Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/i9mDURz8EqTlcfgiMhYfAWb6ZoA.roa
File: i9mDURz8EqTlcfgiMhYfAWb6ZoA.roa (raw, json)
Hash identifier: TgdBqRNSDqiW0xM+zjsZBzG86+JAoTupCQnI/cIjAoQ=
Subject key identifier: 8B:D9:83:51:1C:FC:12:A4:E5:71:F8:22:32:16:1F:01:66:FA:66:80
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A0680CCB0A4D5291FD7223A941D9358378
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/i9mDURz8EqTlcfgiMhYfAWb6ZoA.roa
Signing time: Thu 03 Sep 2026 16:14:23 +0000
ROA not before: Thu 03 Sep 2026 16:14:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218765
IP address blocks: 186.246.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:0c:cb:0a:4d:52:91:fd:72:23:a9:41:d9:35:83:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Sep 3 16:14:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bd983511cfc12a4e571f82232161f0166fa6680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:62:69:32:00:99:5b:70:c5:d9:49:97:1a:37:
37:76:7a:f3:94:b9:08:0b:72:68:1c:61:c0:cd:3d:
d4:7f:99:e3:e9:2f:77:19:ac:81:2d:f2:6f:ee:11:
e5:20:5b:b7:f0:66:37:52:75:d7:59:05:d1:ee:3a:
26:f6:c2:8d:5f:a6:10:42:c3:a8:4b:22:df:e3:65:
f6:69:0b:3e:6b:60:4b:97:76:01:94:b1:1a:32:0a:
06:66:2c:c6:75:9b:8b:fc:2b:4a:07:04:ee:1b:54:
ef:61:3c:31:63:f9:16:5e:39:65:c4:7f:7e:f3:0f:
75:a2:12:65:ba:b5:8a:5b:29:85:33:db:d3:34:30:
b7:60:41:55:ed:ec:6a:4d:7c:f6:a0:25:4c:1f:78:
5a:c3:05:26:76:35:a6:65:7e:04:fe:b3:3e:30:f1:
41:c0:d2:35:be:10:72:72:72:30:b3:3b:e0:bf:69:
e6:b4:59:cc:bc:3e:6b:70:0b:c1:a4:ab:7d:bf:fb:
c5:f3:94:f1:bb:79:04:e9:19:d8:72:72:73:44:de:
af:61:26:4b:a0:fc:ba:6d:6a:bf:e2:d1:94:65:f3:
ed:75:de:3f:1c:f6:c0:b1:81:aa:5a:36:c2:d1:b7:
c4:89:3b:58:6d:c6:01:2b:07:22:40:b4:09:c2:69:
b3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D9:83:51:1C:FC:12:A4:E5:71:F8:22:32:16:1F:01:66:FA:66:80
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/i9mDURz8EqTlcfgiMhYfAWb6ZoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.246.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:77:d8:e3:5c:e6:7a:a6:10:2f:83:ff:16:55:eb:11:92:84:
11:63:a0:e4:85:60:7f:b8:d7:ec:8d:6d:d9:cb:e9:76:12:70:
6e:db:9f:35:a7:22:8b:b4:75:22:e5:df:81:0b:33:b5:bf:bf:
9f:26:fc:70:ae:8a:7c:ab:2e:a9:cd:5d:cd:66:4e:ca:75:e6:
b6:5d:c7:49:fa:18:aa:89:d7:3b:0f:56:89:0f:66:2f:37:bf:
eb:52:24:9e:c5:17:ae:31:12:3e:e9:53:e7:41:62:88:fe:17:
67:cc:5a:6f:db:f0:bd:2c:e1:3f:73:54:a2:91:d5:fb:34:43:
b0:3f:a0:c6:cf:1f:1a:79:d0:b3:56:ab:86:08:f2:a5:8c:d5:
51:c1:bf:2a:0b:6f:61:0a:46:5e:15:5c:fd:43:8a:9a:af:38:
ea:96:06:14:36:87:9f:1f:01:e3:90:ea:06:05:c6:67:9f:f0:
fe:9e:a2:cc:59:ae:3b:1a:1f:6e:fd:38:fc:8e:06:c7:94:9f:
33:44:ca:39:c5:d0:85:06:4a:f8:8a:2c:31:20:7f:54:25:6e:
db:05:5a:c4:fa:bc:9c:9c:4e:6d:cc:a7:92:16:63:df:aa:fe:
b8:b0:13:f7:e2:0d:57:ba:57:da:fc:6e:0f:10:67:80:0f:a3:
ff:b9:66:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:16:59 2026 by rpki-client