Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/Ht99_X-TY2HoRhz9Y9Pw07Iv-z8.roa
File: Ht99_X-TY2HoRhz9Y9Pw07Iv-z8.roa (raw, json)
Hash identifier: iGXxRGgIjm/yOAeg6V7XwO4JivlOQrsVMIV6cDwFtCg=
Subject key identifier: 1E:DF:7D:FD:7F:93:63:61:E8:46:1C:FD:63:D3:F0:D3:B2:2F:FB:3F
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019E6B3970A78A259563C76B975822FFDD9E
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/Ht99_X-TY2HoRhz9Y9Pw07Iv-z8.roa
Signing time: Wed 27 May 2026 20:56:26 +0000
ROA not before: Wed 27 May 2026 20:56:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210976
IP address blocks: 72.56.16.0/20 maxlen: 32
72.56.64.0/19 maxlen: 32
72.56.96.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6b:39:70:a7:8a:25:95:63:c7:6b:97:58:22:ff:dd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: May 27 20:56:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1edf7dfd7f936361e8461cfd63d3f0d3b22ffb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ff:70:eb:ad:1b:ac:65:37:92:7b:01:d2:2b:
36:e1:2f:0e:bb:bf:4a:57:ab:dc:f4:13:08:8d:af:
09:eb:a2:4c:a8:53:2f:bd:ff:6f:f4:a7:d7:af:eb:
5c:90:27:59:ce:f3:a0:e3:42:39:f0:9e:cd:eb:df:
ae:d1:9c:c8:39:db:20:16:0e:96:a7:18:f4:fb:3e:
78:54:65:67:d1:d7:4e:55:3f:81:48:36:c3:5d:4b:
a4:40:70:93:d3:d5:aa:6e:1a:92:80:8f:3b:7a:fd:
59:b6:9c:3a:d9:cf:43:18:3a:12:35:e8:48:79:d1:
c8:7f:ee:73:d0:5b:74:8f:aa:eb:7b:6b:a0:64:5e:
d8:a8:37:23:98:81:dd:a9:74:5f:f4:86:8c:43:43:
86:d1:40:2c:62:55:d4:a9:97:98:78:a5:01:2c:4a:
fe:6c:b3:c8:9d:91:08:74:9b:ed:6f:4b:b4:89:71:
fa:11:4f:66:e4:fd:98:ad:18:14:61:c7:d1:9f:0f:
ff:81:05:21:e3:df:06:c8:ea:ea:e0:c6:97:3b:f2:
6e:fd:d8:29:bc:61:45:a2:9a:8c:35:0b:65:15:d0:
df:d8:cf:eb:74:d1:f9:02:3a:7b:ec:9e:73:0a:26:
9a:0a:71:83:a7:42:b9:fe:4d:43:57:3c:4a:42:bf:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DF:7D:FD:7F:93:63:61:E8:46:1C:FD:63:D3:F0:D3:B2:2F:FB:3F
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/Ht99_X-TY2HoRhz9Y9Pw07Iv-z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.16.0/20
72.56.64.0/18
Signature Algorithm: sha256WithRSAEncryption
58:16:15:ec:0c:e8:cb:07:5a:b6:e0:83:15:a5:03:e7:21:7f:
62:d5:e0:56:5c:27:87:39:37:b6:e0:82:97:e8:1e:7b:3f:9c:
eb:ea:54:48:0b:df:32:a7:c7:00:c9:98:18:99:d5:10:44:88:
e5:4b:0f:f1:db:29:0d:44:72:9f:13:e8:22:da:55:3b:f1:5e:
e4:8c:c6:c7:8e:fb:6a:07:f3:f5:78:cd:7f:25:f5:1f:37:ab:
b8:4d:7d:94:fc:e8:b4:fe:b3:17:23:ef:33:83:1c:bb:b6:f7:
d6:97:55:87:3e:74:b9:cf:eb:38:9e:54:18:d6:94:98:00:d4:
8a:bc:87:85:e4:1d:7d:1d:b1:59:8c:9c:8d:72:fa:81:10:9e:
94:f6:e2:92:6d:10:2d:6f:ae:06:13:79:c2:09:75:9d:ec:04:
6f:87:c9:d8:a2:5d:17:c0:fc:86:db:56:ea:be:7e:c1:df:b4:
2e:a0:15:b1:99:fa:2d:d0:60:fd:ed:e3:ac:21:9c:ea:3b:34:
bb:fb:d9:68:fd:14:ed:09:7a:93:ea:5d:2c:f7:34:b9:26:ed:
b4:01:ae:1b:6b:7c:a6:47:b1:4a:5c:01:85:c7:7f:58:f6:a9:
17:b2:87:16:ff:b2:3b:25:b0:bd:b0:96:2d:f6:a3:41:c9:52:
bc:44:24:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:03:59 2026 by rpki-client