Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/9rTu4PcQFiCP_VDRYFNI1sC8EVA.roa
File: 9rTu4PcQFiCP_VDRYFNI1sC8EVA.roa (raw, json)
Hash identifier: LfIKzDfX2NY8Nh4yHctuFIsaaZBhsdsuRe9sJHF3gj4=
Subject key identifier: F6:B4:EE:E0:F7:10:16:20:8F:FD:50:D1:60:53:48:D6:C0:BC:11:50
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019EB14DE1626FF375EBE4243E6276B37C97
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/9rTu4PcQFiCP_VDRYFNI1sC8EVA.roa
Signing time: Wed 10 Jun 2026 11:32:11 +0000
ROA not before: Wed 10 Jun 2026 11:32:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 212.21.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:4d:e1:62:6f:f3:75:eb:e4:24:3e:62:76:b3:7c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jun 10 11:32:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6b4eee0f71016208ffd50d1605348d6c0bc1150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:85:2f:8e:a9:f5:f4:d7:2a:f0:51:cb:5f:
17:2b:df:46:b2:09:16:15:ce:68:a5:ba:89:48:0a:
6a:15:aa:e2:b6:85:96:8e:26:2c:f5:d5:fc:c6:79:
0d:57:3d:b7:30:38:24:2f:0d:88:e8:53:2e:d2:2f:
37:a3:dd:96:a8:5c:9f:cc:8d:8d:ba:1f:1b:66:2a:
a8:d9:7a:f0:79:6f:46:a3:9f:bf:37:88:91:99:0d:
97:96:20:24:ec:74:dd:60:27:0c:a8:b5:39:57:15:
76:db:d5:6d:27:63:7f:0b:cd:e2:7f:ca:3b:22:ef:
d8:8a:11:ea:50:68:ca:e0:8d:a8:2d:eb:17:5b:48:
3e:06:3c:4d:f3:ac:49:bf:e8:c5:d1:ae:fd:ac:7b:
b8:46:67:dd:3e:85:f2:35:c6:00:34:b7:65:d2:df:
fe:6e:09:2c:4e:fa:6a:34:f2:c9:45:98:49:ff:ec:
39:a4:46:ad:f0:e8:51:7d:af:6b:13:92:22:74:b8:
2a:c6:2b:69:99:0c:02:48:5c:0b:57:c5:fe:8d:df:
c0:2c:e2:78:25:69:fe:6b:71:69:50:a3:dd:24:15:
1f:8b:e2:36:f9:37:8b:16:d6:c9:5c:40:00:bd:00:
d4:3a:45:4e:c4:21:cc:82:e3:b0:22:45:70:3b:0d:
1a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B4:EE:E0:F7:10:16:20:8F:FD:50:D1:60:53:48:D6:C0:BC:11:50
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/9rTu4PcQFiCP_VDRYFNI1sC8EVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.21.100.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d9:7c:f1:1b:56:c9:19:fd:ee:40:32:fd:1b:04:e3:ca:a4:
60:58:ba:6e:ad:8f:9f:9a:72:69:06:66:68:12:60:91:e5:cb:
ff:aa:26:2a:b8:eb:5b:33:50:83:0c:16:1b:92:00:8c:0f:cc:
b2:27:d5:9c:a4:7e:05:06:c5:0d:37:38:8b:88:30:38:f4:e2:
db:10:32:dc:00:93:8d:c4:a0:e1:f5:3a:bd:c9:1a:c5:f0:90:
a0:d6:45:61:42:43:d9:5d:2f:0c:49:47:dd:3b:5f:1c:c1:30:
10:c5:45:fb:2c:c5:27:1b:2e:dd:ac:f1:b2:8f:00:3a:36:00:
27:e2:78:29:0a:89:e8:7c:b1:7d:fb:68:d7:c8:c4:00:07:c1:
58:4f:66:af:ea:28:e1:1f:3f:0e:7a:96:ba:16:47:e9:fa:34:
cc:fc:30:87:c2:9d:8e:53:0c:4a:f1:95:72:d2:91:27:8b:cb:
96:52:4f:4d:7e:61:c0:10:7a:13:a5:c9:ba:a9:f6:05:e6:dd:
61:09:ec:f1:01:b8:d5:11:33:63:4a:d5:68:01:f1:af:bd:d5:
37:97:e0:10:3c:a0:c3:42:ed:ff:ac:e7:00:4a:a8:06:02:bb:
1e:3f:5b:cd:aa:7f:72:8a:2a:86:61:17:07:86:fa:81:ef:0d:
4d:b9:e5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:38:21 2026 by rpki-client