Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/92a332-867f-4747-acd1-2e7fa439dd0e/1/9ydCUZNZb6Y72_4xJUUkpigdsfg.roa
File: 9ydCUZNZb6Y72_4xJUUkpigdsfg.roa (raw, json)
Hash identifier: tNEVg7yexCVdRZwrAYpjqrWbF464t3o/PQsppj5fUi8=
Subject key identifier: F7:27:42:51:93:59:6F:A6:3B:DB:FE:31:25:45:24:A6:28:1D:B1:F8
Certificate issuer: /CN=e34d78e1999bba0aa2ce6997f521468594001ed5
Certificate serial: 01A08F8303465A0EEA8940807E6CAC3CE67A
Authority key identifier: E3:4D:78:E1:99:9B:BA:0A:A2:CE:69:97:F5:21:46:85:94:00:1E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40144ZmbugqizmmX9SFGhZQAHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/92a332-867f-4747-acd1-2e7fa439dd0e/1/9ydCUZNZb6Y72_4xJUUkpigdsfg.roa
Signing time: Fri 11 Sep 2026 08:08:43 +0000
ROA not before: Fri 11 Sep 2026 08:08:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215533
IP address blocks: 217.70.3.0/24 maxlen: 24
2a14:40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/92a332-867f-4747-acd1-2e7fa439dd0e/1/40144ZmbugqizmmX9SFGhZQAHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/92a332-867f-4747-acd1-2e7fa439dd0e/1/40144ZmbugqizmmX9SFGhZQAHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/40144ZmbugqizmmX9SFGhZQAHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:83:03:46:5a:0e:ea:89:40:80:7e:6c:ac:3c:e6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e34d78e1999bba0aa2ce6997f521468594001ed5
Validity
Not Before: Sep 11 08:08:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f727425193596fa63bdbfe31254524a6281db1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e1:5e:43:fc:be:7b:17:39:f3:e0:ab:b1:56:
8d:43:76:c6:3c:16:17:c2:06:0e:fa:e7:63:15:5e:
10:87:ee:1a:da:82:1d:c0:c4:6d:a0:8d:54:c5:76:
f3:24:43:bd:a0:26:d8:3c:5c:5c:e2:95:9f:23:c5:
94:47:83:a3:d4:cb:1a:3c:09:71:1f:eb:4b:50:29:
f9:de:54:f6:c5:4e:a2:8c:18:b5:ae:7a:c2:63:a8:
0a:85:4b:41:c9:44:31:d5:73:e5:12:a1:69:ae:f4:
ee:c4:37:ed:ce:4a:97:52:a9:31:9e:d5:a0:6f:67:
be:af:a1:0a:cb:9e:a5:b2:fe:21:e6:ff:34:b9:19:
10:60:ad:74:eb:7f:cf:cc:7c:c9:b6:6e:93:4c:c1:
49:bc:6c:dd:55:2a:f1:27:e2:4f:1a:da:04:cb:05:
05:5e:45:6f:97:7a:70:9d:50:c7:6c:19:d5:33:88:
a7:06:1b:fe:09:d2:e9:ab:76:2c:76:97:ff:1b:5a:
99:19:d1:50:83:63:9f:2d:31:34:1c:68:42:9e:9a:
0a:ae:81:91:7c:44:91:fd:92:f9:0f:83:2f:cf:ee:
f6:66:bb:c7:eb:52:90:3b:5c:a8:d8:d3:ea:a4:59:
15:f6:d2:77:34:bb:3f:75:ed:16:ac:eb:1f:43:a8:
8c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:27:42:51:93:59:6F:A6:3B:DB:FE:31:25:45:24:A6:28:1D:B1:F8
X509v3 Authority Key Identifier:
keyid:E3:4D:78:E1:99:9B:BA:0A:A2:CE:69:97:F5:21:46:85:94:00:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40144ZmbugqizmmX9SFGhZQAHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/92a332-867f-4747-acd1-2e7fa439dd0e/1/9ydCUZNZb6Y72_4xJUUkpigdsfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/92a332-867f-4747-acd1-2e7fa439dd0e/1/40144ZmbugqizmmX9SFGhZQAHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.70.3.0/24
IPv6:
2a14:40::/29
Signature Algorithm: sha256WithRSAEncryption
76:b5:25:ac:6b:74:2f:25:25:67:ad:22:97:8d:3d:ff:c1:5c:
14:f2:26:c9:fa:e3:2c:1f:70:d7:4c:9e:c4:8b:ce:07:92:ed:
47:06:ac:94:1d:b3:41:4d:01:a1:98:db:bc:2d:7a:a6:6e:56:
5b:f0:52:a2:36:7a:15:5c:ed:af:99:e6:3f:7e:11:28:f1:69:
d3:15:8e:ad:cf:d8:d3:39:3a:44:2a:3b:ee:1a:4e:f8:73:d8:
4c:d8:4f:55:b4:dd:96:12:39:51:98:f4:28:16:67:ad:2f:fb:
41:e7:02:02:b6:5f:70:89:fd:bf:d8:bb:5b:f6:dd:0b:44:62:
1e:d7:5b:0b:c8:ef:67:9b:e5:0a:fb:38:7b:70:1d:45:55:69:
26:d4:c2:33:be:e7:d7:81:ce:b8:8a:65:10:9d:fb:a8:3e:5e:
25:69:51:22:0b:07:6c:b6:97:7c:a7:51:af:94:3f:ff:93:9d:
86:d5:2e:46:30:4a:39:97:da:db:d1:f8:0a:4c:d0:92:02:c9:
3e:bd:0a:10:35:15:88:10:7d:49:03:de:23:be:78:bf:0c:a3:
5b:d4:e2:de:82:ab:0b:93:a1:fc:ce:03:6e:25:0e:02:19:87:
a4:da:88:0a:8e:fc:01:e4:62:79:66:a9:df:24:c9:78:b2:c4:
91:32:ed:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:33:37 2026 by rpki-client