Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/M9gz-zDjcHMG72ncQoctT7Ig0gw.roa
File: M9gz-zDjcHMG72ncQoctT7Ig0gw.roa (raw, json)
Hash identifier: y0f77DJy/W9u5Zu+gCP6r/Or2FuJoDzwWHLtUiVFB3Q=
Subject key identifier: 33:D8:33:FB:30:E3:70:73:06:EF:69:DC:42:87:2D:4F:B2:20:D2:0C
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 01A0679EB8A3728C7AB17F31688C7D9C3D08
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/M9gz-zDjcHMG72ncQoctT7Ig0gw.roa
Signing time: Thu 03 Sep 2026 14:14:10 +0000
ROA not before: Thu 03 Sep 2026 14:14:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210976
IP address blocks: 72.56.16.0/20 maxlen: 32
72.56.64.0/19 maxlen: 32
72.56.96.0/19 maxlen: 32
201.34.144.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:9e:b8:a3:72:8c:7a:b1:7f:31:68:8c:7d:9c:3d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Sep 3 14:14:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33d833fb30e3707306ef69dc42872d4fb220d20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:72:09:a5:27:c7:2e:d2:cc:8f:fc:f2:1c:e9:
4c:2a:f7:75:81:24:3f:60:82:b7:6b:23:b4:2f:c6:
5a:ac:78:39:a6:23:d1:81:ef:bd:cc:c5:70:f5:26:
44:b4:bb:e4:7f:01:9c:44:0b:ad:63:db:4c:89:df:
e1:ff:d1:5a:ae:8c:24:d4:2f:6f:f2:56:d3:9f:aa:
f1:af:2b:01:e4:64:d5:d2:63:fa:4b:c2:40:ba:29:
6c:27:98:11:7a:62:55:5a:5a:3f:21:00:c1:ed:79:
47:ce:ca:c6:e7:27:ac:e8:d9:ea:81:1e:35:40:dc:
98:25:aa:56:fc:74:35:36:9e:38:b7:20:ec:66:d7:
c8:c8:1b:c0:d0:36:43:c9:ab:97:46:d3:11:65:55:
25:a5:c7:26:c7:a3:30:01:4e:09:b7:37:32:32:32:
d4:03:aa:15:f8:36:c0:ec:66:db:6c:9f:d9:ca:05:
28:f5:06:01:2d:ca:b8:bd:b4:c4:75:d9:a0:76:f9:
90:51:4c:4c:4a:7a:fc:4e:7b:ff:22:be:c6:44:f4:
e1:9d:7d:6b:7f:fa:8d:6e:7b:dd:19:a2:3f:50:a1:
e9:29:c0:85:48:03:be:1e:fe:da:10:cb:c7:4a:32:
d5:ec:56:6f:53:cd:c8:84:f7:aa:e2:17:a5:fb:e7:
b1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D8:33:FB:30:E3:70:73:06:EF:69:DC:42:87:2D:4F:B2:20:D2:0C
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/M9gz-zDjcHMG72ncQoctT7Ig0gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.16.0/20
72.56.64.0/18
201.34.144.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:b9:37:d4:f9:54:88:9e:9f:73:ff:21:4f:bf:34:38:35:e4:
0f:49:38:d4:e1:6d:81:fc:1d:6a:6f:7d:17:5b:cb:6d:91:fa:
da:83:94:89:bc:78:64:c6:e3:eb:c4:dc:87:d8:3b:b3:7f:8d:
7e:6f:3b:ac:2d:bb:61:70:87:c4:13:6a:61:ed:fa:bb:0e:ca:
4e:87:46:b7:77:de:f6:3a:cc:a9:be:52:fb:e7:cc:da:de:1c:
f8:b4:24:39:03:3c:43:c8:00:cf:10:2c:9f:25:d6:7a:e1:2f:
c6:0c:e7:4a:7a:18:9b:d8:2a:78:63:e4:f2:18:1b:a1:bb:b6:
cb:5c:b9:d3:91:0e:14:6b:77:73:25:af:a1:4e:de:fa:a6:a9:
e6:a3:d9:ec:75:c5:0e:16:d4:10:90:fc:7d:56:a7:18:84:99:
05:ce:3b:fb:68:0d:62:4e:7e:97:64:13:7d:ea:92:4f:37:dd:
4a:3b:9a:9f:42:ea:4c:fc:57:8a:0d:f8:85:7a:99:94:f2:29:
e6:40:9a:07:45:79:e6:40:1e:88:1c:f5:bd:41:a9:00:8d:e1:
e9:5d:f1:23:cd:b4:65:5d:ed:1a:8d:09:25:9c:ab:12:82:78:
d5:70:41:4d:e7:fe:a5:e4:5f:77:ea:98:36:bf:f9:28:ff:46:
a9:23:11:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:54:58 2026 by rpki-client