Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/m8tkc8LQFtc0gmL0kKWSrTPLU9k.roa
File: m8tkc8LQFtc0gmL0kKWSrTPLU9k.roa (raw, json)
Hash identifier: kyGc5680LAylW4oTOFhCBmMg8F43YJF587J6sP7UJ6k=
Subject key identifier: 9B:CB:64:73:C2:D0:16:D7:34:82:62:F4:90:A5:92:AD:33:CB:53:D9
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019F1D6604C75D356739321445CF037606FC
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/m8tkc8LQFtc0gmL0kKWSrTPLU9k.roa
Signing time: Wed 01 Jul 2026 11:17:32 +0000
ROA not before: Wed 01 Jul 2026 11:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204427
IP address blocks: 72.56.40.0/23 maxlen: 24
72.56.94.0/24 maxlen: 24
201.24.58.0/23 maxlen: 32
201.34.152.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:66:04:c7:5d:35:67:39:32:14:45:cf:03:76:06:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Jul 1 11:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bcb6473c2d016d7348262f490a592ad33cb53d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6b:24:27:f0:23:1e:12:1d:87:e2:94:8d:21:
f8:d5:94:97:05:9f:35:65:db:69:85:cc:fc:21:e1:
39:5e:ba:b6:24:05:da:3f:25:a4:9d:c4:9a:26:a6:
23:34:43:43:be:41:ff:ff:d2:0d:90:3e:dc:65:1c:
5d:58:10:0e:69:c7:72:0a:90:cb:64:49:1f:fa:8d:
d6:3f:4a:14:8f:1a:04:98:61:28:ce:d8:7c:20:52:
ba:06:4e:c1:43:e8:81:ae:95:52:69:ad:5d:f9:81:
69:92:83:7a:82:d0:f5:86:f1:01:79:af:85:6c:fa:
60:39:82:53:88:4e:f0:91:24:e1:55:88:ba:24:37:
4a:6d:59:ff:db:4e:e7:45:41:37:d2:bd:ea:ae:93:
7d:b0:42:b6:d8:bc:b9:5b:e8:0d:95:44:44:24:8f:
93:8b:32:37:ca:43:59:e1:eb:64:03:e4:ff:22:04:
cc:3e:d9:a7:56:c4:c3:14:32:b5:c8:93:97:56:5c:
cf:bd:50:29:80:a4:cf:3c:48:3a:57:7e:b1:59:ec:
61:99:19:db:7d:cf:24:86:25:12:a2:65:b4:ea:00:
6f:57:62:4d:5f:c5:b3:34:3a:03:ec:f8:4e:9f:9b:
4d:4d:45:c9:ee:66:0a:ad:82:53:78:73:1c:c0:2c:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CB:64:73:C2:D0:16:D7:34:82:62:F4:90:A5:92:AD:33:CB:53:D9
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/m8tkc8LQFtc0gmL0kKWSrTPLU9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.40.0/23
72.56.94.0/24
201.24.58.0/23
201.34.152.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:5c:1c:72:df:63:af:06:78:0b:00:e9:af:51:02:e8:7d:78:
86:3d:cc:0b:8e:d6:4e:b2:ea:59:43:b8:88:24:04:89:5c:ec:
e4:bb:ad:c7:0a:3e:85:aa:34:f8:e0:50:89:27:54:fb:41:7e:
37:91:54:4c:38:af:f1:1a:9a:2c:20:ff:fa:2c:3f:45:32:39:
65:eb:56:26:3f:21:29:24:ce:02:c0:08:fa:c0:7a:93:38:ba:
22:f2:f4:6f:04:05:6b:fd:03:f3:2e:fa:39:8b:d2:30:2a:1b:
2a:c0:25:bd:d7:1e:71:7b:57:d6:c1:5d:31:37:7f:0b:e9:52:
fc:85:21:a0:89:f1:21:68:59:2f:71:18:89:e8:bd:ea:26:52:
cd:6e:0b:a7:69:90:ca:84:b6:bf:9a:7b:58:7c:7a:f8:0b:71:
19:0d:c0:f6:b4:d1:8a:06:0f:18:cd:2c:47:59:f5:78:4d:1c:
f3:b0:86:2c:ba:63:de:25:14:f2:87:e1:a8:00:c8:ab:f6:45:
71:9c:68:55:3f:d7:45:52:c1:08:30:90:82:48:30:31:83:00:
59:b1:11:69:c8:f4:16:aa:f0:76:00:fc:1e:88:af:e3:53:0a:
50:9f:83:e9:59:ab:fa:78:e1:e3:16:fb:98:bc:0b:eb:7a:bd:
85:33:20:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:59 2026 by rpki-client