Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Exzf4PskjTMc5LIyk1evDnbig4o.roa
File: Exzf4PskjTMc5LIyk1evDnbig4o.roa (raw, json)
Hash identifier: /XbM8Up/CzKNgL2qr7cqhEQox2OxF2jJdDjq9JA7I2M=
Subject key identifier: 13:1C:DF:E0:FB:24:8D:33:1C:E4:B2:32:93:57:AF:0E:76:E2:83:8A
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 019FDFFEE2F75CD0599F07AF810637EA779C
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Exzf4PskjTMc5LIyk1evDnbig4o.roa
Signing time: Sat 08 Aug 2026 06:10:51 +0000
ROA not before: Sat 08 Aug 2026 06:10:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200252
IP address blocks: 185.83.90.0/24 maxlen: 24
185.125.245.0/24 maxlen: 24
185.155.8.0/23 maxlen: 23
185.155.8.0/24 maxlen: 24
185.155.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:df:fe:e2:f7:5c:d0:59:9f:07:af:81:06:37:ea:77:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Aug 8 06:10:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=131cdfe0fb248d331ce4b2329357af0e76e2838a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:f1:ee:9c:12:92:c8:3b:3a:94:86:5a:9b:
b6:3a:77:a7:7e:33:df:26:02:00:d0:b8:bf:1f:7c:
5e:97:04:f9:9b:89:9d:db:46:c5:26:7f:b4:6a:f7:
bd:63:7b:f3:6b:ff:26:e7:49:b0:24:33:90:8c:ef:
85:f0:db:38:55:ef:10:95:9d:b5:e9:60:e5:ce:5f:
54:4b:e1:23:20:88:84:1b:8a:31:f7:7c:dd:6f:39:
54:39:27:69:58:54:ee:80:22:dd:78:06:87:67:7e:
a5:ca:99:5e:46:10:58:da:c2:db:2a:ed:c2:13:c5:
66:2b:54:1c:6b:d1:15:a7:7a:60:09:be:e5:c4:3d:
cf:81:11:8a:93:7d:ee:f7:0c:90:eb:51:ee:7a:97:
0b:eb:3a:b0:59:52:8d:e2:d6:2f:e4:be:3c:2e:44:
51:cd:58:fa:4e:41:2e:cf:f9:db:87:03:fc:19:7f:
83:fc:ad:bb:d7:17:7d:b7:5f:51:2c:51:42:f0:fd:
3e:bc:bb:7d:90:ec:4a:30:d4:68:1c:33:f4:90:c1:
cb:bb:26:39:c6:98:5e:e5:e3:3d:b1:19:70:02:6c:
49:36:3e:17:b8:16:d6:36:d5:3e:ce:54:de:53:e3:
99:3d:57:8a:80:34:c6:91:60:d5:6e:6d:38:a1:35:
0d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1C:DF:E0:FB:24:8D:33:1C:E4:B2:32:93:57:AF:0E:76:E2:83:8A
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Exzf4PskjTMc5LIyk1evDnbig4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.90.0/24
185.125.245.0/24
185.155.8.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:64:a2:0b:bb:54:63:87:fe:47:35:60:34:f2:4b:e9:72:d0:
29:3c:ad:4d:50:52:7d:da:15:ee:69:26:7a:cc:a3:90:a1:d1:
3f:b7:e9:9d:d3:8d:6f:f1:c6:44:b3:4e:f4:7b:8f:3f:05:28:
b2:c3:92:bf:77:22:a7:64:53:fc:bb:df:c5:39:32:e2:c7:a2:
db:c7:17:75:fd:b9:35:f4:85:df:1c:bb:81:f5:bb:7d:fd:4b:
98:0d:02:6c:68:7f:ec:cf:ea:8d:7e:f3:12:92:4c:f2:09:4e:
c6:50:05:76:7c:7d:1f:fa:8f:4f:f6:16:75:81:39:91:b7:e9:
dc:af:85:b4:0e:40:5f:81:00:68:95:3c:ca:bc:fa:0c:b6:d2:
d5:07:66:2e:24:b0:38:28:d1:a5:83:22:0b:02:54:27:5c:26:
64:ca:63:17:06:d1:ac:92:48:79:52:06:ba:35:7a:bd:d4:84:
c3:d5:4b:fe:29:eb:87:ff:d2:50:a5:f2:26:48:06:dd:90:ed:
0a:b0:9c:7f:a6:9b:a5:a8:9c:53:c6:93:c0:0c:e1:01:f4:7f:
9c:1d:21:68:de:7d:90:c4:61:b7:dd:4f:22:bf:37:77:6d:23:
cb:ab:cd:a9:a8:7c:a8:5f:8b:7d:bd:9c:9b:65:02:e0:55:b4:
c4:47:e1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:27:44 2026 by rpki-client