Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/B9lYpdDTMk6rv98PTzsASA-gmCI.roa
File: B9lYpdDTMk6rv98PTzsASA-gmCI.roa (raw, json)
Hash identifier: D4QaoY7rwmG+xsHGfqVPKJ7cC2LwDvR/JuQHbpSUFsU=
Subject key identifier: 07:D9:58:A5:D0:D3:32:4E:AB:BF:DF:0F:4F:3B:00:48:0F:A0:98:22
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019C8F074FA74814EC3BB97D4B5C37AA1E96
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/B9lYpdDTMk6rv98PTzsASA-gmCI.roa
Signing time: Tue 24 Feb 2026 09:42:26 +0000
ROA not before: Tue 24 Feb 2026 09:42:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402186
IP address blocks: 109.122.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:07:4f:a7:48:14:ec:3b:b9:7d:4b:5c:37:aa:1e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Feb 24 09:42:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07d958a5d0d3324eabbfdf0f4f3b00480fa09822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:1a:52:35:0b:aa:ad:24:cc:27:0c:a9:ea:
f1:ac:f6:e9:af:4b:68:af:72:a2:08:84:e3:d9:30:
16:89:05:d5:58:67:9e:87:6f:ab:86:f3:fb:80:cd:
1b:74:a3:14:88:79:6b:b1:40:49:17:e1:83:52:c6:
38:55:5f:8c:a8:52:d8:24:f7:6c:46:10:84:f5:d2:
50:d0:de:92:e3:06:a8:ca:55:e7:88:7d:88:80:00:
1f:f0:12:48:e7:a3:fe:08:d8:f9:f8:cc:cd:a7:a4:
c0:9e:88:b7:3b:cb:01:be:8a:dd:21:4e:c1:27:69:
b5:93:a2:53:71:9e:d8:30:55:f5:3b:74:b0:79:0b:
97:b5:af:26:e5:ab:55:7e:c9:c2:60:bb:00:8f:26:
c8:ef:fb:c7:5f:13:d4:7e:e2:19:11:7e:85:aa:10:
4f:60:bb:79:98:91:85:83:a1:2c:37:f5:e7:d8:5f:
29:86:f8:29:50:f3:b1:95:2a:a8:9c:15:30:2b:d7:
ae:69:ff:5d:84:b1:a9:7e:a1:73:6d:8c:6c:be:ea:
61:f3:e9:da:e8:a8:ba:95:29:2d:2b:32:89:5a:bd:
9c:0f:cc:ec:dc:f7:c8:e4:d1:44:78:9e:0f:1a:97:
ef:be:09:56:f7:d6:1e:c8:ba:dd:1e:6d:bb:3b:79:
28:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D9:58:A5:D0:D3:32:4E:AB:BF:DF:0F:4F:3B:00:48:0F:A0:98:22
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/B9lYpdDTMk6rv98PTzsASA-gmCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.21.0/24
Signature Algorithm: sha256WithRSAEncryption
39:12:63:7d:42:88:5f:05:92:98:d4:fa:df:e4:47:37:90:19:
82:aa:50:de:89:33:c2:8f:9e:9c:a8:56:d7:1d:1c:2f:42:89:
16:fd:90:70:6c:f1:0d:4b:4a:2a:03:80:b9:87:c6:fc:2a:84:
c7:8b:39:74:e5:95:1a:a8:d9:78:e7:69:27:33:14:dc:4e:6a:
20:95:d8:c2:94:29:ae:92:22:ce:ce:c0:9f:c3:c9:97:2a:58:
9d:17:a8:28:d1:8e:d5:27:b6:5f:75:a2:06:34:49:1f:14:10:
82:fa:da:4d:5e:2d:68:7b:64:2f:49:18:34:d6:b6:fa:16:95:
1b:a2:97:7f:61:aa:e4:e3:ad:03:ab:71:f1:9a:e5:4f:e6:81:
26:8e:12:7d:ac:aa:eb:e8:33:37:44:52:a7:31:6e:fd:b9:4d:
f8:27:93:89:9f:ad:2b:7a:e0:2d:16:36:c5:97:5b:6a:83:11:
3f:c3:d1:37:59:c6:4a:d3:a5:e8:59:f8:7c:b3:58:21:47:d9:
d2:26:a6:55:c5:45:d5:73:a2:39:40:af:a7:2a:bc:d3:26:0e:
c4:7d:d9:97:15:26:90:0a:95:a7:94:d6:b1:76:b3:f9:99:b0:
92:f3:74:c1:7c:d5:d9:4d:4c:39:07:ec:ae:ec:eb:b0:68:70:
3e:bc:a3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:16:07 2026 by rpki-client