Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/EqwNsTi9NVU4fVwRT0dDk5Gqcxc.roa
File: EqwNsTi9NVU4fVwRT0dDk5Gqcxc.roa (raw, json)
Hash identifier: Zs1xHMWJq30fgJGKXe+EaRX4uki/zrdU1bDKlfUylpU=
Subject key identifier: 12:AC:0D:B1:38:BD:35:55:38:7D:5C:11:4F:47:43:93:91:AA:73:17
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 019E91CB25F9E29BC8AE879FD5176AFC9E84
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/EqwNsTi9NVU4fVwRT0dDk5Gqcxc.roa
Signing time: Thu 04 Jun 2026 08:41:10 +0000
ROA not before: Thu 04 Jun 2026 08:41:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146813
IP address blocks: 84.247.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:cb:25:f9:e2:9b:c8:ae:87:9f:d5:17:6a:fc:9e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jun 4 08:41:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12ac0db138bd3555387d5c114f47439391aa7317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:d3:46:7b:e0:73:02:87:73:7c:52:78:2d:
a6:6a:4b:b2:1c:37:4c:ad:86:45:b4:05:5d:eb:c8:
bc:90:99:66:7a:f5:0b:72:b7:fd:6c:6d:04:a7:fa:
8f:34:23:52:e4:f6:e1:b3:98:66:92:39:b9:14:46:
ad:6d:aa:59:ae:41:fa:95:0a:a8:0e:b8:f2:19:70:
69:07:94:79:4e:99:f4:f1:91:ea:4d:fe:19:bf:7e:
ea:d0:29:cb:88:d9:e2:44:95:14:20:75:b0:fd:b1:
4d:70:8b:1b:a0:2c:eb:d4:30:17:59:ee:f2:9b:c9:
17:c3:46:ab:33:e2:9e:21:9f:8a:f3:6b:a4:fa:e1:
82:fe:aa:f4:96:3a:cb:a7:bf:dc:02:d1:31:c3:9d:
93:17:6c:bc:1c:b1:86:b7:35:66:4d:f4:26:29:5c:
22:64:cc:7b:50:30:fb:3e:70:76:b2:60:dd:21:ab:
a8:46:48:43:96:ca:fd:22:2e:a8:3b:e0:08:47:b2:
7a:78:dc:78:92:7e:8c:e8:17:59:65:44:e9:56:5a:
fb:d3:57:45:a8:09:f1:9f:00:4f:b6:c3:06:0e:94:
ce:d9:29:77:57:9b:da:33:d5:9a:22:a1:ee:fd:8f:
39:3b:21:3a:5c:ce:eb:8a:c8:45:55:de:18:55:f0:
48:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AC:0D:B1:38:BD:35:55:38:7D:5C:11:4F:47:43:93:91:AA:73:17
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/EqwNsTi9NVU4fVwRT0dDk5Gqcxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.114.0/24
Signature Algorithm: sha256WithRSAEncryption
39:1b:f1:92:d9:50:4c:37:71:ec:92:4f:cb:5a:39:10:e1:82:
d0:ab:5c:29:9d:24:0f:be:92:8e:57:35:9a:fc:0e:41:3a:7b:
ae:18:c7:ec:7f:8c:cf:26:24:cf:1c:e8:db:b8:f5:01:fb:50:
f1:8d:7f:e8:13:05:b9:d5:26:75:29:68:ea:50:6d:e8:41:7d:
a3:40:a6:88:5e:57:24:a4:2b:ac:e3:5f:17:71:fc:df:2c:39:
30:bf:e8:f1:40:2b:be:75:89:b9:fc:16:37:42:13:1e:4b:b8:
c3:1e:61:fb:19:d6:f3:52:36:3f:aa:79:b5:fa:a3:5c:94:aa:
29:31:f6:7e:aa:ba:0c:5c:e1:4c:67:4c:d7:8b:fb:31:e9:bd:
a9:d0:ec:4a:c3:77:dd:5e:da:35:e2:ec:d4:b3:86:07:bd:fa:
1c:8f:65:a7:aa:1a:25:9c:a5:76:4b:d4:60:63:85:92:87:a0:
85:c3:10:e6:64:bf:95:f7:d7:08:a9:0c:ce:f8:5d:64:2b:8b:
ce:c3:b3:6b:5f:f5:5f:03:80:61:71:5e:de:46:c0:bd:2a:f0:
29:0d:08:8d:64:84:47:7b:f1:37:29:b9:32:27:3c:89:8d:e3:
61:a6:c1:9c:2e:f1:f8:84:ce:81:ca:71:6a:89:cc:56:fe:ef:
7a:38:3d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:03:54 2026 by rpki-client