Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9rQcJWilQPqkZ8CRyGp_f2N2v3o.roa
File: 9rQcJWilQPqkZ8CRyGp_f2N2v3o.roa (raw, json)
Hash identifier: nBFJuk37bBCe/9OY7d5MFkSuVJZViX6JeuoH6MFCGHA=
Subject key identifier: F6:B4:1C:25:68:A5:40:FA:A4:67:C0:91:C8:6A:7F:7F:63:76:BF:7A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FE0532078821762C19ACF7592CCFA26B6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9rQcJWilQPqkZ8CRyGp_f2N2v3o.roa
Signing time: Sat 08 Aug 2026 07:42:51 +0000
ROA not before: Sat 08 Aug 2026 07:42:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 89.144.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:53:20:78:82:17:62:c1:9a:cf:75:92:cc:fa:26:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 8 07:42:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6b41c2568a540faa467c091c86a7f7f6376bf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:10:31:46:14:7e:14:af:fe:d2:b9:43:b0:
58:5b:f5:7e:f8:b4:91:fa:4a:b9:12:b2:0f:24:80:
c5:01:e9:be:6d:44:c7:cb:ad:62:18:58:45:22:f6:
4d:8c:a4:04:6c:c4:9f:85:84:87:c2:13:00:76:aa:
98:97:5c:d7:a9:fe:4f:cd:88:5f:92:04:a2:67:b1:
21:42:96:57:d6:20:cd:b0:6e:a8:e9:ee:0b:1f:90:
91:52:8e:c5:ac:19:ae:1f:9a:16:47:91:d9:22:93:
7a:2c:08:c8:aa:ab:04:6b:26:9a:31:10:d4:07:cb:
73:51:13:5f:3d:e6:2b:8e:35:16:74:0d:c4:56:f6:
2d:38:92:97:4b:d4:2e:a8:8f:d1:98:1c:d4:a3:4f:
5e:88:ae:6f:79:52:5c:71:4b:bb:7c:a4:2f:ab:c5:
6d:9b:dd:5d:96:72:99:cb:ba:c9:8d:42:09:53:66:
7e:f9:fe:23:6d:4f:72:fd:ba:af:89:2a:80:67:7e:
36:22:0d:e1:c0:5c:73:61:52:f9:02:c7:47:32:36:
dd:7d:68:bb:6d:4d:f8:16:9c:06:32:86:99:e3:0a:
50:5b:64:8e:81:bc:c3:28:18:ec:fe:f6:06:55:4e:
18:91:4b:2e:92:e8:ee:01:1f:e9:3a:2b:9b:20:9d:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B4:1C:25:68:A5:40:FA:A4:67:C0:91:C8:6A:7F:7F:63:76:BF:7A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9rQcJWilQPqkZ8CRyGp_f2N2v3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.55.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d3:f7:0f:63:44:3a:8d:1b:19:fe:74:c2:e6:ec:de:4c:ec:
ca:c6:27:97:3a:91:4b:20:11:8c:11:d3:fb:05:5e:4a:29:a3:
49:7f:c2:fa:17:ed:b0:e3:9b:36:d2:83:08:92:ef:73:26:3b:
ce:c9:74:46:c1:f5:bb:30:d3:fe:9e:36:75:a6:40:f9:64:c8:
35:2e:1f:cd:d3:ef:9d:df:08:51:58:ef:55:37:cd:dc:65:3c:
ec:cc:ea:6d:5c:14:18:37:11:0f:b6:38:fd:db:a5:05:37:68:
d6:bb:f4:30:cd:97:a8:66:23:31:21:16:3c:15:a1:f6:43:24:
be:34:a7:50:76:6e:d3:68:95:33:81:43:18:8f:38:31:0b:d9:
86:37:6e:30:73:b6:c4:27:6e:07:7e:d2:28:82:1f:cf:e3:c5:
35:01:36:25:94:e6:d9:34:be:08:52:97:d0:a6:7b:59:75:4c:
b7:29:14:33:9d:d2:6c:7d:d2:9b:e8:da:16:91:c4:9d:63:2d:
dc:e1:54:09:26:df:df:ca:7a:84:9f:a9:38:81:4e:84:d6:67:
d8:43:57:41:fc:e1:9f:a5:91:52:77:2f:b3:b2:2f:01:d1:71:
42:82:8f:85:d4:21:fb:b8:fa:88:e0:ae:db:b4:7f:21:e1:8f:
4d:e0:c4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:29:03 2026 by rpki-client