Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/9MMkNLQaKevQh8NRJg969azor18.roa
File: 9MMkNLQaKevQh8NRJg969azor18.roa (raw, json)
Hash identifier: W1vPZO6ptcclgqpYwOGPJY0QSASWp0D2JpcYbjeXEPY=
Subject key identifier: F4:C3:24:34:B4:1A:29:EB:D0:87:C3:51:26:0F:7A:F5:AC:E8:AF:5F
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 019E43B159FAB2444B556720EF1883C2089E
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/9MMkNLQaKevQh8NRJg969azor18.roa
Signing time: Wed 20 May 2026 04:42:36 +0000
ROA not before: Wed 20 May 2026 04:42:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22884
IP address blocks: 158.173.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 19:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:43:b1:59:fa:b2:44:4b:55:67:20:ef:18:83:c2:08:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: May 20 04:42:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4c32434b41a29ebd087c351260f7af5ace8af5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:18:f7:39:0d:cc:bc:5e:61:d7:ee:d8:ea:
e3:77:64:5f:1c:19:d1:d5:18:06:51:d9:01:c1:16:
0c:7c:46:db:d0:a1:b4:c9:4d:08:27:4d:74:91:15:
d9:65:d8:e2:ec:83:00:25:11:aa:87:0c:3a:5c:0c:
63:91:f5:1b:95:8b:04:64:4b:91:f8:37:0c:a4:67:
50:46:69:02:a7:8e:45:f4:16:74:55:ae:3d:0f:f4:
a3:35:ee:07:f1:d7:52:d6:03:8c:68:be:ef:50:d6:
40:8d:56:17:b7:27:61:eb:e9:7a:a8:c7:8f:eb:50:
67:d8:52:bf:f5:89:8f:fc:58:10:f2:c5:9b:9a:e8:
6c:ef:18:4f:47:ad:dc:fe:10:55:d7:d2:0c:64:b3:
e0:e7:2f:c5:cb:26:6e:76:4b:5b:c3:e7:d9:7e:4f:
f9:a5:3d:37:b4:0e:c4:7b:e5:25:29:80:2d:de:5f:
d7:fc:0a:93:0d:3b:45:9d:d5:9a:5b:cd:54:1d:3f:
14:91:73:03:c5:12:86:e6:5c:e2:3c:65:b7:f5:4b:
9c:18:0d:d4:82:9d:eb:69:bd:cc:bd:25:3e:11:7a:
e4:30:79:9b:75:fd:c6:38:69:d6:7e:f5:d7:bc:58:
85:a2:b7:c5:b8:2e:0c:79:52:50:da:29:74:78:7b:
a1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C3:24:34:B4:1A:29:EB:D0:87:C3:51:26:0F:7A:F5:AC:E8:AF:5F
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/9MMkNLQaKevQh8NRJg969azor18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.105.0/24
Signature Algorithm: sha256WithRSAEncryption
84:5c:ea:7d:66:4c:97:ed:be:30:22:d1:7a:a7:a2:f1:82:36:
fc:c3:80:f0:a9:8b:8e:e6:f1:b7:0c:ca:46:f6:ee:b6:38:b7:
7a:af:d6:8c:f7:3d:6f:14:cc:39:c3:4b:a4:d9:57:8d:34:ca:
a1:a5:2d:1e:16:12:80:79:c5:fc:37:fa:60:29:d6:9e:fc:82:
9d:b8:24:5f:03:90:46:5a:2e:a0:c6:b8:7d:e6:e0:19:7f:2d:
00:59:da:65:55:6e:b0:d1:ac:9c:af:79:fa:75:bd:4d:48:60:
8f:1e:3b:c3:a8:c8:06:65:2e:01:51:7f:dc:1d:ce:61:ad:db:
1c:38:c4:ad:12:b5:e3:55:81:67:73:55:99:50:cb:0f:73:8f:
bc:13:fc:63:f6:5a:69:28:b3:65:7f:a9:6e:4d:e1:3e:91:05:
9c:54:a6:4d:05:c0:67:2d:89:a7:2a:5e:be:3a:f4:cf:ac:ea:
e8:67:d5:9b:12:88:fa:b1:33:b1:a3:b2:db:21:32:56:4d:2c:
48:65:9c:b8:d2:cc:e4:10:a2:50:c2:a3:34:bc:ee:46:f6:ef:
7d:f3:e6:af:37:18:aa:ee:83:87:36:75:8f:53:3b:f6:1b:5e:
14:fe:1d:7c:fe:b6:8c:51:5f:65:87:36:26:e5:4a:91:fc:5c:
14:8d:79:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 05:43:11 2026 by rpki-client