Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Y9g5RafdGF3cNhPA6x2FBbgWPQ4.roa
File: Y9g5RafdGF3cNhPA6x2FBbgWPQ4.roa (raw, json)
Hash identifier: 8GiMf+v1riQWRCrUxNvQcQr4xkt3wgt3m4cw6E13FaY=
Subject key identifier: 63:D8:39:45:A7:DD:18:5D:DC:36:13:C0:EB:1D:85:05:B8:16:3D:0E
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 01A07B349BA4A984C4D1AE1768AB0983308B
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Y9g5RafdGF3cNhPA6x2FBbgWPQ4.roa
Signing time: Mon 07 Sep 2026 09:30:40 +0000
ROA not before: Mon 07 Sep 2026 09:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30088
IP address blocks: 93.177.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:34:9b:a4:a9:84:c4:d1:ae:17:68:ab:09:83:30:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Sep 7 09:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63d83945a7dd185ddc3613c0eb1d8505b8163d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:2e:e2:a3:c7:c6:b7:7c:41:63:a3:88:71:
bd:b5:06:01:4b:52:40:ed:98:62:58:a8:05:ef:b1:
93:77:63:58:9a:ae:08:81:e6:c0:36:ae:2b:e1:9d:
7b:2f:05:77:11:f7:53:46:70:75:e3:cb:87:65:4e:
d4:f6:2e:ac:c3:e7:4f:68:7f:f4:53:77:a7:e3:83:
d5:a3:b6:94:3b:03:48:18:14:af:13:6f:1a:9e:54:
fb:7e:8b:f7:3b:f1:cb:9f:39:f7:1c:56:26:5f:69:
92:74:39:87:f5:78:32:04:c1:6a:16:3e:6f:46:92:
c5:18:f5:38:f3:fd:b3:34:70:1e:5b:0a:3b:58:ac:
1d:0b:93:30:96:f2:61:1e:51:5f:ed:1a:32:0c:cb:
ad:82:77:c1:6a:a0:b4:9f:a9:61:00:ae:90:f9:49:
e7:3c:f6:cf:6d:cf:c5:66:0f:f1:d8:ad:11:34:4a:
68:fe:27:ec:c6:a4:fc:06:f9:b5:d8:1a:cd:89:da:
5b:49:b2:6e:90:71:dc:b8:fc:94:04:2d:dd:82:49:
59:dc:05:1d:18:69:b4:96:78:d7:7b:8c:f7:c0:d8:
85:5c:82:f1:dd:57:41:a6:1d:02:c2:e0:e3:eb:cc:
aa:71:24:5f:24:e5:e5:72:19:d9:73:f6:3a:c5:60:
b0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D8:39:45:A7:DD:18:5D:DC:36:13:C0:EB:1D:85:05:B8:16:3D:0E
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Y9g5RafdGF3cNhPA6x2FBbgWPQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.115.0/24
Signature Algorithm: sha256WithRSAEncryption
50:6a:dd:2c:4e:2e:41:e6:e8:59:fd:14:37:e4:13:be:c8:7c:
8f:73:c3:44:2a:57:fa:c7:57:6c:3d:31:b2:8e:e9:e2:ba:ef:
14:d8:eb:f5:0c:13:5a:b6:48:e5:19:85:d7:80:9b:d6:af:1d:
60:aa:56:b7:73:26:05:71:fb:52:77:b6:2a:91:44:74:0b:34:
64:9a:c4:85:58:39:b7:84:cb:6d:79:06:64:af:8b:fb:43:de:
2b:71:f7:07:2b:e3:d4:c8:e4:62:c5:5f:6b:1d:49:8f:ad:d3:
e3:23:19:bc:74:ed:7f:81:4d:22:6b:49:0d:cb:e9:1a:17:ff:
71:a6:60:76:f3:77:f4:27:af:85:27:c5:79:b5:cc:26:40:fc:
62:a0:4a:da:8c:b1:47:47:ca:92:22:4b:30:f4:c9:ca:72:ba:
30:e8:0f:ff:14:51:c2:76:6d:93:c0:30:b5:e5:9a:69:5f:c0:
fb:75:2e:c1:3a:f4:cd:9f:12:25:aa:c2:be:fb:a0:2d:d1:94:
02:df:03:21:9c:ac:8a:45:82:b7:94:04:b7:fa:78:c6:4e:38:
d3:57:b5:75:20:fa:2a:3b:79:a0:2a:ab:80:07:76:6c:aa:29:
58:21:16:c6:f5:21:11:52:fc:c6:ee:18:f1:3a:30:cd:0b:7b:
91:27:6b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 19:46:50 2026 by rpki-client