Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/9Vx29ykiSSBbNJQiaJwadr06Mv8.roa
File: 9Vx29ykiSSBbNJQiaJwadr06Mv8.roa (raw, json)
Hash identifier: bsFVo+U/bmQcCnhx4oYXClvSZWF4RL3ernXiUamGRSE=
Subject key identifier: F5:5C:76:F7:29:22:49:20:5B:34:94:22:68:9C:1A:76:BD:3A:32:FF
Certificate issuer: /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial: 01A0F27614D3C3BDA5BEED5D35EC1A5E1A37
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/9Vx29ykiSSBbNJQiaJwadr06Mv8.roa
Signing time: Wed 30 Sep 2026 13:16:59 +0000
ROA not before: Wed 30 Sep 2026 13:16:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12301
IP address blocks: 212.52.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:76:14:d3:c3:bd:a5:be:ed:5d:35:ec:1a:5e:1a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Validity
Not Before: Sep 30 13:16:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f55c76f7292249205b349422689c1a76bd3a32ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:aa:3b:61:3c:bf:2e:0b:29:fa:67:51:56:
ab:3e:e8:ec:df:6c:49:99:2b:8b:1d:1a:72:5c:8f:
0c:a8:de:42:3b:35:54:98:5e:d1:6e:c8:c5:cc:fb:
6a:fb:1f:1b:8d:91:c0:c9:84:06:2a:42:b0:b9:eb:
20:25:6d:73:87:6b:59:39:fb:b7:9a:56:8a:e4:5c:
07:74:22:ef:20:97:f0:36:fe:b2:59:f9:ac:b5:6b:
cb:13:8f:14:1b:27:47:ac:f3:ce:5c:dc:2b:4a:06:
fe:ef:1e:7c:b7:17:38:c1:42:34:16:7f:7c:a6:3d:
5b:c1:8d:57:64:41:1c:04:5c:39:38:53:de:e7:a0:
a2:a7:2c:21:dc:36:5c:45:82:a9:c3:8d:d9:ea:9d:
61:f4:04:a2:64:bd:cb:e3:e7:4c:77:44:ca:63:8b:
65:18:de:aa:85:f8:ef:98:42:6c:bb:3a:ef:67:4d:
57:2b:3f:77:92:c2:bc:36:4e:93:4d:38:bd:78:58:
ed:c7:bc:0f:0f:a7:07:45:d5:37:07:5d:a1:25:91:
36:11:41:e2:b9:8c:ff:5d:29:d8:61:2f:ee:a0:62:
fa:38:19:c1:34:2d:cb:04:a5:99:98:e2:c8:ec:ba:
e4:5a:08:5c:b0:89:93:7e:ff:77:71:78:65:8f:1a:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5C:76:F7:29:22:49:20:5B:34:94:22:68:9C:1A:76:BD:3A:32:FF
X509v3 Authority Key Identifier:
keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/9Vx29ykiSSBbNJQiaJwadr06Mv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.190.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:85:3c:da:63:3d:5a:a2:38:b6:32:45:2d:37:03:91:4f:52:
60:8c:37:d7:76:fd:96:3f:00:77:90:30:dd:93:b9:c9:19:12:
81:e7:cb:1f:45:12:b9:38:4f:6e:ed:f5:d3:2e:48:68:92:1a:
28:83:d0:d4:1c:f1:28:ca:b2:f4:09:c0:6a:07:35:ad:f2:cb:
2e:00:96:92:12:21:b4:92:5a:e4:85:db:b9:46:37:52:f7:b2:
1d:84:2c:93:77:a1:e4:6a:ed:ca:9d:49:ac:de:ea:5e:91:47:
86:06:dd:7f:55:c2:3f:f9:30:66:9f:47:fb:13:b7:f2:03:63:
65:bc:09:d8:68:f8:6f:b0:ed:63:b3:df:89:2c:64:a8:ce:ba:
ca:b7:ff:05:35:ab:5a:d6:4c:cf:e5:75:a0:5f:b7:24:b1:de:
ba:85:7b:c6:0b:9e:3c:3e:d1:ce:d0:2a:81:fe:5b:32:54:27:
85:1f:a9:fc:81:3a:e7:44:e7:f3:12:e5:f2:60:35:d4:13:6c:
a5:71:6f:d5:58:52:f5:10:68:2c:ef:fc:9b:1a:cb:f7:ed:c1:
06:6d:8c:55:ff:52:a7:4a:1e:06:0b:af:fa:ee:3b:18:40:0c:
b2:4f:b1:9f:d2:f1:de:b7:13:2e:cc:36:ab:b5:61:a9:b7:78:
63:44:02:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:26:24 2026 by rpki-client