Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/cBp9HKtWYiDv0kPsZMZuxSuS-ms.roa
File: cBp9HKtWYiDv0kPsZMZuxSuS-ms.roa (raw, json)
Hash identifier: U2lKHxvG9i2UgrjwCWTiaxLEkUe6G2skfGJ469r3aCU=
Subject key identifier: 70:1A:7D:1C:AB:56:62:20:EF:D2:43:EC:64:C6:6E:C5:2B:92:FA:6B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A018F24E6759E7333F1E9E5FD6624E2726
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/cBp9HKtWYiDv0kPsZMZuxSuS-ms.roa
Signing time: Wed 19 Aug 2026 07:35:28 +0000
ROA not before: Wed 19 Aug 2026 07:35:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 45.88.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 13:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:f2:4e:67:59:e7:33:3f:1e:9e:5f:d6:62:4e:27:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 19 07:35:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=701a7d1cab566220efd243ec64c66ec52b92fa6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f3:57:cd:5d:23:a8:1b:97:e6:51:b2:9d:b4:
a5:fb:5f:42:27:bb:9f:3d:8a:df:0a:3f:4e:a7:44:
44:01:88:90:d4:ab:25:ba:f9:18:c4:97:88:95:4f:
3c:fd:d0:06:ef:d4:6a:80:af:a1:8f:af:ed:97:f4:
bb:0e:bc:cc:9b:65:8e:91:5c:3e:10:db:0b:5c:16:
b8:76:42:a6:ad:70:a7:38:5b:1d:c3:09:7d:57:2b:
3a:2b:14:51:be:1a:b2:60:31:fd:97:44:88:0c:37:
10:d3:21:bf:71:0d:31:7f:fe:09:ed:9b:29:41:fb:
da:bc:6a:7b:e0:88:72:a8:72:dc:62:95:ac:97:f8:
c9:e3:92:7f:b1:88:29:0b:d0:f5:9b:be:fd:ee:bb:
23:a7:bd:bc:33:07:0a:a1:38:a3:e1:cb:2e:93:c7:
7c:28:c4:5e:a5:ea:45:b4:84:bf:35:0f:da:11:40:
73:a2:58:fc:2f:c8:74:a9:22:fb:2d:af:2d:30:67:
9e:d2:17:90:96:67:93:b9:6d:55:eb:39:5d:21:98:
9d:de:ce:cc:5a:80:df:6e:ac:c0:c3:b8:36:7e:be:
e0:58:eb:2d:39:72:51:ea:25:04:a0:4b:8a:4c:84:
61:e2:4c:2f:40:b2:a9:76:d4:2a:ba:07:c0:2b:bd:
f1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1A:7D:1C:AB:56:62:20:EF:D2:43:EC:64:C6:6E:C5:2B:92:FA:6B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/cBp9HKtWYiDv0kPsZMZuxSuS-ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.136.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:11:2f:ce:a9:f8:95:56:a0:d5:ee:5a:1f:82:66:d7:86:81:
58:26:ab:ae:05:b0:0c:e8:a1:cf:9d:a0:ad:fd:8a:1b:70:be:
ef:80:1e:fe:5e:5d:54:4a:59:c9:df:68:44:2e:db:c9:93:c2:
97:39:5a:11:85:b9:e3:ff:5d:c7:cf:3a:b2:a4:d0:ef:6f:82:
78:ea:63:02:1e:89:06:f3:e9:61:b6:c5:e2:00:52:e7:b7:1b:
79:50:a2:63:40:2e:c9:4b:82:26:0d:ec:c2:d4:c1:d4:83:6a:
9e:90:14:81:ba:a3:71:24:59:04:23:75:cb:27:a7:10:34:be:
82:58:3b:c1:4d:f0:77:d3:8f:a2:98:a7:d6:ca:88:f6:dd:84:
43:8e:fe:81:47:d5:8e:0f:7d:8f:36:1d:b8:49:04:b6:76:80:
a7:d1:35:07:9a:30:36:32:1c:c0:43:07:94:25:02:91:81:66:
89:03:ff:de:ed:b8:04:54:79:90:79:bd:a0:ed:7d:b1:f0:82:
ff:f4:41:b5:79:12:1f:21:34:cf:9f:57:81:fc:80:23:ce:de:
62:1b:2b:89:dc:5a:cf:63:19:5e:2d:0a:5d:bb:b6:cd:3d:f1:
53:ac:66:02:0a:b8:b3:19:c9:d3:78:17:2e:4f:c4:24:0a:50:
d5:5c:74:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 22:32:09 2026 by rpki-client