Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/B9XWePYQjczzVhsbHCKhs1iPZEw.roa
File: B9XWePYQjczzVhsbHCKhs1iPZEw.roa (raw, json)
Hash identifier: 7+H31xuyxXE8kpgGxD+OA71WfdqXR7K5DI+2X9LHglM=
Subject key identifier: 07:D5:D6:78:F6:10:8D:CC:F3:56:1B:1B:1C:22:A1:B3:58:8F:64:4C
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 019DDCE9488FE210AAA2BE2FD7F555446374
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/B9XWePYQjczzVhsbHCKhs1iPZEw.roa
Signing time: Thu 30 Apr 2026 05:42:49 +0000
ROA not before: Thu 30 Apr 2026 05:42:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49372
IP address blocks: 104.160.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:e9:48:8f:e2:10:aa:a2:be:2f:d7:f5:55:44:63:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Apr 30 05:42:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07d5d678f6108dccf3561b1b1c22a1b3588f644c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:56:7e:e3:29:6e:25:f7:aa:d2:04:66:7a:
0a:16:3b:76:4c:6f:4b:1b:d7:0e:da:fd:28:7e:a6:
30:fd:3b:db:53:b6:fc:62:10:6b:f4:40:4e:b8:52:
86:f9:c5:65:b6:b7:65:6e:89:e9:06:d7:12:b5:f1:
0a:f1:82:d5:ea:5c:a3:d1:8b:f3:0d:94:19:df:77:
19:17:1c:67:d5:bd:49:45:ce:a1:27:72:09:eb:23:
4c:01:4d:ba:e9:0e:46:a1:19:2b:1a:0f:85:9f:35:
c8:78:e9:04:14:55:2a:c4:d4:43:18:ba:11:f9:36:
f3:7b:0d:ac:c5:eb:14:29:af:7d:b0:b3:d4:69:bc:
96:ed:9b:23:6a:63:05:1b:75:57:0a:0d:e5:e2:59:
85:e3:01:b9:38:46:e3:ac:2e:08:9f:ba:ab:80:93:
e8:02:c8:47:b2:0f:bb:75:53:20:d7:17:ec:4d:b9:
4f:93:86:50:9b:8b:34:4b:81:76:ce:4c:e3:c9:8a:
e4:0a:a3:eb:62:ec:81:75:df:b2:e1:f8:f8:c0:c9:
f5:b5:5c:c3:be:76:0c:75:23:bf:5d:49:6f:1e:ca:
83:b4:f9:53:b4:8b:cd:3b:35:af:2d:c5:0b:92:ff:
48:9f:01:8d:1b:02:88:5f:f6:19:f8:ae:9b:71:f3:
e6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D5:D6:78:F6:10:8D:CC:F3:56:1B:1B:1C:22:A1:B3:58:8F:64:4C
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/B9XWePYQjczzVhsbHCKhs1iPZEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.160.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:85:6c:9f:90:ef:ee:b8:85:44:1a:17:64:81:29:c0:1b:d0:
cd:85:24:77:24:cd:67:31:ac:f7:95:37:32:7d:fd:93:6d:32:
c2:61:0f:9f:52:0a:32:ce:39:19:76:c3:ea:f1:e5:12:b9:02:
2f:67:fa:9b:fe:05:3b:05:e5:cd:04:43:0c:15:c2:76:b7:f6:
b4:3d:ef:20:d4:94:e4:4f:17:4f:ac:4e:c4:3b:74:a8:8d:3c:
2c:a7:eb:cf:22:3b:a8:5a:7a:b5:10:c2:c4:32:e4:45:c7:e6:
7d:c2:1c:9e:4f:b5:b6:cc:43:c2:68:4a:f7:96:d4:76:f3:27:
d8:58:9e:52:3a:c8:ef:e7:8b:53:3a:78:18:c5:93:ee:cb:35:
e7:30:dc:3a:ff:93:ad:2a:23:9b:dd:13:07:83:70:72:cb:2b:
94:af:a5:7b:2d:b4:51:5f:2b:3f:f3:1f:2f:7a:6f:89:61:c0:
27:17:15:a9:eb:89:12:89:4f:7a:12:a3:a5:88:a2:0f:2f:7e:
e1:f8:6c:8b:0b:91:f2:36:c0:96:37:26:72:2a:5d:e9:83:a1:
09:de:f0:40:64:c3:3c:f6:99:23:2d:12:0f:9b:ae:d4:8e:12:
9a:91:b7:62:2f:d1:69:c6:56:3a:ea:ac:ee:36:ff:1d:26:ad:
85:de:e3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 23:43:15 2026 by rpki-client