Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/9yzmPh8oJfNBPMrq7efMNmGgI74.roa
File: 9yzmPh8oJfNBPMrq7efMNmGgI74.roa (raw, json)
Hash identifier: VyVDyXa6TLgVb+XPY7hwuidc/KWJQPprmyizLUlblqE=
Subject key identifier: F7:2C:E6:3E:1F:28:25:F3:41:3C:CA:EA:ED:E7:CC:36:61:A0:23:BE
Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial: 01A04E675E815EFB1C6BD1075D89B1BB9547
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/9yzmPh8oJfNBPMrq7efMNmGgI74.roa
Signing time: Sat 29 Aug 2026 16:43:12 +0000
ROA not before: Sat 29 Aug 2026 16:43:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 193.8.27.0/24 maxlen: 24
193.8.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4e:67:5e:81:5e:fb:1c:6b:d1:07:5d:89:b1:bb:95:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Validity
Not Before: Aug 29 16:43:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f72ce63e1f2825f3413ccaeaede7cc3661a023be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:65:db:df:a6:45:b7:6d:5b:90:17:36:9e:
ff:da:23:ab:e3:1c:40:7c:eb:a1:17:ef:ae:08:28:
c4:a9:b7:16:a3:c1:9d:54:01:68:e1:e2:76:3c:f5:
c8:33:09:1a:7c:8c:64:03:2e:d8:a0:82:a9:f3:92:
ee:8c:32:ef:88:38:9e:22:10:73:c8:61:50:37:ce:
48:c2:28:5a:46:4c:b7:5b:30:ba:dc:c0:55:34:2c:
1e:2a:38:e6:7e:73:77:96:e6:ef:b8:0a:4a:ff:42:
5b:d9:3c:18:a6:e4:2e:87:77:ec:42:1a:79:b9:18:
42:27:f4:23:10:68:a7:4b:25:8e:7d:37:6f:02:51:
5f:41:75:09:d6:db:d1:95:49:94:12:38:af:f4:04:
d3:46:bc:1b:45:bc:33:95:d3:4b:e2:82:aa:8f:e8:
06:df:b6:40:ea:6e:56:2d:33:d9:b9:fc:00:7a:e7:
75:a8:ed:b5:c3:51:30:26:4c:12:02:67:92:f2:a0:
18:c1:dd:b0:6f:3c:bd:83:7b:c6:db:93:6b:1c:b5:
6a:0e:d7:c8:56:df:a7:27:f2:cc:8f:09:44:32:09:
a4:d4:98:eb:5a:ca:8a:e2:5f:15:ab:47:f9:70:c4:
32:0e:f9:03:2d:e8:d7:ec:74:a9:20:5a:8e:30:48:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2C:E6:3E:1F:28:25:F3:41:3C:CA:EA:ED:E7:CC:36:61:A0:23:BE
X509v3 Authority Key Identifier:
keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/9yzmPh8oJfNBPMrq7efMNmGgI74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.27.0-193.8.28.255
Signature Algorithm: sha256WithRSAEncryption
6b:ea:5d:2b:e2:ee:b9:35:7e:ec:e7:f0:3d:10:5f:dc:19:27:
6e:1f:54:a9:8f:8e:22:0a:71:8f:f6:05:8d:a8:39:2c:db:61:
c1:4f:b9:19:76:ee:1a:60:68:ed:73:03:ea:15:55:bf:37:e0:
f0:c4:21:73:9e:8d:7e:5b:58:9a:f4:6e:40:c1:d3:c9:3a:d1:
0d:f6:23:a9:ca:ab:55:5a:ce:15:1f:82:10:6e:de:06:d0:d2:
54:0a:e8:e4:7e:60:94:18:cf:ca:b9:94:51:8c:22:24:cc:14:
a9:21:a3:9a:83:5c:d8:0b:51:fa:26:65:5a:70:8d:fc:21:64:
69:4f:cf:63:05:8d:e0:19:38:40:78:83:a1:6a:ce:e3:d3:24:
e9:66:48:1f:40:5f:e2:cc:b2:33:da:e5:78:73:15:15:d6:46:
5a:f9:9a:c7:79:9c:8a:ef:dd:c1:d8:2d:13:cc:ce:38:0d:18:
bc:f9:02:a4:85:61:06:9a:92:86:14:ac:3c:4b:d5:da:3e:dd:
3c:22:e8:10:7f:84:92:90:9a:7d:05:ee:ad:60:db:da:c0:a5:
13:60:31:1f:34:53:f6:1d:c4:63:18:e7:91:aa:53:d5:91:ba:
f7:a9:9b:bd:3e:35:f4:64:6e:90:30:a0:6e:66:60:5f:f9:ae:
b0:3a:27:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:58 2026 by rpki-client