Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/lSaiK2qUcsBb2SRVSSn0lBTLk8w.roa
File: lSaiK2qUcsBb2SRVSSn0lBTLk8w.roa (raw, json)
Hash identifier: Jw4NGPd3f960D6rAt45BHw7wfutR5RSd+rPJNYNB2E0=
Subject key identifier: 95:26:A2:2B:6A:94:72:C0:5B:D9:24:55:49:29:F4:94:14:CB:93:CC
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 019F1896812D364A9A5B53B999A483154C1E
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/lSaiK2qUcsBb2SRVSSn0lBTLk8w.roa
Signing time: Tue 30 Jun 2026 12:52:24 +0000
ROA not before: Tue 30 Jun 2026 12:52:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213727
IP address blocks: 85.9.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:96:81:2d:36:4a:9a:5b:53:b9:99:a4:83:15:4c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jun 30 12:52:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9526a22b6a9472c05bd924554929f49414cb93cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ba:e7:9d:00:ff:4c:10:81:ad:b2:a2:97:7e:
f1:e4:03:27:98:b2:69:7e:58:55:1b:a6:af:2e:5f:
c7:4f:30:7f:c6:6a:a7:87:ba:8a:8a:da:cf:f0:de:
b5:89:68:b5:47:5e:f2:5b:78:c4:13:d3:ed:00:1a:
d1:0e:e2:0e:e6:fd:3f:f4:ac:d3:86:c5:54:95:c2:
9f:16:66:55:21:a7:57:b9:15:75:7c:2d:e9:f2:40:
0f:33:db:2f:fc:3a:a8:48:02:7d:c5:84:15:7f:3c:
07:9d:a2:d1:23:6f:f3:65:80:ed:d0:2b:5b:44:19:
57:8d:eb:7c:f1:61:c6:60:94:1c:51:b6:4f:a0:de:
b2:f7:35:ea:ac:f6:d2:e6:1f:2d:ed:19:31:6f:45:
f7:1d:56:3e:91:9b:8a:88:59:30:35:c1:d2:47:3f:
4b:e7:52:1d:d3:cd:3b:b3:8c:71:d1:46:64:3e:f4:
77:00:cd:64:6d:e0:30:ce:de:cf:6d:60:b6:88:b4:
93:54:f2:81:f5:14:42:a9:0e:80:84:d6:30:f8:85:
6b:13:9e:ee:91:67:ca:9a:e4:e0:5a:1b:32:72:c5:
eb:de:47:30:9f:08:9d:f9:10:f9:df:48:c1:14:46:
69:ca:cf:bd:ec:c3:c3:0c:b8:b8:dd:37:f6:8c:2f:
5f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:26:A2:2B:6A:94:72:C0:5B:D9:24:55:49:29:F4:94:14:CB:93:CC
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/lSaiK2qUcsBb2SRVSSn0lBTLk8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.9.114.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ee:df:3b:af:88:b5:dd:03:97:80:4b:5f:21:6e:31:78:77:
ed:ac:ac:e0:0f:5e:83:a9:6f:63:d9:96:c9:e2:82:97:6b:e2:
57:fd:b4:f8:1f:5d:9e:d1:c5:ef:82:15:69:38:75:f8:95:00:
f4:eb:92:40:5d:4b:3f:4f:ee:46:27:b2:81:2c:4f:56:32:10:
8f:70:53:3e:2e:3f:f3:34:8d:f5:d5:52:b0:03:7d:80:80:fe:
e1:53:99:af:10:d0:d4:5e:57:18:c2:f5:bf:30:11:67:8a:c2:
3d:41:ed:9c:c9:91:8d:f1:c7:57:ea:fd:cb:89:3b:ec:13:ff:
dd:f2:16:d3:7c:23:1b:42:06:7f:37:fb:0f:11:eb:c3:a4:8d:
63:21:75:33:2c:2c:04:eb:34:ac:36:1b:5f:8c:e2:ad:1c:d7:
8b:30:83:b2:df:73:b9:1e:fe:cb:4d:9c:33:86:c6:cb:d0:ef:
b1:1e:12:c1:b4:3f:c1:9b:5b:bf:c8:8e:21:c3:b7:53:ca:c3:
64:a2:a6:9b:30:0e:82:1a:ee:5b:71:7b:ca:0f:42:d6:a7:37:
bf:43:50:34:0e:16:a1:17:d7:6e:b8:05:ad:57:b6:78:e8:6b:
16:81:55:de:7a:52:70:7a:dd:71:7e:b7:2a:c6:66:d7:bf:2b:
ef:ca:c0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 14:14:45 2026 by rpki-client