Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/9xDvpAa04JvV1t3FSaKoh6sV25A.roa
File: 9xDvpAa04JvV1t3FSaKoh6sV25A.roa (raw, json)
Hash identifier: 4uZePxxSJoHk3J2ZlFhc1mRQF890b83Dljzq8YQD9Ew=
Subject key identifier: F7:10:EF:A4:06:B4:E0:9B:D5:D6:DD:C5:49:A2:A8:87:AB:15:DB:90
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 01A0D74629D87DCB6366C35D5D1E4362349D
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/9xDvpAa04JvV1t3FSaKoh6sV25A.roa
Signing time: Fri 25 Sep 2026 06:34:54 +0000
ROA not before: Fri 25 Sep 2026 06:34:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 193.108.56.0/24 maxlen: 24
193.108.57.0/24 maxlen: 24
193.108.105.0/24 maxlen: 24
213.109.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:46:29:d8:7d:cb:63:66:c3:5d:5d:1e:43:62:34:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Sep 25 06:34:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f710efa406b4e09bd5d6ddc549a2a887ab15db90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:67:36:4a:80:19:90:f5:fd:a2:5b:6b:0e:
bc:29:89:b0:9b:69:8f:dd:84:02:64:e1:3e:4d:11:
26:63:dd:86:2f:ee:95:21:e4:ce:18:e2:f1:83:ce:
26:95:63:bc:03:f9:74:d5:7e:84:d1:e4:a5:0a:d2:
d5:d3:9d:bb:e2:68:49:ce:e1:4c:42:79:8f:51:b2:
f4:70:75:f0:ef:6c:dd:6b:ff:54:a7:34:3e:e8:29:
fd:b0:0a:8b:84:f7:60:25:bd:cb:f8:3a:ed:89:88:
15:d0:6a:84:a7:1a:11:dc:aa:e5:62:c3:2b:08:74:
db:aa:e6:cc:39:7e:fe:e0:f6:22:61:19:c3:ca:be:
a7:4e:99:66:8a:ce:45:76:41:bf:63:ed:b8:40:62:
fb:63:b9:38:dc:4a:91:1e:13:84:0f:78:77:69:b3:
8d:c5:b0:c4:b9:00:82:cf:24:2a:d7:84:a4:47:29:
32:98:0d:c6:98:a4:8a:2e:80:da:52:b3:f9:4d:0f:
70:51:ab:75:23:26:e3:90:b4:07:aa:18:71:83:e2:
1f:b7:0e:ad:67:5d:b4:d9:1f:e1:ee:36:3f:f6:da:
63:41:2d:c1:22:39:7c:fd:a9:e4:b8:ed:22:b3:61:
92:cf:a2:8c:91:cc:94:2c:b2:3e:71:26:e5:8f:bc:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:10:EF:A4:06:B4:E0:9B:D5:D6:DD:C5:49:A2:A8:87:AB:15:DB:90
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/9xDvpAa04JvV1t3FSaKoh6sV25A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.56.0/23
193.108.105.0/24
213.109.154.0/24
Signature Algorithm: sha256WithRSAEncryption
96:be:9d:b9:30:80:7f:74:97:46:dc:d0:07:4d:56:1a:8c:37:
e8:4a:0d:2e:0d:ff:08:d4:8b:2f:64:b0:2f:e1:c6:05:9b:52:
f6:e3:fd:d1:75:80:78:83:3b:23:97:b1:04:10:90:9f:47:0c:
40:8c:1d:a5:a9:40:a7:46:52:7e:b1:ea:12:30:61:9f:9e:f7:
a1:b9:1a:0f:79:20:43:ad:1b:f0:82:7c:aa:1b:da:0d:d2:81:
9c:77:e8:13:ca:98:e1:7c:49:39:72:b9:f0:23:b3:ff:59:2c:
9b:8b:00:47:93:0e:3b:61:28:d8:75:92:62:8f:9f:9b:67:a2:
50:27:b1:c1:80:4c:aa:03:74:ae:2e:ab:2a:cd:2f:bc:85:cb:
4b:d8:7e:81:70:d0:2c:7c:6a:b6:95:3b:64:c7:24:0c:ad:01:
0c:cd:82:e3:75:e2:3d:1c:50:76:eb:d7:4b:82:8c:d8:5a:e5:
85:23:65:56:e9:e1:4d:15:d4:1b:57:42:99:f7:01:a9:11:c5:
f7:b6:f1:db:88:cc:e3:be:b4:aa:ed:7c:18:ca:2f:ac:bc:63:
b7:e2:c5:31:19:a4:84:e5:96:28:8c:70:ef:36:07:51:03:65:
92:d0:68:9f:9b:01:9b:32:25:ad:fb:23:1a:e0:b0:82:71:1e:
bb:2b:ca:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:27:12 2026 by rpki-client