Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/9HrYFMMhRzunORVYCvC_pb-N7bs.roa
File: 9HrYFMMhRzunORVYCvC_pb-N7bs.roa (raw, json)
Hash identifier: XF9butY/Gh4KQYkahnljs5A/itIVZDX8G2S0GnjfQz4=
Subject key identifier: F4:7A:D8:14:C3:21:47:3B:A7:39:15:58:0A:F0:BF:A5:BF:8D:ED:BB
Certificate issuer: /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial: 01A0119BA39BB980B66A1D8A033C5F95B4E6
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/9HrYFMMhRzunORVYCvC_pb-N7bs.roa
Signing time: Mon 17 Aug 2026 21:23:27 +0000
ROA not before: Mon 17 Aug 2026 21:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 89.124.224.0/20 maxlen: 24
185.11.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:9b:a3:9b:b9:80:b6:6a:1d:8a:03:3c:5f:95:b4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
Validity
Not Before: Aug 17 21:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f47ad814c321473ba73915580af0bfa5bf8dedbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f3:0e:d8:63:96:73:45:55:87:37:df:a3:3c:
3a:9b:07:44:d8:b5:f4:20:20:2d:a7:6a:d4:6a:5b:
5f:26:33:99:6f:a4:0a:86:e8:1a:46:82:7b:5f:e6:
f4:c2:03:8b:f4:98:0e:14:bb:19:14:a9:bf:77:12:
70:8f:a4:2d:0e:1e:ea:7b:82:d7:77:cd:9f:56:76:
be:30:ac:d1:d8:12:70:9e:2a:dc:70:b4:a4:1a:f4:
e6:73:ae:11:91:23:ad:ab:44:97:e4:cc:ea:43:61:
80:4b:44:a1:35:84:69:fd:8a:28:7d:09:62:f0:61:
ca:3a:10:61:e0:df:ae:05:3f:6f:0a:e0:a0:10:ad:
07:e0:ae:f1:98:5c:49:1d:31:3e:23:4f:2e:82:b4:
28:f5:9e:b0:c0:22:34:6d:df:02:27:9d:56:94:86:
b0:6a:5c:8a:a6:70:95:f6:66:05:d1:4b:ee:85:18:
fd:f7:ca:3b:70:5d:ea:cd:f8:2a:bf:3d:f7:fc:71:
34:b4:4d:29:dd:e0:4d:27:b3:e2:b9:f8:58:2a:63:
64:3d:17:d7:b0:fc:eb:f7:10:38:8b:c6:25:d6:ac:
14:4f:a9:21:2f:b7:86:0c:c1:26:16:d7:fc:50:c4:
3a:0a:2a:5d:9e:89:c9:71:87:f6:4a:c7:1a:a6:98:
93:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7A:D8:14:C3:21:47:3B:A7:39:15:58:0A:F0:BF:A5:BF:8D:ED:BB
X509v3 Authority Key Identifier:
keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/9HrYFMMhRzunORVYCvC_pb-N7bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.124.224.0/20
185.11.126.0/24
Signature Algorithm: sha256WithRSAEncryption
13:2a:f4:0a:62:77:23:87:c9:a7:fd:64:b0:b2:cd:24:7e:c7:
d3:02:9b:47:07:40:74:e4:a7:d5:31:27:b9:28:53:b7:9b:fd:
d9:e8:dc:55:fe:9e:95:67:38:43:24:41:cc:72:3f:fc:81:12:
19:35:4e:d8:09:f4:6d:fd:0b:3c:7a:91:2f:35:43:de:5f:99:
f2:77:90:57:02:a7:e0:91:ba:60:61:f2:74:af:27:e4:99:36:
9b:80:be:be:d3:f1:67:d4:21:6e:4c:40:46:2d:4d:0b:7e:ee:
03:50:48:45:2c:79:6e:16:97:c3:f1:6e:eb:8b:22:e6:6f:fd:
3f:b4:27:ae:8c:14:d8:82:69:79:3a:28:46:a4:9e:68:1a:4d:
3d:b8:c1:e1:33:27:ad:8d:bf:d5:fd:c9:a1:fc:83:11:cd:b0:
21:28:ae:1c:80:26:00:f5:38:e3:2a:71:ba:6a:9f:bd:35:b5:
36:46:f2:09:1a:04:42:fc:b5:cc:88:3e:2f:86:e6:33:81:fb:
38:24:27:61:d7:e4:aa:6c:ea:a6:ab:36:49:6f:76:dc:3a:ba:
73:51:b5:bb:72:ed:52:f7:e5:8e:e8:94:d0:87:85:f8:dd:bb:
3f:72:ef:f4:3c:9d:5f:0e:1a:70:44:fd:02:65:b7:d2:df:fa:
67:ad:0f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 04:22:57 2026 by rpki-client