Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/_9DDX6WKNqS0U0FDUYxXSX9hkD0.roa
File: _9DDX6WKNqS0U0FDUYxXSX9hkD0.roa (raw, json)
Hash identifier: d5NycVVgglVXxsyA3VPNn2ddBgaNxuvJJjeMaRJ5HLc=
Subject key identifier: FF:D0:C3:5F:A5:8A:36:A4:B4:53:41:43:51:8C:57:49:7F:61:90:3D
Certificate issuer: /CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Certificate serial: 019E55A7219B43D378D726631BADD6DE56BA
Authority key identifier: 46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/_9DDX6WKNqS0U0FDUYxXSX9hkD0.roa
Signing time: Sat 23 May 2026 16:24:36 +0000
ROA not before: Sat 23 May 2026 16:24:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215430
IP address blocks: 194.113.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:55:a7:21:9b:43:d3:78:d7:26:63:1b:ad:d6:de:56:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Validity
Not Before: May 23 16:24:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffd0c35fa58a36a4b4534143518c57497f61903d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:3c:78:3e:20:86:b3:d5:a4:57:66:4a:c3:
63:f6:1f:49:9f:5b:37:c6:a1:90:4a:5c:ff:db:67:
67:12:a0:7e:69:b8:e1:21:79:11:81:75:24:d9:fa:
c7:b4:08:77:e4:d8:54:ee:38:14:45:c3:ec:46:d6:
16:8a:5e:de:16:c7:11:f1:50:69:2f:e7:ee:e5:2e:
d5:33:62:13:13:c7:0e:eb:9e:9e:b7:85:39:a8:f4:
31:eb:56:99:5e:7c:80:1e:7e:40:c0:e5:01:f1:d5:
ff:cb:db:1d:6c:ae:b8:9a:6a:19:7d:f9:66:cd:d7:
20:52:66:c6:26:7a:df:0c:03:0e:e7:dd:42:98:fb:
ff:ee:fb:a3:dc:9e:2d:96:8a:8d:8f:a6:1d:62:37:
e5:9c:12:49:81:a8:5a:02:0b:b5:f1:fd:2b:2d:ef:
50:17:a5:07:da:83:98:60:e7:c5:c7:5e:cb:86:5e:
f5:07:5b:eb:63:9c:31:a3:d3:8e:d7:54:df:6e:22:
a8:4c:4f:71:08:0b:c0:ce:69:e7:5f:d1:e5:2c:96:
e3:bf:24:ae:a8:ec:4c:14:f1:18:32:e6:7c:b4:20:
05:a0:40:ff:4b:2b:85:c8:54:a9:f4:88:55:ab:10:
41:5f:63:e5:62:c1:a3:6f:58:60:99:64:52:de:03:
3d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D0:C3:5F:A5:8A:36:A4:B4:53:41:43:51:8C:57:49:7F:61:90:3D
X509v3 Authority Key Identifier:
keyid:46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/_9DDX6WKNqS0U0FDUYxXSX9hkD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.114.0/24
Signature Algorithm: sha256WithRSAEncryption
71:95:04:31:23:73:7e:9e:ae:b7:31:65:6d:0c:1f:f3:0f:50:
f0:47:1f:1e:c3:b5:4c:6f:3a:84:6d:e2:72:02:25:f0:e4:61:
10:a9:9c:0b:9d:81:3e:ed:30:fb:4a:71:c5:fb:43:7f:c3:b3:
e3:cd:53:33:73:e7:8e:fc:0f:d9:03:2e:30:c9:31:3b:4b:8a:
bc:b5:62:5a:93:13:89:19:6f:4e:ff:f4:a9:f3:1d:52:bd:46:
78:11:64:41:40:e7:56:a0:51:42:a8:e3:12:0a:c5:3b:bf:5f:
a4:ca:ac:1b:84:50:c3:13:a6:5e:69:51:54:55:37:1e:48:e9:
93:e4:96:09:c3:81:9d:5a:14:4a:31:2f:ff:82:f5:ae:92:dd:
a9:59:73:ac:3c:1b:5f:f3:44:40:e9:0e:f7:26:d4:47:97:28:
91:23:92:bb:04:d5:61:bc:ad:e6:ba:de:35:5f:11:7c:e6:6c:
91:a3:6f:37:fc:f4:e0:f8:72:03:60:05:ff:b8:3f:5c:df:78:
5f:34:20:60:59:f0:44:11:67:49:af:96:86:f2:be:84:3f:98:
32:b4:04:06:d0:df:d5:b1:8e:e9:23:24:82:ed:55:18:11:6e:
f5:96:ad:a9:a5:e7:5b:f7:bb:92:7b:9b:b2:21:dd:43:e4:6d:
0b:2d:b3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:36:49 2026 by rpki-client