Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/s9mRiVbGsTF6wkMK69DtA5FXNaY.roa
File: s9mRiVbGsTF6wkMK69DtA5FXNaY.roa (raw, json)
Hash identifier: zDvAj5uvmLenqTBwKC8I/l27zfQzwbUsThxQH7ZGp1M=
Subject key identifier: B3:D9:91:89:56:C6:B1:31:7A:C2:43:0A:EB:D0:ED:03:91:57:35:A6
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 01A0FFCB08F3A544EAE45A60936495BB72A0
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/s9mRiVbGsTF6wkMK69DtA5FXNaY.roa
Signing time: Sat 03 Oct 2026 03:24:51 +0000
ROA not before: Sat 03 Oct 2026 03:24:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 194.53.203.0/24 maxlen: 24
194.61.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:cb:08:f3:a5:44:ea:e4:5a:60:93:64:95:bb:72:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Oct 3 03:24:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3d9918956c6b1317ac2430aebd0ed03915735a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:ce:e6:7e:4e:c7:35:d3:24:4a:45:16:c4:
a2:57:f6:bc:fe:e1:60:db:29:8a:7e:9d:36:76:95:
27:03:90:e3:c9:b1:21:a4:b1:11:16:ee:c1:6e:8c:
ff:95:a9:64:53:98:2b:c0:da:5a:be:fd:fb:56:24:
58:fe:21:66:23:28:39:26:05:7e:0e:c1:ef:12:52:
c7:14:f3:96:c7:76:01:84:c9:f8:a1:fb:6a:1f:6f:
c4:52:70:c5:67:e5:3a:79:70:a7:c1:52:ee:0b:c3:
c0:68:ce:63:c9:4a:4c:18:2c:01:e6:d9:e1:a8:9b:
9a:2f:42:07:a0:00:3b:02:c0:13:c1:30:a2:25:ff:
f4:85:af:12:8a:6e:09:64:8a:70:24:34:df:cb:1a:
50:fe:17:31:37:0a:0a:09:ae:45:49:4e:60:de:ce:
be:3e:63:f2:1c:5a:c9:11:34:3d:7b:ab:68:eb:4c:
4b:06:85:86:60:61:ef:57:ca:1f:3f:b5:75:7a:6b:
8d:48:c8:10:99:04:f2:d8:1c:ac:31:d8:6b:4f:e0:
eb:c0:33:b3:5f:2c:e5:c5:78:c3:c4:1c:b1:b7:9e:
a2:dc:86:d8:4c:d3:76:ae:ef:3c:57:b1:6c:55:85:
03:00:55:65:e6:16:e3:ad:08:64:fb:76:24:36:50:
a2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D9:91:89:56:C6:B1:31:7A:C2:43:0A:EB:D0:ED:03:91:57:35:A6
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/s9mRiVbGsTF6wkMK69DtA5FXNaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.203.0/24
194.61.239.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:09:de:53:0b:e6:4d:2c:77:64:89:c1:a5:89:19:0e:c8:f1:
ca:1b:df:ec:70:5a:71:92:55:20:79:99:31:e5:f9:71:a7:73:
85:02:24:77:2d:72:51:77:fb:5e:c6:0c:b5:e4:0a:bc:e0:43:
ba:ce:00:b1:75:e7:46:26:3e:f6:a4:c8:46:81:32:c7:54:61:
f3:6e:5b:5a:4e:56:7e:75:cd:4b:9f:ff:4c:c8:7a:f8:91:b2:
0e:51:35:dd:2a:f9:c4:ba:6a:73:9f:c5:45:72:a5:8a:6b:9f:
01:19:30:8f:7a:61:22:eb:88:34:49:b3:a9:53:73:af:e8:d8:
95:81:52:dd:b7:95:2d:fe:2c:53:ad:00:5a:02:59:a9:a8:77:
a1:29:ad:95:af:b6:b3:7a:88:75:9f:da:a7:3b:ee:f7:db:f7:
41:1e:75:55:2d:48:98:9a:ed:5e:1e:cf:ca:17:56:21:f1:c7:
1c:41:0a:21:9c:84:c9:c6:17:33:ca:2a:2d:ed:78:04:09:e4:
60:7f:6f:6d:b2:15:53:f0:94:17:8c:b7:3b:b0:29:25:6e:fc:
c8:56:e4:69:ce:e7:e6:e9:fa:7b:81:ff:b9:cd:8c:fc:68:99:
14:64:c0:0d:e5:67:59:6c:62:8b:11:bb:22:a9:75:12:56:bc:
c1:0a:fd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:51:42 2026 by rpki-client