Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/kh4O9vham93qtEk8EtqXGw3JE7M.roa
File: kh4O9vham93qtEk8EtqXGw3JE7M.roa (raw, json)
Hash identifier: AVprVAsUUGwpqpA5gC75o5zSg+DcEcEWxuvZy9sQIyA=
Subject key identifier: 92:1E:0E:F6:F8:5A:9B:DD:EA:B4:49:3C:12:DA:97:1B:0D:C9:13:B3
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019F1D660519A3ED78D5BBD27890224C5BDC
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/kh4O9vham93qtEk8EtqXGw3JE7M.roa
Signing time: Wed 01 Jul 2026 11:17:33 +0000
ROA not before: Wed 01 Jul 2026 11:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210976
IP address blocks: 72.56.16.0/20 maxlen: 32
72.56.64.0/19 maxlen: 32
72.56.96.0/19 maxlen: 32
201.24.48.0/21 maxlen: 32
201.24.56.0/23 maxlen: 32
201.34.144.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:66:05:19:a3:ed:78:d5:bb:d2:78:90:22:4c:5b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Jul 1 11:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=921e0ef6f85a9bddeab4493c12da971b0dc913b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:b4:22:48:42:7e:55:c7:af:e9:1a:d1:4b:
93:9e:64:3f:a9:80:61:db:d3:dc:4d:48:6a:7a:75:
7c:22:10:ef:5d:9a:2c:4c:fb:e6:3e:4b:7e:c0:f0:
be:df:65:1d:f3:70:11:60:cf:85:97:bd:a9:c6:7e:
c0:39:23:1f:d2:4b:42:da:17:6b:9b:be:f2:04:79:
55:a3:6a:f5:a3:18:bc:52:58:0c:74:7e:9c:fb:70:
7a:a8:15:58:80:41:20:4c:89:d0:b1:9f:77:ce:8b:
14:ef:48:64:2d:97:5c:4c:95:57:37:71:c1:ac:40:
d5:0a:4c:34:09:5c:49:91:ec:1d:b7:f3:56:0c:3e:
24:64:89:ed:69:68:06:94:7b:98:1d:b9:43:6c:49:
d3:f5:50:4d:0f:90:ed:16:52:93:d3:f3:83:f5:df:
80:c9:b3:8e:d9:6e:b7:ce:2c:5f:87:80:bb:a8:36:
79:24:1e:65:e0:dd:1d:7c:0b:a6:e2:1c:79:48:4a:
f4:6a:ac:12:7c:5d:3b:75:1a:79:65:07:8e:97:e7:
31:42:c0:02:78:c6:4a:1a:0a:11:1a:b8:b9:c2:83:
da:c7:77:c1:ac:04:ef:a4:c1:69:ba:0d:ce:c3:94:
6d:bb:7a:32:b0:ea:92:48:e3:de:b9:1d:aa:ff:84:
7d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1E:0E:F6:F8:5A:9B:DD:EA:B4:49:3C:12:DA:97:1B:0D:C9:13:B3
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/kh4O9vham93qtEk8EtqXGw3JE7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.16.0/20
72.56.64.0/18
201.24.48.0-201.24.57.255
201.34.144.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:b6:50:00:13:c6:d6:2a:5b:dd:1a:22:80:4b:d6:4a:9b:61:
4b:9b:4a:ca:d8:b9:d9:53:ff:86:58:10:43:52:5a:be:e7:90:
d0:ad:18:3c:55:05:ea:a1:f8:d2:11:d1:93:ad:54:1f:c0:d4:
9d:fd:62:fa:b8:16:a6:06:75:82:ed:3c:0c:07:89:03:d8:09:
2b:ea:83:e5:f8:cb:93:d0:e8:3d:fc:35:79:e8:58:2c:04:1f:
78:cf:2e:7f:75:cf:b7:04:2f:ac:80:e6:40:93:d0:7c:34:2a:
9c:ad:06:1e:0e:3e:90:15:fb:06:40:45:7d:92:fb:78:07:96:
de:cd:12:b4:0d:ec:14:de:8c:50:73:4a:15:78:75:dd:65:d8:
f0:b2:a3:c8:6f:dc:92:e8:10:73:ea:97:a1:56:94:7c:2c:1b:
ff:02:40:3d:64:15:0c:50:17:1a:49:d5:26:ce:48:c6:ce:83:
5a:76:3c:90:af:22:f7:45:7e:5a:1a:6c:69:1b:6b:5e:a5:ec:
50:e1:17:1f:cc:fd:1a:dd:5f:d4:fb:3d:31:75:b5:9b:e7:33:
9f:fd:ba:db:57:04:ee:ba:6f:27:4b:86:bd:6a:81:d1:c9:6a:
a9:cd:b8:1c:fd:b1:b9:46:ab:94:7d:88:56:5a:60:64:46:db:
ef:4a:4a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:51:18 2026 by rpki-client