Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/a9RM8trinoMFfGwgtl_VPlZzVK4.roa
File: a9RM8trinoMFfGwgtl_VPlZzVK4.roa (raw, json)
Hash identifier: d2UO63vUiugAJOeAIZFqCryA8Ktm+uzRL6+c7itG9zM=
Subject key identifier: 6B:D4:4C:F2:DA:E2:9E:83:05:7C:6C:20:B6:5F:D5:3E:56:73:54:AE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E73D282CA44C20F789E36719B342D6CAE
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/a9RM8trinoMFfGwgtl_VPlZzVK4.roa
Signing time: Fri 29 May 2026 13:00:36 +0000
ROA not before: Fri 29 May 2026 13:00:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208226
IP address blocks: 109.176.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:d2:82:ca:44:c2:0f:78:9e:36:71:9b:34:2d:6c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 29 13:00:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bd44cf2dae29e83057c6c20b65fd53e567354ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:69:c1:1f:ee:e4:f5:17:c8:61:b7:1e:c5:d7:
ce:d5:fa:89:f1:7e:da:c6:04:4d:a7:81:b8:93:69:
5c:81:ec:ba:8e:b1:9d:65:0f:49:33:d3:79:b3:d8:
a0:81:58:ae:23:51:65:3f:86:55:db:5e:c4:fb:95:
c9:dd:e9:60:24:2a:b8:94:08:ef:5b:86:d0:ed:8f:
10:65:0b:0a:dc:08:a9:46:ca:00:f1:a0:e3:10:96:
bf:39:03:4f:ce:90:6c:95:ee:25:16:8b:07:3a:b2:
58:de:6b:0e:a0:a8:f0:ab:78:cc:b7:5f:4c:2d:b8:
fe:37:d8:d8:92:12:9b:3f:f4:29:5d:a7:c6:46:40:
37:77:60:89:32:68:d5:80:d6:6f:3e:78:70:6f:75:
a4:7a:b4:54:6b:1f:44:a9:48:29:3d:ee:ba:0f:79:
17:46:50:de:20:21:af:e4:05:33:3f:66:52:09:01:
ef:7f:22:e8:20:bd:2a:94:6d:76:74:2c:8b:5e:6a:
b8:ac:96:66:bf:09:76:93:f2:30:cf:7c:0a:71:42:
06:b8:e5:24:ab:e0:e3:0c:5c:41:bc:03:11:89:0c:
3d:79:3c:a8:53:a0:a2:6d:73:79:37:15:92:15:f1:
9e:7d:69:b1:2b:e5:b5:35:f3:f1:f5:cf:0f:9d:fa:
5a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D4:4C:F2:DA:E2:9E:83:05:7C:6C:20:B6:5F:D5:3E:56:73:54:AE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/a9RM8trinoMFfGwgtl_VPlZzVK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.91.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:bc:44:36:45:62:31:a3:e6:94:58:6d:bb:34:30:4b:73:9f:
15:40:f0:55:26:d0:11:a4:83:44:0c:91:16:6d:30:e5:a2:58:
61:3b:6a:3d:43:17:79:04:b9:b3:3a:06:b4:f3:22:09:b9:21:
57:93:a6:66:ed:30:30:ca:9a:31:4e:c9:80:e3:48:28:d4:0f:
3e:f3:ad:2c:5d:23:66:bf:f8:c7:dd:9c:0d:6f:19:c5:42:cc:
c7:44:d5:44:50:1e:e9:18:eb:73:5e:09:f3:f8:cd:9b:e9:6d:
d5:07:d4:ee:68:15:b5:36:9e:f0:87:28:65:b2:d0:58:86:09:
b8:41:e3:5b:92:37:0c:cb:77:61:8c:56:06:ba:0d:de:6f:81:
dd:a0:58:70:97:e0:80:d3:f1:8b:53:3e:f9:f6:57:5c:7d:7b:
16:c0:7a:dd:a0:6f:8f:5a:62:37:17:67:e8:ad:01:95:0b:bb:
94:da:81:98:50:cb:67:e7:6a:85:cc:58:45:b0:e0:df:9d:6b:
b1:29:42:4a:43:3c:ee:3c:5c:a0:42:38:a7:2e:6d:89:b7:3d:
f6:ca:b9:f3:80:96:e0:e5:5e:d5:a8:cf:5f:f3:f7:45:76:c3:
08:f3:be:76:65:5e:4d:9c:3c:8c:e6:46:c4:f3:d4:4b:b0:ad:
7b:97:99:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5z0oLKRMIPeJ42cZs0LWyuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwNTI5MTMwMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmQ0NGNmMmRhZTI5ZTgzMDU3YzZjMjBiNjVmZDUzZTU2NzM1NGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WnBH+7k9RfIYbcexdfO1fqJ8X7a
xgRNp4G4k2lcgey6jrGdZQ9JM9N5s9iggViuI1FlP4ZV217E+5XJ3elgJCq4lAjv
W4bQ7Y8QZQsK3AipRsoA8aDjEJa/OQNPzpBsle4lFosHOrJY3msOoKjwq3jMt19M
Lbj+N9jYkhKbP/QpXafGRkA3d2CJMmjVgNZvPnhwb3WkerRUax9EqUgpPe66D3kX
RlDeICGv5AUzP2ZSCQHvfyLoIL0qlG12dCyLXmq4rJZmvwl2k/Iwz3wKcUIGuOUk
q+DjDFxBvAMRiQw9eTyoU6CibXN5NxWSFfGefWmxK+W1NfPx9c8PnfpauQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGvUTPLa4p6DBXxsILZf1T5Wc1SuMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvYTlSTTh0cmlub01GZkd3Z3RsX1ZQbFp6Vks0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbBbMA0G
CSqGSIb3DQEBCwUAA4IBAQCevEQ2RWIxo+aUWG27NDBLc58VQPBVJtARpINEDJEW
bTDlolhhO2o9Qxd5BLmzOga08yIJuSFXk6Zm7TAwypoxTsmA40go1A8+860sXSNm
v/jH3ZwNbxnFQszHRNVEUB7pGOtzXgnz+M2b6W3VB9TuaBW1Np7whyhlstBYhgm4
QeNbkjcMy3dhjFYGug3eb4HdoFhwl+CA0/GLUz759ldcfXsWwHrdoG+PWmI3F2fo
rQGVC7uU2oGYUMtn52qFzFhFsODfnWuxKUJKQzzuPFygQjinLm2Jtz32yrnzgJbg
5V7VqM9f8/dFdsMI8752ZV5NnDyM5kbE89RLsK17l5kY
-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:30 2026 by rpki-client