Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9lJoowqeThbIKEDpiuxNVOCiMC8.roa
File: 9lJoowqeThbIKEDpiuxNVOCiMC8.roa (raw, json)
Hash identifier: 4N+M61Lp0mh4u/bJAqqIsXELbMgNoAZHcTwIumHyBWw=
Subject key identifier: F6:52:68:A3:0A:9E:4E:16:C8:28:40:E9:8A:EC:4D:54:E0:A2:30:2F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F6EFD137CC53B971E2E01026F2A78F279
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9lJoowqeThbIKEDpiuxNVOCiMC8.roa
Signing time: Fri 17 Jul 2026 07:31:47 +0000
ROA not before: Fri 17 Jul 2026 07:31:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154115
IP address blocks: 94.249.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:fd:13:7c:c5:3b:97:1e:2e:01:02:6f:2a:78:f2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 17 07:31:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f65268a30a9e4e16c82840e98aec4d54e0a2302f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:1a:9e:23:10:d1:b5:4f:97:e7:66:c7:b4:
59:de:55:69:c5:c0:63:e7:95:ff:ec:0e:5f:69:35:
4f:48:b5:83:a8:3b:34:4b:9c:c0:67:58:6b:62:72:
27:73:05:6e:58:f2:c0:37:8c:04:2c:52:5b:a4:16:
03:c7:0d:7d:f1:0b:32:9b:fa:85:0b:89:cb:87:14:
63:96:71:fb:a2:59:38:5d:ec:48:a2:39:08:ce:b6:
40:30:92:38:bb:61:6d:e5:c7:24:95:e2:92:ee:37:
b7:3b:c7:89:3a:24:0e:2b:da:a2:e4:9d:c5:67:d7:
9b:5e:e9:4d:9f:33:42:f4:78:a0:6f:c1:f2:cf:ae:
d3:44:25:45:4b:4a:75:dd:d6:27:66:d5:73:29:bd:
8c:0b:64:a0:00:97:4b:cd:52:85:7d:54:1c:ce:1a:
16:96:ad:0b:59:18:be:ea:04:0e:77:32:bb:77:2d:
62:69:ed:91:96:c8:01:97:d1:bc:ca:03:a8:62:93:
79:1f:a1:fd:12:53:7b:3c:4e:ec:39:f7:0b:6f:38:
10:37:8c:08:ee:9c:08:1e:ae:d2:86:93:c7:d5:61:
6e:d5:c2:e6:58:88:ac:d2:8a:38:2b:9f:28:3b:d7:
80:a0:2c:8a:43:45:67:43:a2:ac:dc:42:d1:1b:6e:
e8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:52:68:A3:0A:9E:4E:16:C8:28:40:E9:8A:EC:4D:54:E0:A2:30:2F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9lJoowqeThbIKEDpiuxNVOCiMC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.246.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ff:3e:5f:e8:c1:09:4a:1e:b5:89:12:a7:a1:25:0b:ed:88:
41:9b:12:81:1a:69:bd:78:8b:c9:ce:3b:39:52:47:4e:16:1e:
39:ff:43:5b:b2:fa:d0:f9:de:5c:bf:99:78:f0:9e:15:10:99:
27:db:12:2f:07:82:0d:33:43:6f:2c:db:64:2d:e4:07:da:71:
ac:6e:ba:14:d1:2a:28:41:f1:10:5f:84:24:c0:f5:13:90:4b:
e1:52:cc:b9:42:92:6d:64:21:86:bd:7e:32:af:72:44:46:f0:
05:e9:e0:c1:96:cf:d3:46:e5:e6:fd:fd:b0:48:a2:0f:43:e7:
bc:00:89:aa:d9:31:2b:31:2a:16:84:df:d8:6e:8d:c4:4f:5c:
02:41:ec:34:83:10:f1:c2:95:08:5f:a5:d6:0f:a7:74:12:f4:
80:2d:f0:64:16:6a:74:93:8d:a5:0a:83:40:0d:3f:3d:f3:f3:
21:1f:4a:ea:6a:9e:42:d2:e8:84:49:f0:8c:4e:c3:ae:1d:99:
ad:65:d2:de:ec:13:6a:92:1f:e7:f1:29:69:99:0b:38:16:16:
6d:3c:16:c5:3a:80:46:3b:61:a3:d4:ee:12:f7:28:42:c7:54:
c3:8f:44:37:8c:f9:9f:17:a9:1c:c6:bc:e4:ab:37:08:d6:0d:
5c:4e:d2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:18 2026 by rpki-client