Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9Hn-PqibkWJcg4eUyJDZ57rhzqI.roa
File: 9Hn-PqibkWJcg4eUyJDZ57rhzqI.roa (raw, json)
Hash identifier: jWRKa1TjOHdaxE7b2btgkYfFy1C7uPjrZVzkF0aPie8=
Subject key identifier: F4:79:FE:3E:A8:9B:91:62:5C:83:87:94:C8:90:D9:E7:BA:E1:CE:A2
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D07854CFC576557CC7BCAF7598183452C
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9Hn-PqibkWJcg4eUyJDZ57rhzqI.roa
Signing time: Thu 19 Mar 2026 19:14:29 +0000
ROA not before: Thu 19 Mar 2026 19:14:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135391
IP address blocks: 194.26.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:85:4c:fc:57:65:57:cc:7b:ca:f7:59:81:83:45:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 19 19:14:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f479fe3ea89b91625c838794c890d9e7bae1cea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:30:f5:89:c9:38:9b:3b:4e:5f:b7:a4:a1:
e6:fd:0e:27:65:cf:09:fd:84:1c:63:94:b7:54:42:
84:b6:a1:62:b8:43:c1:5e:6a:6d:c9:78:c4:6f:61:
de:c3:31:73:d4:15:4a:f0:87:9a:f0:c2:00:d0:eb:
ff:fe:7d:e5:a4:65:82:79:e6:36:ee:05:fa:bc:53:
9f:64:83:eb:1e:f9:9c:ff:3f:58:e1:95:52:30:26:
2f:5d:e1:5b:48:d4:9e:99:98:ca:3a:41:c6:9c:09:
3c:cc:c9:0d:b6:6f:95:98:8e:31:9d:4d:19:34:9d:
3b:8d:30:d4:6d:76:5f:32:61:97:be:c6:68:af:a5:
4e:27:88:bd:13:8f:ac:89:34:33:2e:b5:97:0e:26:
26:07:cc:33:d6:7e:2d:1f:d5:7e:e1:f4:e5:78:83:
ab:3b:ca:5f:06:93:a2:2d:ff:96:d6:45:9e:d1:9a:
44:3e:61:cc:67:a9:a5:9f:d8:8d:99:b6:f0:11:a3:
47:5a:7f:fd:e1:55:0e:ab:0d:57:75:20:58:6d:de:
cf:54:20:98:ba:ae:44:94:8c:e4:03:b3:63:9a:88:
00:f9:0a:a2:48:f9:00:e1:39:41:3c:4a:e5:06:b9:
e2:f2:04:e3:5b:49:3e:c2:2e:b0:1f:2b:52:c1:a2:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:79:FE:3E:A8:9B:91:62:5C:83:87:94:C8:90:D9:E7:BA:E1:CE:A2
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9Hn-PqibkWJcg4eUyJDZ57rhzqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.215.0/24
Signature Algorithm: sha256WithRSAEncryption
47:73:55:7a:eb:bf:fa:4d:5d:e7:ed:3d:96:4a:4b:33:e9:bd:
9e:78:aa:51:6a:b2:dc:f0:62:dc:3b:95:1b:67:9e:30:3c:33:
e9:78:7d:1e:e4:84:64:8f:2a:56:f4:cf:16:09:47:fc:08:ee:
ba:e8:a4:14:99:fa:c7:f9:3c:e2:9a:5d:89:90:68:b6:b4:69:
1e:49:71:73:45:85:4e:8c:91:db:05:00:cb:3d:4e:ad:ea:2d:
95:90:80:30:bb:4e:88:ef:c8:ce:8e:1d:a4:5d:d9:84:75:32:
65:0e:67:53:b1:05:1a:56:48:65:ad:dd:fc:17:54:4c:91:96:
33:70:8c:65:ea:d3:9b:2e:86:2e:47:05:a3:fb:41:69:4c:4a:
11:57:ae:68:87:3e:bc:cf:5d:b1:9a:d2:91:fa:21:57:62:a5:
e7:b0:94:65:f3:cc:7e:3a:18:2b:0c:8f:59:ab:00:98:6c:07:
38:10:ee:b7:d8:4a:72:74:eb:06:19:17:16:e4:32:0e:d6:aa:
23:67:b9:58:60:ee:ec:91:7b:8e:02:57:4e:c2:f6:eb:20:eb:
7c:bc:e0:ac:6a:50:6c:29:6e:49:7d:28:44:e7:85:30:4b:c7:
53:c9:7f:d9:93:3f:67:09:54:46:23:70:38:d3:ad:7f:bb:bd:
8c:66:42:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 19:32:44 2026 by rpki-client