Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/9KBqGjnL-5oJ5B6DzcxjqiI7EQM.roa
File: 9KBqGjnL-5oJ5B6DzcxjqiI7EQM.roa (raw, json)
Hash identifier: LIvm7nAVKXaLM9rEsrAxwOlhblCh+te14HXeeWgrThQ=
Subject key identifier: F4:A0:6A:1A:39:CB:FB:9A:09:E4:1E:83:CD:CC:63:AA:22:3B:11:03
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019FBE6EBA4BC8BF59283EAEFAD2CF147840
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/9KBqGjnL-5oJ5B6DzcxjqiI7EQM.roa
Signing time: Sat 01 Aug 2026 17:45:55 +0000
ROA not before: Sat 01 Aug 2026 17:45:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200220
IP address blocks: 63.251.122.0/24 maxlen: 24
162.248.162.0/24 maxlen: 24
194.154.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:be:6e:ba:4b:c8:bf:59:28:3e:ae:fa:d2:cf:14:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Aug 1 17:45:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4a06a1a39cbfb9a09e41e83cdcc63aa223b1103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:82:c0:97:5e:d2:a2:22:f7:92:0a:d7:f3:
f6:e5:5f:47:7a:c6:22:8e:84:be:14:a9:35:1b:3e:
ca:bb:0d:8e:57:de:e2:3b:ff:b4:0f:55:12:d4:77:
b1:20:07:b7:23:0d:1d:ce:55:7c:cb:a2:fa:0a:1d:
30:fe:42:10:34:d0:81:b9:1a:c8:e4:4a:6d:26:9d:
52:42:ac:0a:00:81:50:23:43:d7:4a:66:f8:52:6b:
c4:61:ff:7b:59:d4:d4:f6:b4:d3:0d:bb:42:e1:58:
96:ce:38:d6:e7:14:cb:be:c0:a6:c2:07:c3:51:0d:
e7:dc:1b:2c:2f:61:36:64:4f:aa:f2:5e:27:81:9d:
a7:40:7a:2d:56:cb:97:12:e8:d0:15:e4:a3:b8:24:
bf:90:81:3c:28:34:52:1b:76:10:6d:4d:bc:39:5e:
f9:37:13:01:4f:9f:d9:ec:53:4b:f0:2b:e4:63:c3:
1c:85:97:a2:47:a3:5e:ec:41:8a:0c:99:76:01:5a:
68:12:22:f4:64:0e:f9:da:3d:37:f0:a5:ac:dd:49:
e0:21:5b:69:36:da:d7:2e:22:df:d4:76:1e:66:76:
45:19:d6:65:aa:d5:9c:22:02:11:d2:23:62:43:d7:
76:4e:a2:0e:89:eb:49:7f:7f:f2:69:45:4b:53:d9:
82:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A0:6A:1A:39:CB:FB:9A:09:E4:1E:83:CD:CC:63:AA:22:3B:11:03
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/9KBqGjnL-5oJ5B6DzcxjqiI7EQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.251.122.0/24
162.248.162.0/24
194.154.28.0/24
Signature Algorithm: sha256WithRSAEncryption
62:94:a3:76:2c:a1:97:a2:41:80:71:cf:fa:06:c1:8d:65:ad:
42:2c:c5:d5:6d:a1:e7:8d:cd:fd:fe:77:fc:82:b9:5e:62:2f:
c0:32:7b:d7:89:09:47:b4:d8:47:ac:98:f8:6c:ef:15:0c:7c:
e7:e7:2c:4c:05:e0:ac:85:aa:ef:ad:26:63:fa:78:4e:f9:b9:
9c:5a:7e:4a:cd:43:e0:77:fb:b9:f8:97:bd:06:d7:15:f6:de:
3c:8a:4c:86:2d:7e:f6:a1:d9:a9:ea:68:65:e9:b4:ed:6b:52:
d0:b1:65:16:27:3d:48:e5:86:9f:fc:5b:bc:33:98:12:20:5c:
3d:fa:ce:2f:05:70:99:3e:15:b1:84:7e:f6:ce:0c:7e:47:a7:
16:37:5d:cb:ba:3c:44:76:b7:92:f8:af:25:47:82:19:7a:a6:
13:86:c2:f2:98:e2:99:35:8e:d5:1a:13:92:50:a4:ed:48:a7:
44:e4:6b:4e:40:51:fb:ec:29:34:23:d6:fb:be:e4:e5:99:81:
8e:ff:26:f3:b0:6d:b8:bd:85:62:4c:01:0b:f5:2f:1c:a0:ec:
70:96:4b:01:18:f7:ba:fd:ae:d1:b2:4e:c1:83:b4:3a:35:d2:
b9:ef:06:78:b8:67:73:cb:95:3e:36:be:ee:aa:1b:ce:4b:5e:
2c:aa:30:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:18:59 2026 by rpki-client