Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/n1Q1cgW0X9OV5LSgftaI_FlyK4Y.roa
File: n1Q1cgW0X9OV5LSgftaI_FlyK4Y.roa (raw, json)
Hash identifier: 6h9fclPG/rsrAtgt1k8LVscNVfrkJ+2xLM+cUHLONGs=
Subject key identifier: 9F:54:35:72:05:B4:5F:D3:95:E4:B4:A0:7E:D6:88:FC:59:72:2B:86
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019DB5A6487DB3960615D70C755BF6294BF3
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/n1Q1cgW0X9OV5LSgftaI_FlyK4Y.roa
Signing time: Wed 22 Apr 2026 14:44:26 +0000
ROA not before: Wed 22 Apr 2026 14:44:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209165
IP address blocks: 138.226.235.0/24 maxlen: 24
216.163.176.0/24 maxlen: 24
2a14:a087:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:a6:48:7d:b3:96:06:15:d7:0c:75:5b:f6:29:4b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Apr 22 14:44:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f54357205b45fd395e4b4a07ed688fc59722b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:e4:ca:d0:33:b0:94:93:42:3e:7b:ec:79:
43:11:10:6e:a8:db:97:f5:58:a7:00:b0:86:37:d3:
68:f6:08:20:98:a1:25:ce:f0:4c:50:07:af:85:83:
79:7b:97:1b:29:2a:e9:19:85:68:ce:fd:c4:e7:55:
55:64:e5:66:03:d3:11:f3:09:3f:7e:81:9b:e3:ed:
29:41:2b:0b:28:cd:d9:6e:4b:ac:0c:44:d4:88:d3:
dd:2c:38:7a:9a:7e:34:0e:d3:0b:22:0d:14:04:f3:
67:04:00:38:43:b8:ce:64:0c:4f:d9:70:c1:80:2b:
8c:63:bc:2a:5d:c0:ae:8e:73:27:3d:42:77:14:1b:
ed:29:95:1a:63:91:20:2b:78:bc:2f:9a:96:96:07:
0e:a4:94:64:82:a2:2c:e3:9d:b4:61:7b:bf:ad:9a:
be:3f:93:53:2e:f1:64:d3:39:fa:af:1d:47:f3:b9:
5f:8a:7c:12:cd:51:e1:7e:db:e1:fa:1e:0e:2e:84:
fb:ba:39:3e:0a:bd:4d:fa:d9:c0:a7:f7:67:5c:74:
6b:d4:cb:4d:76:b4:9a:00:64:79:3b:14:86:d9:c5:
11:39:80:85:7f:c5:93:1f:98:fc:8b:42:7e:ee:d3:
03:3f:44:22:81:79:ee:fb:75:51:28:1e:ba:2c:8c:
f7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:54:35:72:05:B4:5F:D3:95:E4:B4:A0:7E:D6:88:FC:59:72:2B:86
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/n1Q1cgW0X9OV5LSgftaI_FlyK4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.226.235.0/24
216.163.176.0/24
IPv6:
2a14:a087:6::/48
Signature Algorithm: sha256WithRSAEncryption
2b:83:d3:cb:f8:a5:45:a2:48:ed:1e:d7:74:d4:6f:c3:d7:86:
1c:77:68:ea:d4:75:85:b2:b4:35:50:41:17:7a:6d:f5:8a:8c:
04:29:33:e4:b6:d9:86:79:5d:b2:9e:81:78:7e:88:3d:dc:f0:
bf:85:d2:28:d7:54:9f:1a:61:dc:b0:29:08:16:5b:10:97:6b:
cd:80:69:da:d7:32:8c:64:c2:53:81:b6:30:da:b0:91:69:3e:
4e:e5:df:0d:d9:61:21:c9:bc:da:e8:96:b0:02:45:7e:2f:be:
af:50:df:cb:4b:66:86:92:ea:31:92:b0:d5:ec:30:6a:02:18:
ab:b8:ff:ec:a0:bf:ae:cd:81:2c:4f:69:f7:ce:a6:1a:9f:2f:
b5:47:d3:b3:09:40:31:12:86:87:da:11:fb:e5:b8:59:24:78:
df:d0:14:ab:23:c8:77:fd:c0:c0:bd:9c:74:88:85:ee:59:7f:
e2:22:24:d1:d2:57:64:1b:3b:d9:f9:5e:04:7d:30:c7:41:ba:
13:2f:a5:bc:df:39:1d:9a:7c:e3:0e:80:21:9e:f4:d9:c0:1d:
33:05:08:5a:0f:ed:59:9b:79:e5:eb:44:0f:57:1d:3a:69:05:
84:85:7d:9e:93:8a:fa:50:53:d5:bc:f9:89:d7:1c:f9:8f:8c:
ab:f5:43:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:33:34 2026 by rpki-client