Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/9dA8EvCEVrYq2zG3X3SwFZS8ML8.roa
File: 9dA8EvCEVrYq2zG3X3SwFZS8ML8.roa (raw, json)
Hash identifier: rQocUBNGb7VmNrgLJw4undjYiQjWn5aQwBkG6+PziNs=
Subject key identifier: F5:D0:3C:12:F0:84:56:B6:2A:DB:31:B7:5F:74:B0:15:94:BC:30:BF
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A041F1EA00E22ED3961E60F1B8EE7ACE4F
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/9dA8EvCEVrYq2zG3X3SwFZS8ML8.roa
Signing time: Thu 27 Aug 2026 06:39:28 +0000
ROA not before: Thu 27 Aug 2026 06:39:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45102
IP address blocks: 109.229.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:f1:ea:00:e2:2e:d3:96:1e:60:f1:b8:ee:7a:ce:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Aug 27 06:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5d03c12f08456b62adb31b75f74b01594bc30bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:05:0d:51:6e:4f:15:ab:6e:cb:b6:93:ac:53:
4b:ff:bd:49:0d:e1:c4:b7:a1:10:c1:59:bf:22:70:
fd:28:0b:9d:4e:78:01:87:f2:33:15:1e:39:6e:1b:
e9:a6:40:4a:e7:86:23:ab:43:4e:b1:46:23:d9:03:
3c:04:c2:7f:2a:78:0d:11:75:05:15:8b:b0:73:cd:
02:06:2a:4f:9d:cf:7b:f5:95:e7:a8:2e:b0:eb:79:
ed:20:d7:e2:cf:e7:51:85:59:c5:da:a7:d7:2d:88:
88:de:a3:9e:7e:7c:27:4a:4c:a6:4b:d2:6a:98:16:
1e:e6:73:8a:5e:b6:d5:0f:5a:13:b9:f6:60:b0:5f:
cb:e1:49:7d:aa:46:de:c3:f6:e9:fd:32:95:22:43:
96:75:d3:ce:40:6f:5c:3a:ad:7a:48:2a:53:c1:6b:
3d:5e:d7:b5:7f:53:41:90:0a:78:2d:5b:87:4e:b0:
85:ce:87:ec:70:ef:fc:31:fb:33:92:d7:b4:5e:e9:
04:37:01:4e:73:04:55:a1:b3:de:ed:f7:b6:0b:6e:
e9:24:49:97:00:33:c4:33:1c:78:71:bf:28:45:05:
be:6c:6f:f8:db:68:52:ac:6f:ae:93:c3:06:40:87:
7b:9f:c9:e7:43:b0:e6:6e:16:58:8d:7e:75:0d:71:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D0:3C:12:F0:84:56:B6:2A:DB:31:B7:5F:74:B0:15:94:BC:30:BF
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/9dA8EvCEVrYq2zG3X3SwFZS8ML8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.229.216.0/23
Signature Algorithm: sha256WithRSAEncryption
43:2b:ef:ed:0e:fe:cd:4f:db:db:68:26:23:35:b2:90:ba:33:
97:08:d8:9c:46:a8:10:05:d6:f2:12:29:79:fe:f0:87:13:f0:
30:e0:b3:79:68:cb:40:0a:0b:3e:6a:bb:3e:58:5d:c7:f2:17:
63:f5:c1:d8:68:13:b7:34:ac:2a:80:4b:71:30:78:12:c3:b5:
64:a3:46:90:34:5f:fb:f4:5a:24:c9:fe:20:dc:b3:1a:50:75:
6c:42:94:3b:e8:34:bd:1f:d2:5b:da:21:89:0a:ea:83:a5:e8:
14:a8:f1:10:97:ab:77:fe:6e:4e:ba:df:d6:c0:db:be:dd:8d:
97:05:3e:c6:0b:23:07:37:b9:7c:50:c9:1b:22:1e:63:67:dd:
00:94:33:fb:f4:16:49:a0:58:76:3f:32:7c:aa:25:90:e1:0a:
b6:98:90:32:3b:8b:4c:45:a3:90:5b:59:3b:04:1d:d3:e5:e8:
89:c3:7a:b6:5e:d7:5a:26:0d:dc:8b:4c:a3:06:df:fd:73:c7:
41:b8:3f:3d:50:3c:2f:ba:cb:8c:f6:8f:68:89:d1:cb:1e:43:
58:72:bb:a1:63:63:7d:8f:e8:66:dd:ba:97:38:29:4d:e4:f4:
34:46:1e:36:b7:06:31:ac:f1:a1:ce:17:7e:33:8d:b8:7f:bd:
58:e8:ae:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:29:52 2026 by rpki-client