Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/9cNKQWK3wk1irmE7oa8T4PR8mc0.roa
File: 9cNKQWK3wk1irmE7oa8T4PR8mc0.roa (raw, json)
Hash identifier: u5fJLnWvAGQzCGewqpUpjr9+ttOL7JnpgPLBPCMOWKk=
Subject key identifier: F5:C3:4A:41:62:B7:C2:4D:62:AE:61:3B:A1:AF:13:E0:F4:7C:99:CD
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 019FB0F0BC489F4D1F7EEF477D7C26F0DD27
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/9cNKQWK3wk1irmE7oa8T4PR8mc0.roa
Signing time: Thu 30 Jul 2026 02:53:14 +0000
ROA not before: Thu 30 Jul 2026 02:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 194.53.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b0:f0:bc:48:9f:4d:1f:7e:ef:47:7d:7c:26:f0:dd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Jul 30 02:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5c34a4162b7c24d62ae613ba1af13e0f47c99cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:b6:88:ea:f6:2b:06:c2:2f:ab:43:5e:f9:
82:8b:e9:d4:8b:87:a4:1a:d3:73:d0:13:49:e9:e8:
29:bf:6b:9c:0e:79:9d:11:73:41:c4:1d:b3:aa:56:
db:dd:a0:9d:16:13:7a:6c:0f:ed:7a:b5:0d:3d:e2:
88:f5:af:e2:6e:9b:e1:bf:18:39:fa:de:c9:27:43:
f9:0d:ec:ee:00:4f:c4:95:82:b2:b9:2e:59:37:b8:
4b:48:e6:2a:cf:aa:8c:b0:b9:c7:1c:a6:55:58:36:
87:a6:7f:a7:3b:78:8d:c5:66:fb:77:31:51:fd:22:
8f:84:4c:3d:9c:05:00:17:84:73:6b:f0:82:ad:b4:
f0:12:39:4c:e8:eb:fa:4b:39:70:ae:87:a4:55:65:
1d:4a:78:9d:4a:60:1d:1a:88:99:e7:62:d7:ef:52:
5c:29:b2:78:87:c2:2c:7a:2b:ab:1b:67:c2:aa:24:
0f:13:f2:0e:d1:12:87:0f:c4:52:3d:f6:b3:e7:08:
1e:13:6f:58:0a:71:c7:11:95:0f:1b:aa:a3:35:fc:
bc:68:ff:00:20:d2:49:e6:d8:81:7e:a7:ac:53:ed:
58:c1:54:0d:b6:d7:d3:cd:24:f1:1b:cb:91:88:ae:
56:32:ca:91:47:a6:dd:5f:1a:65:f0:4b:2e:f6:c6:
c3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C3:4A:41:62:B7:C2:4D:62:AE:61:3B:A1:AF:13:E0:F4:7C:99:CD
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/9cNKQWK3wk1irmE7oa8T4PR8mc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.201.0/24
Signature Algorithm: sha256WithRSAEncryption
54:e2:c6:dd:1d:98:52:0d:5a:b2:68:04:04:7f:e7:4d:a6:6e:
7d:53:d2:1c:76:ab:d0:ea:a1:45:ba:06:13:c3:f4:17:1e:8a:
3e:dc:3d:e0:87:84:ec:84:97:64:ae:4f:a3:cf:3b:bc:fe:9c:
2c:6d:28:24:83:57:dc:ba:c8:7e:0d:71:ef:d6:6d:bb:b1:c9:
78:50:7d:05:62:7a:06:35:d5:ab:f6:3a:37:4c:f8:0a:5a:9a:
2b:ee:c6:db:09:36:97:53:37:78:10:cf:83:67:df:d7:2d:d0:
67:8f:8c:36:83:30:26:62:34:0c:2b:41:81:ee:e8:2d:c8:4c:
1b:cc:13:9f:d3:ab:d4:18:95:af:21:ca:29:ec:fd:74:77:80:
91:c2:ac:bb:7a:22:7d:2c:34:ca:9f:97:e8:fe:00:10:ab:3f:
d5:4f:4a:24:ab:86:d3:8c:b3:9b:5a:1f:3f:19:dc:8f:20:51:
b2:42:aa:b6:40:c5:4c:bb:75:6f:10:e1:d9:14:5c:25:3b:4f:
fe:da:ed:b7:90:e2:f8:b4:4a:9b:07:f6:57:b8:6e:5e:d8:b2:
c0:9b:1a:6d:44:7b:ae:ba:6d:a6:81:8b:20:09:45:56:a3:f0:
b1:e7:44:52:23:fb:05:42:23:cc:da:81:5c:0d:da:2d:58:93:
96:3f:a9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:53 2026 by rpki-client