Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/l9SaE-YnjLTCaY_ZuBuvYLuUaZ8.roa
File: l9SaE-YnjLTCaY_ZuBuvYLuUaZ8.roa (raw, json)
Hash identifier: nVNrvbgXIPfSGkPPnbKkNKh8UR0+iTZeHx4vbvbqlWw=
Subject key identifier: 97:D4:9A:13:E6:27:8C:B4:C2:69:8F:D9:B8:1B:AF:60:BB:94:69:9F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A10FFDDA1D7A55EDED88D3670DDBDC34CD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/l9SaE-YnjLTCaY_ZuBuvYLuUaZ8.roa
Signing time: Tue 06 Oct 2026 06:54:17 +0000
ROA not before: Tue 06 Oct 2026 06:54:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.252.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:fd:da:1d:7a:55:ed:ed:88:d3:67:0d:db:dc:34:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 6 06:54:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97d49a13e6278cb4c2698fd9b81baf60bb94699f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:d7:d7:fc:2f:9c:c0:cd:86:9d:1e:57:d0:
80:5d:75:a0:0c:59:9c:f7:02:7e:f7:b6:cc:eb:9f:
cd:af:29:47:3c:eb:e4:d4:d9:00:3e:8d:ff:05:c5:
02:c8:01:11:f7:1c:19:43:53:26:57:c2:8e:b5:a3:
c8:81:25:87:a2:82:4d:6e:4d:e8:6c:bd:40:f5:1d:
36:8c:9f:0b:3f:49:7e:cc:49:c3:ca:8d:4e:ae:b7:
50:23:a1:3a:7f:5c:64:d5:3e:d4:c9:8c:43:99:d6:
0a:19:9e:e5:5d:38:e0:27:51:59:31:9e:aa:7b:f2:
f9:76:af:56:ff:0e:01:5b:98:31:71:01:a8:03:31:
10:ef:fb:20:7d:6f:18:4b:f0:e3:29:c1:0b:10:63:
66:d0:c3:28:e5:e9:ba:aa:1e:1b:5a:95:a9:a3:0f:
b6:86:b3:fb:48:ec:7f:01:da:30:bb:18:94:ca:17:
12:72:85:64:cc:cf:5f:b0:c8:07:ae:96:a2:9f:c8:
11:0b:57:36:df:f6:08:88:20:79:85:21:e3:7e:03:
b3:44:b8:69:88:16:03:45:af:9c:a5:d1:2f:98:60:
69:87:2f:3f:a5:0c:34:e6:b0:64:eb:cd:8d:1b:17:
7b:7f:74:58:b2:99:b0:6f:21:44:9d:10:a7:65:96:
dd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D4:9A:13:E6:27:8C:B4:C2:69:8F:D9:B8:1B:AF:60:BB:94:69:9F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/l9SaE-YnjLTCaY_ZuBuvYLuUaZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
99:22:a1:44:8b:f9:52:3c:2e:35:7b:5c:31:a0:5c:0c:57:a9:
76:b9:e5:78:4c:38:a7:59:d0:6f:10:bd:27:d9:24:f7:f0:0a:
9a:ae:a0:b5:55:81:1c:53:f3:99:59:4e:37:a8:32:2d:34:d6:
42:25:86:3a:db:91:24:57:40:e5:9b:8c:ce:ca:7e:c4:34:0f:
65:b8:19:d6:d9:14:9a:90:7f:73:73:22:e4:6e:ee:ae:1e:24:
bb:2d:12:35:61:a5:df:d6:d8:4a:42:9c:16:8a:b3:c4:07:0f:
c6:8a:9b:2f:d7:66:22:22:37:f0:3f:ba:d4:09:b5:55:fa:58:
98:29:8c:e6:b5:04:4f:cb:13:64:95:34:c4:5d:31:0f:08:86:
e4:5a:75:10:1c:0e:bf:c4:d2:f4:48:fb:09:3e:74:87:97:2d:
2d:b2:6f:77:1d:ff:8f:37:22:16:e6:e8:ed:d7:42:b9:e2:21:
c6:cf:8f:f0:f4:44:e4:70:13:0c:cd:d0:c8:3e:f6:6e:c8:0f:
32:31:c1:2c:d2:18:b7:ff:21:1f:b7:25:e6:c6:41:06:bf:01:
c2:56:68:c2:35:6c:ab:29:b4:44:c9:40:e5:86:ba:8d:2d:63:
0c:4a:fa:72:65:36:b3:4d:51:9a:a9:d5:5a:2f:41:c1:12:f6:
a6:3b:b1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:19:32 2026 by rpki-client