Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/9QBTjd1kBhNfxdPC16qeF0WAmjw.roa
File: 9QBTjd1kBhNfxdPC16qeF0WAmjw.roa (raw, json)
Hash identifier: 7zaUsJvPwOm7HB/5O9NIN0812JUuSbQrrWRFgomaX74=
Subject key identifier: F5:00:53:8D:DD:64:06:13:5F:C5:D3:C2:D7:AA:9E:17:45:80:9A:3C
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019E989C24399FDE41E34A947A09503F9701
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/9QBTjd1kBhNfxdPC16qeF0WAmjw.roa
Signing time: Fri 05 Jun 2026 16:27:10 +0000
ROA not before: Fri 05 Jun 2026 16:27:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213373
IP address blocks: 146.19.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:9c:24:39:9f:de:41:e3:4a:94:7a:09:50:3f:97:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jun 5 16:27:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f500538ddd6406135fc5d3c2d7aa9e1745809a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:b1:ae:20:e0:72:70:7a:aa:bf:48:de:55:
9e:8f:87:0d:26:b9:24:38:38:aa:70:b8:ba:2f:7e:
d1:67:db:ab:43:9e:28:b4:36:af:d2:0d:cb:cd:9b:
0e:3a:ba:0b:ff:94:7b:d4:80:3b:50:2b:72:00:10:
fb:7c:3e:b4:80:bc:06:2e:7e:a2:fb:8f:15:77:0c:
ef:15:52:42:8d:d4:79:e1:d6:89:d1:79:ab:7e:db:
60:be:f2:35:39:7a:68:5c:90:e7:19:d5:f2:25:54:
e4:60:d4:e1:56:35:60:9e:59:d3:59:59:83:22:75:
24:fa:da:98:c0:c5:0f:ae:e6:b4:9f:92:db:5b:e0:
9e:9c:e6:e1:69:c3:a1:63:aa:e0:9d:37:f3:cb:5c:
6d:90:9d:a0:19:23:e9:1b:fc:d1:ee:df:1b:79:86:
51:0c:90:2a:1d:f0:fa:08:08:e4:3a:e5:47:2b:ba:
eb:da:3b:4e:86:99:b5:a9:3c:82:a7:a6:c0:71:69:
a5:07:0e:9c:7f:a9:20:f1:26:f2:15:e7:6d:0a:c6:
51:7c:a6:33:3e:8e:59:72:41:80:46:6b:30:a6:72:
65:23:b3:bb:ff:cd:32:79:76:85:d0:5e:33:ef:66:
89:24:ec:57:1e:15:64:27:80:c0:63:a4:84:db:58:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:00:53:8D:DD:64:06:13:5F:C5:D3:C2:D7:AA:9E:17:45:80:9A:3C
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/9QBTjd1kBhNfxdPC16qeF0WAmjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.173.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:3f:d1:ec:80:eb:cf:1a:5b:f9:10:3f:a1:c6:1e:f6:21:74:
4d:38:97:4a:bb:ae:b0:3e:85:99:e7:0b:da:39:aa:fe:12:e7:
e3:0a:f5:6c:fb:b2:f5:59:1d:47:f7:84:b9:17:cd:44:25:a2:
74:ff:f6:cb:12:19:7f:72:3b:22:6d:b2:b9:5b:21:60:e0:cf:
69:ae:7c:68:82:6b:0f:e5:fa:f6:f2:5a:db:88:1c:ee:59:2d:
ec:35:d7:ff:2b:d8:bc:5c:b0:3f:0c:9d:21:e8:7c:7d:3b:62:
46:b9:d5:c2:be:8a:01:43:51:fe:5c:25:73:d2:07:67:6f:e2:
42:6b:d7:05:25:eb:a7:c1:72:e7:30:09:37:20:e2:1c:54:0b:
83:47:1f:a4:35:45:bf:ff:09:18:96:d8:80:bd:fa:9a:92:a4:
c8:56:c6:82:02:5e:1e:db:19:84:50:06:97:f2:36:12:56:34:
fb:e2:bb:78:2c:f6:b8:e6:ce:f1:57:bb:e3:2c:80:a4:0a:0a:
bc:e6:70:44:e9:9e:95:1e:f2:50:23:58:6d:fd:a6:d9:d4:cd:
61:e8:57:f6:99:52:c7:b3:b5:92:58:1a:14:12:02:26:f5:1f:
a8:cd:6c:0a:75:ac:26:16:1c:df:91:32:c8:26:ed:ef:0b:0d:
aa:90:91:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:11 2026 by rpki-client