Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9Brk9AzHm1mGUNwbo6gSUW2WW8Y.roa
File: 9Brk9AzHm1mGUNwbo6gSUW2WW8Y.roa (raw, json)
Hash identifier: Y5HRht8KNhApMMBz3EbR0KwSUy4ltJ7KTVC9bXq0/v0=
Subject key identifier: F4:1A:E4:F4:0C:C7:9B:59:86:50:DC:1B:A3:A8:12:51:6D:96:5B:C6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A08097677EDAFB9BE52BCC676BC20B293E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9Brk9AzHm1mGUNwbo6gSUW2WW8Y.roa
Signing time: Tue 08 Sep 2026 10:36:41 +0000
ROA not before: Tue 08 Sep 2026 10:36:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 194.87.228.0/24 maxlen: 24
195.58.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:97:67:7e:da:fb:9b:e5:2b:cc:67:6b:c2:0b:29:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 8 10:36:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f41ae4f40cc79b598650dc1ba3a812516d965bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:39:fb:31:ef:c4:48:53:4b:60:42:51:a9:df:
bc:3c:bf:17:19:f7:8f:30:2a:49:c9:a8:29:0d:e3:
a7:c3:c0:ef:51:52:2c:ca:d1:a9:b8:75:ca:b2:c8:
d3:c7:8e:f9:ba:8d:5e:78:26:c8:06:a2:0c:3b:8a:
a5:b1:b8:84:10:dd:f9:bc:19:04:4c:12:b4:42:08:
fd:16:47:e1:7f:e0:4c:3f:70:76:9a:41:fd:22:c4:
1c:df:4a:87:2f:3e:d0:c5:4d:c8:7f:16:67:92:22:
4e:19:36:d4:1a:80:41:66:b8:72:13:0e:b3:b6:f8:
82:2a:a6:c3:a3:9c:5a:9d:67:f2:7e:ee:f4:3e:6c:
24:1f:d3:83:df:88:23:46:59:ba:26:b6:41:7f:a1:
b4:4c:5e:88:53:48:dd:0d:95:26:d3:00:17:f7:04:
d1:34:6d:12:d4:5a:5d:8c:9a:f1:48:a2:18:79:f7:
f7:b1:5c:0d:39:1e:d4:1d:28:b7:eb:aa:2f:7e:ec:
b3:f4:f9:a4:a2:2a:42:09:94:01:ec:2d:e5:84:bd:
f8:95:d0:97:d7:de:1c:73:82:49:30:a9:31:22:99:
45:e6:9e:3f:00:6b:a7:80:69:af:be:0a:64:5b:7d:
81:af:d0:2c:78:fc:3a:31:92:7e:83:4b:b6:5a:74:
14:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1A:E4:F4:0C:C7:9B:59:86:50:DC:1B:A3:A8:12:51:6D:96:5B:C6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9Brk9AzHm1mGUNwbo6gSUW2WW8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.228.0/24
195.58.45.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b3:bf:90:e5:7d:10:99:7c:67:1b:48:ad:48:f1:93:3d:37:
f9:cd:0d:18:7c:88:48:8f:bb:78:57:06:78:92:06:cb:8c:9d:
3b:54:48:b6:22:69:cb:7f:68:a1:a7:1c:69:06:b8:fd:d2:f1:
b1:35:d8:8b:e6:49:e5:07:3b:09:41:7f:ef:1e:8b:b8:c4:ae:
dc:a2:0a:41:61:f5:50:4c:f2:5b:e6:3b:04:8f:e4:1e:1c:14:
1f:a0:a7:b3:aa:0c:19:e7:fc:8b:02:7e:a6:32:52:aa:20:a2:
1d:4e:84:2a:57:4f:90:3d:72:e2:00:ab:57:0c:ae:5e:1d:9b:
96:e9:1e:16:bc:c4:5a:bf:f4:fb:64:41:29:e2:e0:38:0c:b0:
db:9a:15:e6:77:65:f1:9e:2b:46:b4:5a:2d:02:3a:ea:51:66:
c8:8c:72:62:83:29:82:6c:14:d5:91:62:b3:6f:b6:06:9e:eb:
3f:87:a7:a0:76:11:84:98:7e:e8:5c:2d:57:1b:d4:8f:15:b6:
c4:f4:fd:9a:e2:ee:43:9e:41:5a:1d:0b:bf:fc:c7:ec:74:95:
ac:9f:0c:0d:f9:89:3d:c8:d3:2f:2b:e0:e4:05:15:52:bd:ea:
e2:21:7e:b6:e9:94:ce:e5:e0:1a:f8:c7:6c:f9:e8:09:82:3b:
73:7f:1f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:22:04 2026 by rpki-client