Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/2D9jahaYRLXT6VkVRC2UCXrEefo.roa
File: 2D9jahaYRLXT6VkVRC2UCXrEefo.roa (raw, json)
Hash identifier: AHHjJQUGsEKglQiON0dI3TymMb16JUrmW77JwoNh9Rw=
Subject key identifier: D8:3F:63:6A:16:98:44:B5:D3:E9:59:15:44:2D:94:09:7A:C4:79:FA
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0EE651F63D0F9C7021B83D720FD8A1B42
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/2D9jahaYRLXT6VkVRC2UCXrEefo.roa
Signing time: Tue 29 Sep 2026 18:19:59 +0000
ROA not before: Tue 29 Sep 2026 18:19:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 193.17.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:65:1f:63:d0:f9:c7:02:1b:83:d7:20:fd:8a:1b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 29 18:19:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d83f636a169844b5d3e95915442d94097ac479fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dd:2b:fa:ea:b8:7b:e5:7f:35:6f:66:ce:da:
77:7d:88:d7:bc:3a:80:e7:0f:3b:15:f7:7a:27:3d:
c4:5f:46:86:1f:ee:6c:eb:e9:73:8f:65:d4:6a:b3:
80:f8:fb:e9:1b:41:09:ab:b0:7c:29:f7:03:ff:b3:
b3:46:41:f8:a5:d4:b2:de:13:a7:92:28:ce:68:9e:
02:c2:45:61:f4:0e:08:ee:55:0c:23:f0:ac:6f:23:
d5:2c:fb:92:72:aa:c7:9b:70:f0:99:35:5b:dd:13:
90:f6:82:e7:28:2e:c6:64:47:d5:8f:32:48:59:b0:
9c:fd:56:8c:1b:07:31:1e:69:b6:d5:3f:19:02:9d:
8d:41:0a:e3:6d:3e:06:13:3e:46:e1:e5:cf:4f:cf:
f0:e3:97:00:5e:81:2f:5a:93:98:28:bd:46:d7:d2:
a2:58:d7:3c:b5:59:a0:91:9d:c0:27:2e:de:95:1e:
ad:e8:48:ae:20:de:22:44:77:f2:13:76:3a:2f:93:
76:38:95:a5:1c:b2:fc:29:4e:ce:c1:dd:1b:87:3d:
a5:e7:73:28:50:a0:ad:70:9b:26:d9:67:49:c5:ba:
51:3d:1b:4f:1b:37:e9:22:41:04:d4:dc:d1:a6:bb:
b1:9a:ca:4e:8e:1d:78:f5:f2:bb:c6:08:14:6d:12:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3F:63:6A:16:98:44:B5:D3:E9:59:15:44:2D:94:09:7A:C4:79:FA
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/2D9jahaYRLXT6VkVRC2UCXrEefo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.4.0/24
Signature Algorithm: sha256WithRSAEncryption
53:06:b4:f0:b5:4a:96:4e:6d:ea:60:11:84:b5:d9:1a:eb:9f:
35:ba:d8:c1:20:e1:bc:70:71:79:23:53:b7:e7:1d:af:88:54:
b2:33:66:7b:ab:9a:1d:35:81:c1:33:0f:54:ba:ed:7b:c0:75:
be:d0:e4:13:a6:ab:47:6f:7a:ac:8c:9b:8d:ae:5e:ac:58:79:
a2:05:40:73:48:0e:cf:3a:a6:6d:69:17:04:cc:a0:f0:cd:a4:
bf:73:6f:70:cf:25:57:16:1d:ea:83:4c:39:9f:48:07:67:b2:
1d:34:69:c9:00:28:c2:34:6e:13:8a:36:1e:29:02:0a:01:37:
32:73:8b:c2:4d:1a:eb:b4:4e:0a:4d:f0:4f:e2:e1:db:fc:51:
79:08:ca:aa:89:04:15:42:1d:df:77:01:3a:ab:6f:46:51:a0:
d1:62:38:5d:3d:10:8a:68:83:5d:b8:78:ae:c9:70:c0:0c:5a:
a3:3d:4d:73:e7:91:f9:68:df:d3:3c:ad:d6:7e:87:11:71:8f:
e6:cf:95:3e:c6:40:2d:85:c9:ff:3f:4d:1c:c0:8b:4a:13:75:
71:6c:1b:6b:d7:bf:9b:ad:cc:30:7c:24:29:9b:cc:55:98:f6:
18:4e:39:2f:59:79:4c:b5:bc:f1:e3:e0:f1:d7:4b:81:46:05:
f0:ba:f2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:10:38 2026 by rpki-client