Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/T9U_9aCGiUQ96-pJqxgiDH8exms.roa
File: T9U_9aCGiUQ96-pJqxgiDH8exms.roa (raw, json)
Hash identifier: wRu2cenF8ghXwJGX9GjCVKhP6rqYX/Q0mGOrSgXjY/0=
Subject key identifier: 4F:D5:3F:F5:A0:86:89:44:3D:EB:EA:49:AB:18:22:0C:7F:1E:C6:6B
Certificate issuer: /CN=4147f2ee0ed0e17a73b19f9829d009cb575aab74
Certificate serial: 019F2368B66F24F1F1A271E0420CE721D837
Authority key identifier: 41:47:F2:EE:0E:D0:E1:7A:73:B1:9F:98:29:D0:09:CB:57:5A:AB:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/T9U_9aCGiUQ96-pJqxgiDH8exms.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22168
IP address blocks: 185.91.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b6:6f:24:f1:f1:a2:71:e0:42:0c:e7:21:d8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4147f2ee0ed0e17a73b19f9829d009cb575aab74
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fd53ff5a08689443debea49ab18220c7f1ec66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:88:8b:06:12:40:d0:d7:18:bb:af:db:5f:
82:e1:c0:52:ef:a1:0c:4c:ed:b0:3c:52:13:00:46:
c2:89:e0:45:83:ca:1e:bb:cf:e7:40:22:20:83:a0:
df:66:74:bb:e6:bf:ea:fa:c1:0d:dc:28:17:dc:92:
57:e1:48:1d:d0:b2:74:0c:2b:06:02:6c:b0:09:1c:
82:9c:12:8f:91:4b:de:0d:f4:40:c0:23:a3:3a:b9:
e1:fd:d1:c6:1b:d0:40:a6:86:ad:b2:6d:7a:29:a8:
68:91:2a:d2:87:5e:b2:22:87:57:79:36:99:7e:d8:
be:6f:61:a1:20:70:e5:2d:ee:75:68:e8:07:79:8c:
b7:98:ee:f2:b9:35:9e:7a:c3:94:37:68:ef:bb:94:
a0:93:76:5a:78:9d:0e:4c:ed:93:6e:d6:36:10:22:
a4:d9:94:1a:3b:d4:13:f5:8d:44:08:ba:86:bd:76:
fc:3f:9a:9f:0f:bf:5f:38:fc:ae:cd:fd:19:b9:84:
35:3d:ed:7b:6e:a5:91:34:cf:9b:2b:35:f9:bf:c4:
ab:df:c3:c5:5f:14:24:c9:dd:2a:ca:0d:88:51:2c:
06:21:22:91:e7:c4:26:be:c0:aa:e9:aa:97:95:f8:
53:32:3d:e0:8b:5a:61:2a:c0:1a:34:d3:70:86:a4:
d7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D5:3F:F5:A0:86:89:44:3D:EB:EA:49:AB:18:22:0C:7F:1E:C6:6B
X509v3 Authority Key Identifier:
keyid:41:47:F2:EE:0E:D0:E1:7A:73:B1:9F:98:29:D0:09:CB:57:5A:AB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/T9U_9aCGiUQ96-pJqxgiDH8exms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.204.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:83:b0:8b:db:0d:ac:1b:a9:dd:c0:cc:6b:d2:2d:94:49:cf:
88:b8:fc:e2:72:25:24:80:54:67:9f:52:0a:dc:e6:a2:1d:2e:
14:b7:d5:8d:4b:06:91:7e:64:ec:2b:de:fe:11:0b:4b:ef:c3:
c1:4e:b2:7f:b5:d6:fd:3d:58:d3:a4:c6:6e:1a:90:00:09:ba:
14:77:28:5d:6d:c0:44:9d:7f:5c:e3:c7:86:5a:c2:e7:14:85:
77:2f:5f:d1:41:4e:85:a1:41:c0:36:65:4b:0a:b6:58:90:5f:
fe:92:c9:ca:f8:c6:3b:f0:3f:75:23:e4:32:66:98:84:0b:1e:
9e:e2:b5:55:cb:6a:87:9f:b6:90:7e:a0:f4:06:5f:71:33:aa:
aa:db:08:bd:67:9e:7c:ee:2d:8e:19:ba:eb:3e:16:a9:71:a8:
21:87:df:ac:4c:89:fd:53:3d:0e:5f:79:88:6e:bb:60:22:7a:
3e:2c:12:21:a9:d4:67:40:a2:d7:f8:c4:ed:61:b5:54:ec:e0:
6d:ec:57:14:02:84:ca:83:05:62:b0:5f:cc:7d:d9:41:17:c4:
8f:83:78:85:fe:b4:d0:86:9c:e5:4d:03:a9:ee:e2:73:58:0c:
c7:7e:41:19:ed:b0:98:74:12:91:f4:d6:3b:66:fb:97:ea:06:
cf:74:70:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 13:13:44 2026 by rpki-client