Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/9t-jmSES2Q3IojJbCwlN6006UGs.roa
File: 9t-jmSES2Q3IojJbCwlN6006UGs.roa (raw, json)
Hash identifier: YQi1CApMMFddBHxZKrqbOI7bEV+5VzN2/VlTY2/zM2U=
Subject key identifier: F6:DF:A3:99:21:12:D9:0D:C8:A2:32:5B:0B:09:4D:EB:4D:3A:50:6B
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 01A1108E08EC4E4071ED6FFBECAACC9EFD45
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/9t-jmSES2Q3IojJbCwlN6006UGs.roa
Signing time: Tue 06 Oct 2026 09:31:46 +0000
ROA not before: Tue 06 Oct 2026 09:31:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48894
IP address blocks: 91.132.94.0/24 maxlen: 24
188.190.0.0/24 maxlen: 24
2a03:f80:386::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:8e:08:ec:4e:40:71:ed:6f:fb:ec:aa:cc:9e:fd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Oct 6 09:31:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6dfa3992112d90dc8a2325b0b094deb4d3a506b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:ba:fb:69:c3:ae:be:53:0a:30:64:09:da:
ec:af:be:51:f8:92:e5:1c:fa:b7:9a:b5:0b:6d:e9:
57:b4:ff:44:39:2c:ed:36:1d:aa:c8:43:2d:c2:2e:
d9:b8:87:82:18:5f:e1:1a:9e:cd:85:83:bb:25:01:
e8:d1:59:ad:a8:86:f4:42:93:f5:9d:c2:5b:1f:62:
29:d5:21:68:53:13:cb:e1:bc:20:31:24:5f:ad:df:
b6:c9:e5:40:b1:6c:43:d6:07:3b:03:de:5a:36:51:
eb:e7:8c:0a:b6:3e:cb:7f:f7:d3:8c:1a:d6:b1:64:
c7:19:1b:91:97:cb:96:08:94:8d:f8:5d:a3:7e:e3:
ab:47:b5:27:1e:33:cb:e8:be:b9:6a:9b:61:5c:0a:
a6:ac:da:b3:2f:d6:46:15:cb:dd:3b:55:f8:1a:47:
38:bd:8a:f7:1c:f6:73:ea:c4:b9:bd:fd:72:9b:2f:
83:6c:9b:70:5e:53:55:62:44:4a:69:83:a2:95:98:
e9:a1:0e:10:cc:7c:e2:15:4c:69:63:cf:58:b0:af:
98:9b:b8:45:af:c0:c0:2a:bd:76:8e:48:98:1d:e1:
8c:27:15:59:4a:e1:6f:7d:ce:44:e5:85:e2:db:ab:
18:35:8d:02:48:72:7c:92:41:c7:17:14:26:53:01:
24:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DF:A3:99:21:12:D9:0D:C8:A2:32:5B:0B:09:4D:EB:4D:3A:50:6B
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/9t-jmSES2Q3IojJbCwlN6006UGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.94.0/24
188.190.0.0/24
IPv6:
2a03:f80:386::/48
Signature Algorithm: sha256WithRSAEncryption
05:cc:c7:d3:f5:c7:f6:96:f2:37:51:e8:02:65:47:4d:bd:75:
43:03:7f:97:ab:b6:5a:13:2c:19:1f:eb:80:b9:be:fb:60:97:
69:ee:c0:bf:b5:39:86:ba:a4:14:23:df:e1:85:36:8c:66:0f:
e9:78:fd:bb:e6:aa:97:b5:da:d5:9e:e1:07:c7:62:01:00:11:
a3:b8:a0:f9:00:fb:cd:05:4d:9d:4b:9b:7e:b4:4e:aa:1a:8f:
58:12:4d:05:93:48:6d:07:08:d8:70:90:a1:a2:1d:0e:16:0f:
54:64:1d:26:cb:b2:5a:6b:10:90:7a:e5:1e:09:b4:e2:e3:e1:
a2:a7:76:b8:a4:76:b9:85:00:a9:94:ad:a2:44:3f:17:32:f5:
20:29:08:f8:72:5f:16:fb:7c:6b:5a:64:85:e9:61:80:94:47:
f3:09:df:ae:cc:d3:db:95:9c:d1:e1:7f:2c:a8:14:52:89:fa:
c3:3e:f6:dd:14:11:b5:fe:16:69:3c:79:95:02:3f:91:ce:5b:
90:c0:7e:e8:ec:6c:02:51:6e:57:05:be:43:3b:f9:55:2e:e9:
6a:62:89:bd:35:83:2e:7d:fe:aa:9d:e9:ac:52:f8:a5:f6:a3:
fb:fa:27:a4:1a:90:1e:e8:78:14:53:eb:ff:d2:f8:d7:2c:26:
b5:0c:02:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:07:52 2026 by rpki-client