Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/X9mUy2Qmlcpzq97SwEuUMl5clw8.roa
File: X9mUy2Qmlcpzq97SwEuUMl5clw8.roa (raw, json)
Hash identifier: mfJZmnebhhFlGgYhM59XqpgvJNro8sf2A4t93xuL91I=
Subject key identifier: 5F:D9:94:CB:64:26:95:CA:73:AB:DE:D2:C0:4B:94:32:5E:5C:97:0F
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 019DC8E77CC0E39A58971369C9F2EFD855C1
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/X9mUy2Qmlcpzq97SwEuUMl5clw8.roa
Signing time: Sun 26 Apr 2026 08:28:26 +0000
ROA not before: Sun 26 Apr 2026 08:28:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 193.57.231.0/24 maxlen: 24
194.165.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c8:e7:7c:c0:e3:9a:58:97:13:69:c9:f2:ef:d8:55:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Apr 26 08:28:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fd994cb642695ca73abded2c04b94325e5c970f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:bc:7a:39:87:a5:85:42:9b:81:95:49:d8:
4c:54:13:4d:a2:e4:6f:be:1b:8a:91:e4:cc:60:59:
c9:9a:2a:c6:e1:f9:79:02:ba:7f:d0:21:6a:89:4b:
db:eb:99:93:e7:b7:d6:07:16:05:89:52:49:79:df:
56:dc:4e:5a:da:7e:75:6a:c6:99:16:8f:15:e9:20:
2c:f5:da:ad:18:b8:09:1a:66:3c:84:14:cf:12:d9:
2c:5b:15:a5:0f:33:e6:32:38:87:7b:f7:18:17:1f:
42:6a:d0:be:01:aa:88:9c:6f:1d:bf:f9:2f:1b:48:
53:2d:a5:64:8f:6f:4f:6f:96:22:53:0e:46:3a:0f:
f5:29:c8:94:05:93:f8:31:e7:76:c1:ef:70:63:ca:
63:9f:97:21:20:52:3d:0b:b3:c7:65:b3:3b:95:30:
28:c6:c9:07:21:2c:1f:f3:47:1a:62:14:2b:45:71:
48:70:85:f0:10:7c:36:76:97:b4:ca:da:ce:fb:7c:
df:0b:43:68:a1:3c:67:cf:d9:1d:d2:01:d0:ec:e5:
3c:c5:d0:a6:b5:84:bd:d6:b2:49:19:01:55:99:ab:
dc:2e:eb:3a:2f:5a:82:82:0a:16:f3:cd:2d:2b:83:
08:0a:23:90:db:76:59:89:14:ab:d0:ae:05:df:b7:
18:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D9:94:CB:64:26:95:CA:73:AB:DE:D2:C0:4B:94:32:5E:5C:97:0F
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/X9mUy2Qmlcpzq97SwEuUMl5clw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.231.0/24
194.165.37.0/24
Signature Algorithm: sha256WithRSAEncryption
08:51:66:d5:e9:fd:72:13:58:29:e4:6b:3e:e3:1a:b1:a5:3f:
8f:5d:8f:3f:70:ae:36:1f:92:f2:7b:e8:e7:88:af:0a:36:64:
af:0d:eb:f2:c5:b2:83:46:84:de:99:f9:97:6d:9b:1d:d7:6c:
d7:45:8b:8e:83:1f:15:5f:d4:84:91:4a:d1:b3:47:db:21:6c:
54:b6:c5:04:44:a1:05:87:0a:3e:ac:c2:0e:53:3c:57:f6:cc:
ca:c3:6a:df:82:f0:fd:91:b8:45:8d:2c:bf:28:21:8e:b7:e2:
cc:62:74:fe:cc:24:39:bb:81:bd:6c:c5:4d:5e:d6:1f:19:13:
42:66:df:9f:8d:fd:05:e2:0c:da:f2:0b:73:8c:e1:aa:c0:78:
22:d2:a5:48:0a:92:84:61:df:0b:46:af:26:a2:3f:ac:bc:17:
48:fe:06:bf:bf:fa:23:6f:67:b3:5c:be:24:c5:dc:0c:94:f9:
36:6c:b2:47:14:2f:7e:d3:f1:7b:fe:22:40:b9:aa:38:23:de:
dd:65:05:26:65:f3:ac:48:8a:e8:89:c2:b1:56:49:f2:25:89:
96:c9:8d:59:a2:94:9d:b1:29:ca:b9:f5:41:67:8b:83:bb:cd:
2a:8c:1f:7b:5a:6e:e2:2b:32:d8:e6:e3:76:ca:10:8f:f9:cb:
0a:3f:28:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:47:50 2026 by rpki-client