Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9jADYUg775u-4rLNJuDmP6qWyR8.roa
File: 9jADYUg775u-4rLNJuDmP6qWyR8.roa (raw, json)
Hash identifier: hscGI700LnqGzeAKVOaFXUWjkN1CIYy/rbOfzHNboao=
Subject key identifier: F6:30:03:61:48:3B:EF:9B:BE:E2:B2:CD:26:E0:E6:3F:AA:96:C9:1F
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368E8C5FFB0CCD7CFD556595156C479
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9jADYUg775u-4rLNJuDmP6qWyR8.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207835
IP address blocks: 109.176.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e8:c5:ff:b0:cc:d7:cf:d5:56:59:51:56:c4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6300361483bef9bbee2b2cd26e0e63faa96c91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:14:cc:71:c6:15:1b:71:2d:ac:51:91:be:
76:42:01:79:af:04:ec:f9:a4:56:01:ac:4e:b4:98:
35:61:a0:06:e0:58:d7:74:50:66:17:c5:61:67:27:
26:2c:a9:0d:c9:85:81:8b:a0:4a:e8:16:23:6d:bb:
9e:18:01:ca:40:a0:9a:69:17:86:af:8e:af:7a:d9:
ff:2b:4c:44:48:e9:9c:b3:a0:44:95:aa:d0:ed:ba:
4e:67:2f:a7:b5:37:59:a3:ce:5d:94:e4:2c:c2:23:
3c:33:1b:2b:03:14:af:f8:34:8d:90:f6:e2:70:ef:
1b:78:c4:e4:1c:5e:a5:c8:5c:83:81:de:b0:99:a8:
64:1f:d2:2b:13:52:27:8c:7f:c2:71:f2:8e:f8:ee:
7d:1f:79:4e:1e:88:92:dd:37:0c:3f:5c:58:43:7a:
db:ae:80:55:25:81:15:ae:15:ab:a0:2c:45:46:8d:
15:19:66:12:10:18:9c:9c:22:ab:33:af:cb:f7:5a:
f3:aa:0e:f1:23:93:5b:5d:c4:0b:11:27:93:7e:a5:
2a:99:d0:51:ac:42:e6:30:98:87:de:ba:ac:62:24:
59:b4:1c:71:d2:02:e9:cd:fd:2f:c9:6c:f5:9f:1c:
59:fc:46:ef:63:a8:51:35:4b:7d:1d:b4:66:32:fd:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:30:03:61:48:3B:EF:9B:BE:E2:B2:CD:26:E0:E6:3F:AA:96:C9:1F
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9jADYUg775u-4rLNJuDmP6qWyR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.253.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a1:85:37:e4:93:ea:eb:60:ec:1b:74:62:35:45:ed:2c:b1:
a4:55:1c:ad:29:5b:02:48:da:9a:dd:8f:24:cb:6b:a9:59:a4:
0a:4f:0e:31:e3:ec:9c:0f:30:af:52:c6:7a:0d:ed:e1:92:53:
4a:9e:c7:58:63:4c:73:7b:24:47:cd:1a:9f:c7:87:2e:1b:96:
96:2b:61:69:4c:8d:ae:19:47:7d:00:ff:03:b5:18:62:15:ce:
52:16:04:f4:de:d8:cd:56:77:e1:94:8f:92:fb:0b:06:71:e0:
05:60:51:c1:32:60:ad:61:a4:38:c0:32:f6:5a:dd:56:b8:41:
c6:61:34:b8:d5:1e:b5:1a:22:4c:7d:74:e6:65:e2:68:bf:f3:
b6:90:a8:e5:bd:50:16:bc:41:dc:8a:29:d2:02:43:c3:a8:e2:
97:7e:aa:21:bc:0a:00:47:e6:d4:58:cc:2c:b6:43:8b:31:97:
fe:02:91:05:46:54:b5:90:f9:6b:43:23:f0:11:3c:db:79:44:
99:fe:5a:43:7f:d1:c8:05:4d:c5:d7:f2:3d:24:3f:d6:17:66:
b3:47:f5:0b:3c:2b:c9:64:b2:70:da:db:4d:e5:11:ad:de:e3:
a2:fb:e7:1e:48:a6:2e:c8:9a:8a:c5:10:a6:ea:29:c0:91:42:
c8:ba:54:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:22:22 2026 by rpki-client