Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/877gblyC3fNplcxOQRcSVA_wkoU.roa
File: 877gblyC3fNplcxOQRcSVA_wkoU.roa (raw, json)
Hash identifier: FPmfqAGJMI/bwduEg7CvapHPJGcw4GGIWlU9wyWJ4Ns=
Subject key identifier: F3:BE:E0:6E:5C:82:DD:F3:69:95:CC:4E:41:17:12:54:0F:F0:92:85
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 019E34962A0881896986EC81E5E21F0E6230
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/877gblyC3fNplcxOQRcSVA_wkoU.roa
Signing time: Sun 17 May 2026 06:18:36 +0000
ROA not before: Sun 17 May 2026 06:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206388
IP address blocks: 85.9.94.0/24 maxlen: 24
95.215.160.0/23 maxlen: 23
185.155.10.0/24 maxlen: 24
185.155.14.0/23 maxlen: 23
185.169.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:34:96:2a:08:81:89:69:86:ec:81:e5:e2:1f:0e:62:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: May 17 06:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3bee06e5c82ddf36995cc4e411712540ff09285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9f:88:b5:9d:b9:40:b0:c6:83:92:df:cd:51:
b7:ee:5b:c8:dd:e0:57:7a:6c:6a:59:a9:c5:ec:2b:
e3:01:fd:03:f3:9e:cd:d6:b2:d0:f0:6d:bf:2b:30:
db:b1:18:65:ca:40:3e:34:5d:6b:87:1d:70:86:e5:
5a:c1:e0:fa:4d:14:c5:52:54:48:08:25:b8:e9:a0:
aa:80:fe:84:83:67:e9:e9:05:25:9c:fe:60:c7:d7:
21:81:99:64:54:34:c6:c7:34:9e:88:f5:ac:5c:4d:
3c:3c:cb:b2:88:2d:66:19:37:9a:f3:69:7b:65:05:
74:e8:b0:19:a8:ef:61:31:6c:59:f6:32:6d:40:94:
56:cb:70:b6:a0:f4:d7:4e:62:14:08:a5:be:99:1c:
9f:ad:bf:6c:56:53:cf:3b:0b:2a:46:5d:33:24:36:
b5:e4:b7:a7:99:0f:66:93:3a:a4:7d:09:5e:b1:3a:
b8:1e:87:62:8d:5e:6c:9c:a8:ee:e3:09:f9:27:33:
38:f2:a4:22:3e:b2:be:e2:75:ae:b6:18:d8:b2:b7:
b6:b0:93:a2:79:eb:c9:ed:33:ea:fb:92:71:7e:77:
3b:d7:bd:ac:da:a4:40:91:7a:75:c5:82:b8:7e:87:
e1:b7:3a:98:12:cf:77:7d:a8:25:be:f4:ca:33:bb:
ce:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BE:E0:6E:5C:82:DD:F3:69:95:CC:4E:41:17:12:54:0F:F0:92:85
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/877gblyC3fNplcxOQRcSVA_wkoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.9.94.0/24
95.215.160.0/23
185.155.10.0/24
185.155.14.0/23
185.169.37.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:6b:71:f3:c9:5c:b0:b5:04:bc:3c:93:db:1e:41:75:d5:bb:
9a:bf:25:b8:e1:bc:69:fb:17:3a:34:f7:d9:5c:b0:c8:e1:58:
61:88:81:3c:f4:3c:4b:08:0e:d2:b9:db:4a:2b:e0:df:91:fc:
ae:1e:1f:55:4c:34:53:20:1a:af:d1:37:89:6c:c8:c2:bc:32:
59:ac:8d:24:c3:6c:7e:82:ab:28:ee:34:f8:65:9f:6d:84:31:
07:85:05:df:26:ad:c9:25:b8:7e:7c:58:09:fe:33:a0:f2:46:
5f:92:11:66:e3:72:44:a1:12:79:37:ee:60:9e:c7:54:a8:d8:
ed:a9:15:0f:0f:93:5b:f1:b3:62:8d:db:ed:31:be:78:ef:a3:
3c:f4:a8:09:ca:67:8d:f8:2b:86:b6:24:a3:29:89:9a:8b:36:
7a:08:70:63:01:a8:81:31:25:9e:dc:1f:a6:a3:d8:4b:38:10:
0f:18:88:44:9d:b3:7b:fc:ff:c2:b5:20:ad:28:b1:b0:5a:b4:
e8:0f:90:70:7d:d7:ea:ec:94:67:da:68:ca:54:20:b6:19:f5:
cd:11:25:0f:08:2b:2b:7e:1a:7b:58:6c:43:93:5b:41:57:80:
f6:d1:0f:18:1d:7b:6c:0d:ec:6f:4e:70:e0:2d:16:f7:33:cd:
a9:e1:d0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:14:07 2026 by rpki-client