Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/9z84m-kebT8cdB-4tut3KLWmbhQ.roa
File: 9z84m-kebT8cdB-4tut3KLWmbhQ.roa (raw, json)
Hash identifier: tJspMU+tMRDYHrt52hzcYgBJTQsCCMP09cWPHPzuZFA=
Subject key identifier: F7:3F:38:9B:E9:1E:6D:3F:1C:74:1F:B8:B6:EB:77:28:B5:A6:6E:14
Certificate issuer: /CN=4017b4c9f01da83469a9851f95106e396fd25e64
Certificate serial: 019F23686028FD81DC16443C4AE8C5BB1120
Authority key identifier: 40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/9z84m-kebT8cdB-4tut3KLWmbhQ.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34079
IP address blocks: 188.92.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:60:28:fd:81:dc:16:44:3c:4a:e8:c5:bb:11:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4017b4c9f01da83469a9851f95106e396fd25e64
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f73f389be91e6d3f1c741fb8b6eb7728b5a66e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:5e:5b:1d:41:e5:fa:ad:41:09:f1:35:b7:
ec:f6:a2:2c:10:e8:8b:00:ed:9e:62:4e:b4:80:0a:
09:8d:a8:e2:10:3f:ee:5b:75:64:df:fe:89:64:52:
ec:29:44:41:0d:43:cb:44:cc:19:f9:14:f7:17:3c:
ed:53:da:0f:39:69:10:81:af:a8:66:c7:96:32:94:
75:5a:3b:66:ba:58:80:bc:31:4c:4a:10:ad:2d:e5:
6c:3b:eb:6b:a8:b7:f8:4d:47:07:7d:c5:d3:6d:97:
6b:1f:f8:7d:45:0a:01:44:e1:e7:0c:61:90:93:d5:
ad:09:9b:25:60:14:f0:d5:67:0b:43:61:16:5d:1a:
0b:28:6c:14:f1:bf:19:12:03:e9:b9:71:63:7d:ab:
7b:d0:b0:3e:27:45:af:92:f9:13:f0:0a:6c:68:6d:
02:31:fd:d3:9a:3f:cc:c8:a4:dc:8c:e8:c8:f9:42:
84:86:35:ce:6f:9b:d6:44:c7:0c:59:73:b3:cc:ed:
c8:bf:e8:01:cd:bc:97:7e:76:ab:48:b4:b6:df:f2:
d1:9a:4a:fa:1f:17:d9:f5:95:a0:16:fd:ca:25:45:
54:b1:04:28:08:c9:91:4b:58:01:09:b0:ad:9e:cf:
fc:5c:43:a1:c9:f9:68:69:01:b8:34:f6:83:29:bb:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3F:38:9B:E9:1E:6D:3F:1C:74:1F:B8:B6:EB:77:28:B5:A6:6E:14
X509v3 Authority Key Identifier:
keyid:40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/9z84m-kebT8cdB-4tut3KLWmbhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.138.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:14:69:c4:0b:2f:29:e5:22:ab:49:79:da:77:51:04:7d:53:
74:b3:ea:38:f7:43:f8:11:b2:ff:5a:f1:cf:43:07:6a:ab:96:
fa:57:ea:e1:d9:81:b8:21:14:bf:03:bf:17:d2:68:0b:88:bc:
25:30:e2:6c:78:22:19:6c:93:02:91:4e:76:f0:1d:81:f2:12:
95:84:df:5c:53:6d:ee:3b:18:74:22:99:a4:ab:ad:fe:00:c6:
a1:6f:1b:1e:05:b2:93:9c:15:1a:50:f4:23:51:50:ee:e9:61:
fc:25:12:0a:73:87:82:e5:93:29:88:b5:4e:7d:3c:03:4e:14:
93:b0:85:c7:44:5c:75:99:34:5f:fc:a4:9a:bb:5e:1d:6c:15:
e9:de:2d:01:fe:47:ff:7f:df:54:f4:71:e4:98:e3:b9:1e:4b:
e9:c2:55:8b:28:b9:2f:58:da:0b:c2:11:d2:b5:7d:69:cd:cb:
0c:51:ab:5f:1e:34:ef:2f:f1:54:a0:7b:99:fa:84:34:1d:64:
2c:d9:40:34:b6:27:09:84:bd:7d:ca:7c:59:e6:fa:e1:79:37:
75:55:68:11:23:11:90:9c:73:f4:2f:fe:50:42:9a:ee:db:75:
b3:3f:ab:27:42:07:d3:e1:d1:36:fd:d3:bf:1c:5d:61:ef:75:
75:f7:91:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:31:52 2026 by rpki-client