Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/S9BdZjYRIK_gYgHoC-jWhANfqzA.roa
File: S9BdZjYRIK_gYgHoC-jWhANfqzA.roa (raw, json)
Hash identifier: GsiwqtM6KRfMaQs6WtrZNN+9fHTChQrw2h9jufsSkVU=
Subject key identifier: 4B:D0:5D:66:36:11:20:AF:E0:62:01:E8:0B:E8:D6:84:03:5F:AB:30
Certificate issuer: /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Certificate serial: 01A0CE6D63AAFE4F93DBF5C63CB770FF7B46
Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/S9BdZjYRIK_gYgHoC-jWhANfqzA.roa
Signing time: Wed 23 Sep 2026 13:21:10 +0000
ROA not before: Wed 23 Sep 2026 13:21:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210872
IP address blocks: 193.168.8.0/23 maxlen: 23
193.168.8.0/24 maxlen: 24
193.168.9.0/24 maxlen: 24
193.168.12.0/23 maxlen: 24
2a14:e480::/48 maxlen: 48
2a14:e480:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:6d:63:aa:fe:4f:93:db:f5:c6:3c:b7:70:ff:7b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Validity
Not Before: Sep 23 13:21:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bd05d66361120afe06201e80be8d684035fab30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:39:d8:ef:04:7e:86:06:7a:bb:ce:14:ac:
f7:4d:bb:1b:b2:fd:b9:3d:d6:36:ac:e6:73:5e:44:
f8:69:8f:5e:4f:01:84:3e:ef:5b:7b:25:d2:81:33:
29:7d:db:a9:f0:3b:f8:8e:06:04:ff:57:f3:32:0d:
89:8e:84:1c:82:9d:72:14:f9:1a:06:af:b1:ec:e6:
22:39:8a:6e:aa:5e:4a:36:7b:fe:6f:c1:3d:e1:9e:
e0:80:8a:35:b8:72:a4:9c:28:93:ec:e2:0f:f9:61:
b8:a3:d0:34:ee:18:42:0d:74:ed:6c:9f:c3:fe:b0:
34:4b:e8:f8:ba:9e:aa:24:58:db:95:9e:6c:db:74:
64:ec:dc:61:24:5c:a3:6c:fa:a5:18:07:f9:53:21:
34:bb:b6:78:e7:77:c8:dc:6a:95:8c:d8:a5:2f:28:
1f:c3:e7:47:92:1c:37:ac:23:30:5d:c5:3e:48:7b:
de:70:89:90:d9:2f:27:af:71:14:58:6a:54:a0:ed:
88:07:c2:26:2c:df:5c:23:92:43:5a:c8:c6:bb:ff:
2f:63:b4:6e:08:f2:ee:61:3d:47:42:c9:49:77:35:
ea:1b:43:88:c5:df:13:6c:e2:89:a4:5a:ca:ac:12:
9c:46:8d:84:1b:4d:6e:48:b0:b3:af:14:5f:b6:45:
1e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D0:5D:66:36:11:20:AF:E0:62:01:E8:0B:E8:D6:84:03:5F:AB:30
X509v3 Authority Key Identifier:
keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/S9BdZjYRIK_gYgHoC-jWhANfqzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.8.0/23
193.168.12.0/23
IPv6:
2a14:e480::/47
Signature Algorithm: sha256WithRSAEncryption
c7:07:31:18:8b:6f:b9:ce:0b:e7:0c:48:f6:50:6d:c4:f6:39:
65:75:64:d9:cf:27:8a:a1:a6:e7:eb:a4:c5:14:f6:7c:ab:ea:
bc:b1:39:4d:7f:69:a2:35:4a:18:08:67:38:b6:26:81:fe:37:
7b:5b:99:8d:0d:d5:74:84:a9:79:a2:b0:77:ae:4a:0d:85:0d:
4d:9a:c5:fa:f8:da:a4:9e:3f:67:6c:f7:51:4b:6a:66:67:dc:
f0:5c:9e:08:f1:46:44:49:a2:61:f7:f1:e3:f7:60:01:fd:c3:
ef:4a:b2:84:f7:2b:28:a9:a8:e4:01:6d:a6:10:b7:dd:b3:39:
47:70:0f:e4:c2:ba:f7:ac:d8:46:eb:04:52:a7:26:3d:bf:08:
54:b6:ba:9b:66:bf:b4:2d:4f:12:0d:99:f8:29:a9:44:46:f4:
10:05:12:21:22:36:a5:94:38:0b:74:8f:06:6a:29:28:69:4c:
c7:ee:92:df:1a:22:d3:c7:40:b3:f4:03:9f:0c:be:df:1d:9d:
c8:95:43:35:0c:bc:58:5f:a2:ca:27:0c:c7:60:98:70:ec:18:
28:30:29:6c:75:ac:cb:70:cf:d0:26:14:72:77:27:c5:8e:13:
d0:61:88:a2:14:8d:77:0b:c3:37:be:97:6d:27:83:b8:95:49:
82:a9:8c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:32:57 2026 by rpki-client