Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/Rq-RI83O4_PdfBn7CYHNmkE60lw.roa
File: Rq-RI83O4_PdfBn7CYHNmkE60lw.roa (raw, json)
Hash identifier: no+jkojqXc1FBJy9kef3LkiFHcbkJaxjyVO/IuXvgDE=
Subject key identifier: 46:AF:91:23:CD:CE:E3:F3:DD:7C:19:FB:09:81:CD:9A:41:3A:D2:5C
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01A13EE94CAE9886D905F11AC9AD66DFEDC9
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/Rq-RI83O4_PdfBn7CYHNmkE60lw.roa
Signing time: Thu 15 Oct 2026 09:33:59 +0000
ROA not before: Thu 15 Oct 2026 09:33:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20055
IP address blocks: 9.249.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:e9:4c:ae:98:86:d9:05:f1:1a:c9:ad:66:df:ed:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Oct 15 09:33:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46af9123cdcee3f3dd7c19fb0981cd9a413ad25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:07:74:fd:4e:49:85:57:90:b7:b0:7b:a7:ae:
52:48:52:8c:e6:7f:db:12:33:9a:90:70:30:d7:21:
cc:a8:03:8a:02:d1:8d:db:8c:2e:80:26:5c:29:89:
59:d1:43:ba:0f:85:b2:70:a8:e4:d2:93:8a:23:22:
25:6f:be:ad:16:85:55:6a:e7:ac:0a:c9:7b:f2:98:
2e:3a:19:81:99:c5:f3:95:ca:a9:fa:6f:31:0f:3d:
ea:ed:5a:9c:b6:1a:8f:bd:d8:ce:f0:da:d6:6a:4d:
d6:b4:ca:76:d8:9b:35:f8:18:51:0e:40:5c:e8:89:
16:3b:c1:ae:3a:00:eb:a8:ac:f1:40:c3:c5:19:04:
cb:0e:24:a1:b8:2a:a9:72:90:01:1c:97:3b:c9:94:
13:51:77:a6:eb:03:34:56:e9:81:75:e9:48:80:cf:
a5:01:ee:ec:79:5c:eb:1f:8e:24:69:d5:a5:12:95:
7d:03:52:a5:2d:e2:dc:19:cd:d0:26:cf:2d:2b:4b:
88:1a:b8:f8:99:38:63:b3:d2:ec:48:fe:08:a8:45:
43:d6:43:64:fe:6d:04:30:7c:b2:46:49:b1:d5:bf:
7e:a3:53:79:8f:f2:e5:ab:f8:fe:07:0a:87:21:55:
1c:fd:58:ef:51:f5:72:e2:8d:de:f6:04:30:81:ba:
25:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AF:91:23:CD:CE:E3:F3:DD:7C:19:FB:09:81:CD:9A:41:3A:D2:5C
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/Rq-RI83O4_PdfBn7CYHNmkE60lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.249.160.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:19:d7:1f:5c:28:bd:ab:7b:6e:4c:ba:b7:8f:dd:1f:a9:a3:
a8:b1:30:0f:a3:1c:30:48:31:50:df:1f:b8:fb:b8:58:a8:d0:
2c:30:f8:1f:9e:d7:b3:97:e0:35:b3:6a:ae:d5:b9:0c:ef:72:
f8:61:0b:9f:56:b5:16:03:65:f0:80:c2:e2:1e:95:ff:4a:84:
94:ce:f3:5b:b9:e0:04:06:e0:17:c3:df:f3:02:d7:7f:21:e3:
97:f8:3e:9f:e9:d2:b1:1e:4c:57:02:2c:81:e3:ec:ff:14:f0:
c5:fb:65:75:ef:db:ee:86:9c:f1:ab:1f:b8:d8:a2:4f:d1:66:
06:8c:5b:e7:d9:73:9f:15:b7:39:7b:4d:4c:c1:40:e8:92:82:
68:0d:35:42:ff:1e:35:8a:dc:b9:6c:6a:57:b1:88:60:f9:54:
0c:87:e1:ac:82:7e:13:96:18:aa:f5:81:f1:38:91:a8:d8:2f:
ba:0a:25:d5:42:22:85:9d:a2:05:dd:32:11:c4:31:3a:97:97:
1b:58:fb:8f:ea:ef:5c:cf:25:8e:1e:c1:8c:33:c2:9d:7d:15:
32:e4:75:0a:9c:27:6c:fc:4b:ab:95:9e:67:44:31:16:d4:a1:
5c:e5:be:b9:f0:6c:a6:fc:03:a3:98:44:c7:8e:c4:ff:a6:7b:
53:92:72:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:30:52 2026 by rpki-client