Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/9yhBMbL32EzPTZ90RPTm0ad_9P8.roa
File: 9yhBMbL32EzPTZ90RPTm0ad_9P8.roa (raw, json)
Hash identifier: pIiuBqDg+/+pSgcp7wJdJbnux2Rbm81/220r+M/WXqM=
Subject key identifier: F7:28:41:31:B2:F7:D8:4C:CF:4D:9F:74:44:F4:E6:D1:A7:7F:F4:FF
Certificate issuer: /CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Certificate serial: 019F23688EFC5F5AA846A1170C87266BCC46
Authority key identifier: 77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/9yhBMbL32EzPTZ90RPTm0ad_9P8.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198789
IP address blocks: 45.8.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8e:fc:5f:5a:a8:46:a1:17:0c:87:26:6b:cc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7284131b2f7d84ccf4d9f7444f4e6d1a77ff4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3a:16:81:45:b6:17:21:b9:b7:f4:57:d2:59:
d0:60:2d:2d:e5:79:f7:e2:a7:9b:24:14:01:00:93:
6b:66:40:df:e6:46:cb:10:02:c7:a3:bf:91:6c:6c:
17:a3:95:b1:fa:9b:e3:cb:a8:e5:9c:b6:ae:c9:75:
13:72:7f:3e:4c:03:df:27:0f:e3:42:69:b6:cf:ba:
cf:fa:66:a7:33:16:bc:c2:5f:c1:7d:bd:f3:10:58:
55:53:f8:02:c7:c6:14:c1:1c:33:72:4b:29:95:0c:
db:bd:ee:47:8b:36:49:88:0f:de:32:1a:71:80:7f:
e0:ec:c4:75:8f:91:2f:83:97:d9:0d:cc:5d:99:ca:
71:a7:98:22:27:54:10:a4:4e:70:5c:b6:db:19:8d:
df:c8:bf:46:b8:25:49:a0:a8:c5:ee:7e:38:68:f3:
23:e6:8b:42:d4:1d:31:6e:31:06:d1:2e:06:01:a6:
5c:1c:4a:9d:fe:1e:f1:46:f1:e4:22:14:e0:c9:ed:
af:49:2a:a3:66:fd:9d:fb:d0:6c:e7:f3:48:04:96:
c1:ae:bf:fc:c3:1d:d0:a3:fe:43:ff:87:43:81:79:
b2:85:0b:e4:53:01:e7:01:a7:32:45:46:5a:55:c6:
a0:96:1e:d3:3c:19:82:c2:7f:8d:b0:6e:65:29:19:
bb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:28:41:31:B2:F7:D8:4C:CF:4D:9F:74:44:F4:E6:D1:A7:7F:F4:FF
X509v3 Authority Key Identifier:
keyid:77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/9yhBMbL32EzPTZ90RPTm0ad_9P8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.177.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c9:1f:87:3e:08:2a:03:4b:00:74:76:f8:9b:a3:52:ca:37:
6b:16:9f:59:3f:03:cb:fd:71:37:32:82:92:8b:b2:39:93:fb:
7b:8d:32:fb:46:4b:ea:6b:b4:e6:e1:cc:e7:1b:b3:3d:83:40:
2f:55:75:46:c8:43:21:5c:e8:32:56:9e:42:ff:7e:2f:50:66:
80:44:fb:ab:ca:b0:7c:07:f6:c3:0c:0c:31:be:8d:0f:66:d9:
e6:b7:01:64:34:63:c3:e6:66:25:74:45:dc:24:ee:f9:1c:be:
16:94:59:4a:fb:a7:42:df:ce:e0:8a:ef:30:9f:7d:58:91:dc:
20:21:48:5d:59:56:37:70:76:bd:ec:99:0a:3f:18:62:6b:b7:
81:d6:b6:fc:7f:1a:53:c2:7a:99:1c:de:86:50:6a:87:c7:2f:
5d:fd:07:27:f0:d4:a5:da:9a:3c:df:ee:87:ac:e6:9e:7a:d7:
92:ed:63:cb:a4:10:24:95:d4:9f:3d:ad:dd:83:c3:8e:0d:ce:
1d:3d:b8:c8:2a:b7:34:4d:ac:10:15:3f:21:d8:ee:e5:59:91:
02:cf:5b:99:79:bd:28:8f:79:2f:58:73:20:41:c8:b7:31:dd:
f8:7c:0f:52:ca:83:e9:c6:75:ac:76:09:fe:96:58:34:02:1e:
5e:3e:56:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:33 2026 by rpki-client