ba:c2:4c:38:db:38:1b:fc:9b:3f:24:da:ac:af:
cf:69:4b:96:ef:db:03:b3:cd:0f:d7:3c:b4:a0:27:
c4:4e:fb:35:23:36:8d:eb:01:b7:7d:cf:53:79:01:
9c:f1:46:70:f2:27:52:88:09:8e:3f:99:b8:9a:80:
84:db:7f:55:70:84:ae:81:f8:51:6d:87:70:7e:c6:
bd:0f:dd:96:ca:61:9d:4b:8a:f4:08:d9:8f:92:2a:
73:24:dc:e7:65:1d:89:65:c0:cf:dc:bd:ea:b6:51:
81:02:5c:c3:34:c9:ae:f2:37:12:9b:3e:b9:57:e1:
59:2e:fc:d2:c9:87:39:09:1e:a7:26:fc:5f:4d:62:
41:30:aa:42:ef:76:9f:fc:b5:60:f7:46:c6:0f:fd:
70:f7:76:cb:4b:d5:2d:c0:15:64:37:c8:cc:8c:b2:
cf:b8:b2:bd:cc:fe:2d:39:ee:b9:9f:dc:1f:b1:53:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DA:A6:A4:0A:12:03:54:7C:53:81:83:D0:8F:23:E1:5B:FA:DD:AF
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/n9qmpAoSA1R8U4GD0I8j4Vv63a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.160.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a7:6b:7f:12:f6:e7:c5:b9:64:f6:82:ee:9c:7f:c4:fb:a7:
f4:ce:2b:83:42:4b:b0:00:57:99:f4:89:0a:e7:c9:14:3a:36:
a3:a6:10:ad:b9:21:2c:18:48:15:3a:cb:ff:ae:a4:5a:19:8d:
eb:b8:9f:14:2b:7c:36:64:ab:70:ff:d3:51:10:70:88:b2:d1:
e5:ba:ff:52:d5:18:83:39:88:6b:ce:85:12:e7:b4:d4:fe:05:
d0:fb:da:67:1d:10:e5:44:f9:2c:c1:f5:9a:b8:47:e6:43:62:
b1:3e:cf:75:a4:65:72:d4:41:3e:b1:64:83:87:b5:cd:d3:26:
5f:e5:6c:f8:3c:53:c4:a3:72:88:01:0e:df:0f:4b:3a:3b:af:
f6:50:ad:d5:f4:54:17:7d:0a:01:05:fb:a5:8d:1c:4f:22:e1:
ed:6f:f1:39:77:8c:aa:da:a4:de:1a:0f:ca:e0:ab:b6:6a:e2:
a9:ee:f5:1e:da:0c:65:c3:f9:e2:9a:c7:9c:bb:58:27:52:ec:
71:36:af:3e:57:77:ba:99:34:ff:fc:53:4c:ec:6f:16:19:66:
ba:03:e7:ca:dd:29:7f:e0:a2:5f:ce:57:86:d9:ae:8a:90:e0:
6c:9a:5a:af:ae:74:d7:ab:c2:00:6d:13:98:c8:ae:24:e0:74:
de:05:e9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:01 2026 by rpki-client