Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/9xf7IWEflzujgmw2tsn_FARmi4w.roa
File: 9xf7IWEflzujgmw2tsn_FARmi4w.roa (raw, json)
Hash identifier: f6AK6JKMeGD679lYzG5x++jDC+1TvkO4ezRO4cNQaqs=
Subject key identifier: F7:17:FB:21:61:1F:97:3B:A3:82:6C:36:B6:C9:FF:14:04:66:8B:8C
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F4DFBA00B689BF093661329928B5D0F99
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/9xf7IWEflzujgmw2tsn_FARmi4w.roa
Signing time: Fri 10 Jul 2026 21:42:43 +0000
ROA not before: Fri 10 Jul 2026 21:42:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 109.66.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4d:fb:a0:0b:68:9b:f0:93:66:13:29:92:8b:5d:0f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 10 21:42:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f717fb21611f973ba3826c36b6c9ff1404668b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:97:0c:3b:6a:a6:bd:67:b7:1d:71:87:aa:
c6:7b:fb:02:1a:2f:7b:6d:cb:79:f9:09:42:60:d1:
89:7d:7b:61:0f:0a:7e:da:04:87:df:66:57:75:78:
83:4f:be:0b:de:a0:a5:49:86:3e:5e:e7:9a:cd:0e:
80:2b:15:fc:a3:56:a1:68:24:7e:f4:72:9e:6a:a1:
e2:b0:82:22:14:81:9c:69:36:bc:c2:04:ea:e9:59:
58:a0:0c:0d:e6:d5:11:fc:8e:df:63:28:17:42:ea:
07:92:22:8d:1f:e8:cf:85:f0:4c:fa:0c:ed:00:36:
ed:f1:d4:1e:b4:35:9b:8f:33:bf:6c:d1:0c:dd:47:
c4:99:48:18:9f:a5:62:1a:cb:58:6c:d1:86:55:76:
5b:8f:a1:cd:4e:da:80:21:ac:03:7b:19:45:38:21:
ab:3e:d1:bc:23:f5:74:f7:46:55:f0:85:00:0c:cc:
2b:41:87:b7:23:50:f7:f0:d7:d2:5f:ec:1e:be:ee:
99:a8:6c:0d:81:bf:30:75:c9:5e:5f:59:89:94:e0:
50:04:10:b7:50:5e:7e:d2:11:22:05:2a:ed:d5:65:
3b:a9:f6:6b:0e:50:59:be:9c:3a:5a:ab:10:48:e0:
2c:74:38:a2:70:a5:d6:87:8c:ce:88:59:98:7e:a9:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:17:FB:21:61:1F:97:3B:A3:82:6C:36:B6:C9:FF:14:04:66:8B:8C
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/9xf7IWEflzujgmw2tsn_FARmi4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.32.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:76:97:bf:f2:02:fc:69:be:c4:7a:de:76:ef:72:5a:8b:16:
b1:c1:a4:5b:f0:56:d2:8e:77:e7:04:ef:fd:99:84:96:b2:17:
71:fc:33:a7:47:4c:f2:54:ea:9f:9d:d5:77:09:c1:d0:74:a4:
99:2a:af:2a:5c:56:03:12:f7:38:f6:be:5d:d5:8a:64:84:03:
36:50:85:b9:f6:1f:c1:10:37:53:33:d5:32:a6:79:9a:20:56:
d9:af:41:ab:8f:da:13:52:66:80:df:80:20:5a:d7:2a:cc:52:
0a:6a:58:38:c8:39:50:8b:79:a4:59:26:13:f7:cf:d7:21:63:
03:57:0e:f0:97:13:3c:b3:29:b2:64:13:72:f2:6c:dc:70:fc:
08:cb:09:1e:4c:b9:6e:8a:ad:91:60:a2:68:6d:8a:07:5f:f8:
2c:99:f1:8a:76:29:a8:61:e1:61:b1:cc:36:20:1b:6a:6f:4e:
45:32:50:1d:ed:24:cf:30:93:45:fa:d9:74:8a:5f:42:8e:b6:
40:db:7d:8b:37:1e:a5:19:2a:7b:9c:c1:9b:b0:c6:8d:60:ad:
e6:2b:74:22:4b:dc:82:18:61:c1:2a:ba:7e:68:b9:59:e3:ac:
6e:be:52:75:f3:ae:03:e6:51:d4:d6:35:f8:42:e0:8d:18:35:
ad:e1:c9:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9N+6ALaJvwk2YTKZKLXQ+ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwNzEwMjE0MjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzE3ZmIyMTYxMWY5NzNiYTM4MjZjMzZiNmM5ZmYxNDA0NjY4YjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVqXDDtqpr1ntx1xh6rGe/sCGi97
bct5+QlCYNGJfXthDwp+2gSH32ZXdXiDT74L3qClSYY+XueazQ6AKxX8o1ahaCR+
9HKeaqHisIIiFIGcaTa8wgTq6VlYoAwN5tUR/I7fYygXQuoHkiKNH+jPhfBM+gzt
ADbt8dQetDWbjzO/bNEM3UfEmUgYn6ViGstYbNGGVXZbj6HNTtqAIawDexlFOCGr
PtG8I/V090ZV8IUADMwrQYe3I1D38NfSX+wevu6ZqGwNgb8wdcleX1mJlOBQBBC3
UF5+0hEiBSrt1WU7qfZrDlBZvpw6WqsQSOAsdDiicKXWh4zOiFmYfqmKIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPcX+yFhH5c7o4JsNrbJ/xQEZouMMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvOXhmN0lXRWZsenVqZ213MnRzbl9GQVJtaTR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbUIgMA0G
CSqGSIb3DQEBCwUAA4IBAQCfdpe/8gL8ab7Eet5273JaixaxwaRb8FbSjnfnBO/9
mYSWshdx/DOnR0zyVOqfndV3CcHQdKSZKq8qXFYDEvc49r5d1YpkhAM2UIW59h/B
EDdTM9UypnmaIFbZr0Grj9oTUmaA34AgWtcqzFIKalg4yDlQi3mkWSYT98/XIWMD
Vw7wlxM8symyZBNy8mzccPwIywkeTLluiq2RYKJobYoHX/gsmfGKdimoYeFhscw2
IBtqb05FMlAd7STPMJNF+tl0il9CjrZA232LNx6lGSp7nMGbsMaNYK3mK3QiS9yC
GGHBKrp+aLlZ46xuvlJ1864D5lHU1jX4QuCNGDWt4cnx
-----END CERTIFICATE-----
Generated at Sat Jul 11 00:16:23 2026 by rpki-client