Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MQ4J9GJzZBhogbeO0mlVqXLTB3M.roa
File: MQ4J9GJzZBhogbeO0mlVqXLTB3M.roa (raw, json)
Hash identifier: gjxgOnUVCGJmqlaUEBYJ48zEtRIKf2UhoAfVvr8TJZM=
Subject key identifier: 31:0E:09:F4:62:73:64:18:68:81:B7:8E:D2:69:55:A9:72:D3:07:73
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0D7436CAEC3373F7A51171A44343E5D18
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MQ4J9GJzZBhogbeO0mlVqXLTB3M.roa
Signing time: Fri 25 Sep 2026 06:31:55 +0000
ROA not before: Fri 25 Sep 2026 06:31:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219284
IP address blocks: 9.247.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:43:6c:ae:c3:37:3f:7a:51:17:1a:44:34:3e:5d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 25 06:31:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=310e09f4627364186881b78ed26955a972d30773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:9d:05:39:84:95:8f:13:f4:c7:16:67:f7:
a2:6a:c0:9d:c2:1b:41:19:8e:05:78:79:7f:89:cb:
2d:6f:ce:25:a1:67:f4:cb:95:89:af:a3:55:5d:a7:
c2:c0:39:87:b7:3e:3d:5b:eb:33:ae:b3:38:68:8f:
fa:c7:36:10:0f:7c:fe:db:c4:ce:93:b2:e8:07:99:
ed:83:0f:8b:91:29:44:db:12:50:27:4e:86:d1:00:
30:2f:cb:1b:b5:c6:15:5e:c6:e8:89:d7:2f:c6:6a:
ad:0e:91:3b:80:ff:7f:2a:43:bd:d4:df:f0:30:69:
95:d6:00:18:a5:aa:2e:ab:3a:b6:6f:69:fa:c4:00:
71:a5:aa:62:f5:df:1b:e3:aa:27:0c:4d:7c:30:74:
80:2e:08:60:04:f4:92:c7:75:c7:88:31:e4:61:42:
8a:bf:f3:df:de:57:4a:b2:1c:06:8f:4d:f2:01:09:
2d:66:a6:cb:e5:ba:68:06:35:49:1f:a1:e0:a7:23:
a5:94:aa:09:e0:f5:00:72:70:0d:82:09:4a:76:d3:
88:f3:87:fc:cb:06:ab:5f:5f:39:5b:f3:31:8c:2d:
67:f0:40:2b:2c:52:3e:0a:d6:d4:c9:fd:6b:1b:b0:
eb:f3:5d:13:cf:5f:3d:a5:97:61:11:23:b2:52:e6:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0E:09:F4:62:73:64:18:68:81:B7:8E:D2:69:55:A9:72:D3:07:73
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MQ4J9GJzZBhogbeO0mlVqXLTB3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.23.0/24
Signature Algorithm: sha256WithRSAEncryption
66:fb:d5:a1:82:9a:50:5c:3b:10:a7:58:eb:7a:42:88:5e:5b:
53:e7:75:cc:fe:dd:56:0a:8e:83:b5:6a:c0:e0:86:73:c0:e3:
3d:b0:80:55:b7:34:c6:01:27:d6:1e:21:55:a9:46:2a:b3:8b:
76:6f:47:84:23:96:e0:4a:27:06:0d:95:82:85:1c:95:51:10:
8a:03:dc:ce:19:f5:39:4b:54:e3:f6:7b:ff:1b:9a:6a:83:26:
c8:5c:ab:23:04:99:99:0d:e3:fb:5f:04:7a:ee:90:23:8a:20:
56:4f:ff:34:47:cd:c1:74:b6:e4:ba:ee:d8:89:33:d0:e9:8f:
b7:6f:0b:0b:ee:20:96:aa:d0:19:13:07:ad:4f:7f:bc:2a:84:
00:96:49:b6:4a:13:f4:ae:cc:db:1b:dc:78:fe:4e:34:81:a4:
70:60:d8:6d:0f:be:c0:e4:a1:5e:d5:9d:67:3a:fc:b7:20:0f:
56:25:b5:bf:a7:00:06:f5:c0:23:6d:aa:61:43:41:d9:13:18:
da:29:52:8d:db:d4:dd:20:fd:a7:33:70:ab:d2:1b:3b:0b:ed:
aa:d7:5f:e2:25:62:96:1e:9c:81:42:94:aa:b1:e5:bf:c7:39:
a9:f9:19:cf:63:11:7e:6e:84:84:e4:18:a5:d9:d1:1b:4c:10:
f5:f6:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:16:35 2026 by rpki-client