Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/9n6YyJWp7IvRmsopFDTgxhmBQm0.roa
File: 9n6YyJWp7IvRmsopFDTgxhmBQm0.roa (raw, json)
Hash identifier: sjjxTHhwHGPnXt5JrQHPax3TE84fw1Ixy4bJH+8t+xw=
Subject key identifier: F6:7E:98:C8:95:A9:EC:8B:D1:9A:CA:29:14:34:E0:C6:19:81:42:6D
Certificate issuer: /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Certificate serial: 01A019753994FE384803C30A8818CD01D896
Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/9n6YyJWp7IvRmsopFDTgxhmBQm0.roa
Signing time: Wed 19 Aug 2026 09:58:27 +0000
ROA not before: Wed 19 Aug 2026 09:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 81.31.64.0/20 maxlen: 24
82.148.32.0/19 maxlen: 24
87.252.32.0/19 maxlen: 24
212.42.160.0/19 maxlen: 24
2a02:13a0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:75:39:94:fe:38:48:03:c3:0a:88:18:cd:01:d8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Validity
Not Before: Aug 19 09:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f67e98c895a9ec8bd19aca291434e0c61981426d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:29:4f:6c:3f:f3:47:62:f5:5e:8a:c5:17:
56:d9:04:c3:12:cc:e6:9b:e0:74:cd:47:a4:6e:fc:
85:3f:a7:4b:18:b1:ce:61:33:ca:31:30:da:ab:35:
5d:1e:df:47:72:c3:7f:f0:eb:bb:d5:a3:de:9b:4f:
91:c3:ac:d3:70:87:b6:08:fa:62:49:7f:f3:77:aa:
18:c7:11:7f:38:96:a2:4c:d7:85:46:d5:99:d1:20:
23:b1:b8:94:41:34:4f:ca:1d:72:50:9c:13:1d:a7:
ca:dd:aa:28:93:07:55:7a:b2:6d:5f:b1:3e:9a:35:
6c:91:0a:c0:83:ab:9b:6e:97:3c:cb:cc:e3:f3:c6:
29:f0:56:f5:4f:cd:21:cd:2f:03:da:c5:29:c5:d3:
7a:ef:3e:02:d2:77:2c:e7:bb:fa:0d:34:b6:5d:ed:
00:9d:75:49:a3:4b:df:2c:2f:f0:56:d3:85:76:b3:
82:bc:3b:63:24:b4:8c:ec:e5:f9:42:db:0d:c5:6c:
02:fb:bb:b9:76:a8:c4:c8:f5:54:f4:6b:1b:34:f2:
65:be:0a:19:eb:1b:59:fc:6e:55:b8:cf:4f:bf:d6:
53:f3:33:0b:72:47:51:f3:2c:80:20:76:1f:56:fc:
7c:4d:70:e1:35:62:6d:18:07:12:b5:28:8a:18:21:
46:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7E:98:C8:95:A9:EC:8B:D1:9A:CA:29:14:34:E0:C6:19:81:42:6D
X509v3 Authority Key Identifier:
keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/9n6YyJWp7IvRmsopFDTgxhmBQm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.64.0/20
82.148.32.0/19
87.252.32.0/19
212.42.160.0/19
IPv6:
2a02:13a0::/32
Signature Algorithm: sha256WithRSAEncryption
96:c0:ab:0c:f1:47:87:76:d2:94:ea:b3:bc:05:9b:5a:19:26:
15:71:3e:7f:41:e1:cb:33:cc:c4:3c:c2:c1:8e:57:16:e9:9a:
a4:a1:d9:95:c5:da:49:99:4c:a3:7d:b2:4d:43:66:56:8f:30:
f8:09:ac:eb:8d:43:ab:b6:75:64:47:f6:d7:cd:fa:c3:a7:a0:
4d:06:97:6f:32:a8:a5:33:d8:f5:17:5a:c7:49:76:f1:cd:1b:
ac:9e:2e:66:eb:8f:8f:4b:ee:ab:44:1d:42:74:e5:9d:37:d7:
e9:41:70:88:84:68:d4:54:4f:12:e3:37:94:ff:38:7a:13:d9:
6d:a8:25:c6:a4:58:a0:dd:ae:3a:cf:8d:14:1b:9c:00:d8:81:
e0:52:85:04:dd:e6:9c:74:c7:e6:c5:9c:43:80:02:1c:ea:f4:
21:64:6e:ec:f2:65:ff:05:0b:56:0e:01:3b:a8:cd:2f:a8:3b:
35:a1:f3:5b:b3:39:b3:23:9d:70:98:59:bf:62:f4:a2:06:f6:
71:77:6a:47:cb:4a:5a:7b:89:9d:eb:56:51:70:60:44:03:32:
4b:ab:e9:c9:0f:6c:2a:47:63:5e:41:04:04:53:bc:a1:c5:1d:
22:e9:ae:21:77:14:e2:76:35:52:fb:a3:39:0b:ab:2d:6e:b9:
fa:1e:21:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:10 2026 by rpki-client