Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/9XcPcUamjuFPiqz8ZHAoTiTKL6Y.roa
File: 9XcPcUamjuFPiqz8ZHAoTiTKL6Y.roa (raw, json)
Hash identifier: jxCs8G20vyN0dz0eo/Wp/A9SFu5Kq5AWCeVOPlZR7wA=
Subject key identifier: F5:77:0F:71:46:A6:8E:E1:4F:8A:AC:FC:64:70:28:4E:24:CA:2F:A6
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 019FF0EB2A2741312BC7C172A225C4F0878F
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/9XcPcUamjuFPiqz8ZHAoTiTKL6Y.roa
Signing time: Tue 11 Aug 2026 13:02:51 +0000
ROA not before: Tue 11 Aug 2026 13:02:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142473
IP address blocks: 62.164.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:eb:2a:27:41:31:2b:c7:c1:72:a2:25:c4:f0:87:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Aug 11 13:02:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5770f7146a68ee14f8aacfc6470284e24ca2fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:df:06:27:03:68:b7:af:e8:0b:40:10:31:
fc:90:dc:d6:68:d1:92:0d:54:03:a5:5f:83:53:9f:
e4:a9:d2:fc:5f:5d:c9:31:44:bf:21:11:08:07:cf:
71:09:fb:c9:32:b0:0a:51:ba:1d:e9:2e:c0:a4:2d:
c6:0a:21:a9:2d:7d:b1:f2:2a:59:59:73:21:01:e0:
f0:d9:6a:a7:11:24:e4:d6:ab:3a:f3:2b:ae:ee:d4:
77:a4:48:13:83:4b:d2:13:82:d3:63:27:fd:a8:df:
c7:d0:a0:a5:ae:8c:e7:8e:2e:2f:c6:04:f1:e0:df:
b7:b9:5f:1c:f5:15:44:82:f5:6c:6b:5c:84:7a:ea:
3b:42:5a:9f:3c:47:56:c7:6d:8f:df:f2:39:88:88:
97:85:02:0f:65:bd:c3:50:a4:ff:64:71:fa:f5:c1:
cc:15:04:b9:0a:65:6e:dc:b1:17:e7:1e:7f:5b:ea:
61:5b:0e:86:9f:24:cf:5b:7d:28:a4:0b:f4:be:ef:
39:c4:58:fa:f3:4a:98:f8:c9:fa:fd:03:0c:f8:c9:
30:89:3d:4d:d4:c8:20:58:60:6d:a4:4d:69:95:92:
d1:e3:4a:a9:18:73:0b:91:08:37:50:bf:9e:95:9f:
2b:57:6d:c4:00:5a:c9:60:c9:4a:94:d0:03:79:cd:
de:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:77:0F:71:46:A6:8E:E1:4F:8A:AC:FC:64:70:28:4E:24:CA:2F:A6
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/9XcPcUamjuFPiqz8ZHAoTiTKL6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.192.0/24
Signature Algorithm: sha256WithRSAEncryption
06:2c:3d:5e:bb:c1:ba:f4:e9:60:2a:24:83:89:f1:ae:54:92:
74:d2:60:27:71:bd:bd:c8:76:68:d1:60:8a:84:3f:a6:76:9c:
70:c6:d6:1f:27:6d:f1:87:dd:b4:a1:9e:52:25:49:78:7c:73:
0f:36:68:17:c3:ca:11:52:38:be:4a:fa:fd:1d:c6:f6:29:13:
08:02:a1:c8:a0:d2:87:74:18:49:86:11:15:c9:bc:7f:1b:bd:
da:aa:13:88:37:fc:b0:59:a2:89:06:a5:aa:81:59:93:67:54:
c0:1f:13:b0:24:70:11:1e:de:fe:2d:66:13:0a:80:1c:be:85:
4d:3f:78:77:d0:8d:5d:a8:d3:9f:99:89:88:f5:6b:ce:09:e7:
ea:30:b2:7d:18:c7:0f:51:63:b9:ec:1f:4b:c4:37:9c:9d:e8:
45:82:03:fb:00:7a:53:50:42:92:1e:23:df:0b:ca:22:e1:b4:
c2:18:eb:bb:00:da:e8:11:29:9a:5e:9d:18:6e:aa:51:bf:a0:
db:61:60:85:5a:b1:e6:32:d5:d0:ed:f1:db:85:9a:c7:cb:98:
50:fe:22:88:20:99:4f:66:2e:0f:d9:3e:b3:17:80:0d:1e:9c:
fd:ea:b7:78:a8:93:2e:d3:bb:4a:0e:f2:fb:26:1e:b6:5b:f0:
71:ed:47:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 10:21:44 2026 by rpki-client