Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/lJD6p3-p-n_W5CvvLwZFfJ2LcYI.roa
File: lJD6p3-p-n_W5CvvLwZFfJ2LcYI.roa (raw, json)
Hash identifier: 1gf6kwpB4aZBFtoY7dfhoa70Xl78vIvTEcS1r33qXwk=
Subject key identifier: 94:90:FA:A7:7F:A9:FA:7F:D6:E4:2B:EF:2F:06:45:7C:9D:8B:71:82
Certificate issuer: /CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8
Certificate serial: 019FD91D757C41C2ADF035BAD8BDA4D7FD73
Authority key identifier: 9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/lJD6p3-p-n_W5CvvLwZFfJ2LcYI.roa
Signing time: Thu 06 Aug 2026 22:06:54 +0000
ROA not before: Thu 06 Aug 2026 22:06:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25330
IP address blocks: 194.180.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d9:1d:75:7c:41:c2:ad:f0:35:ba:d8:bd:a4:d7:fd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8
Validity
Not Before: Aug 6 22:06:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9490faa77fa9fa7fd6e42bef2f06457c9d8b7182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:f7:9d:70:19:f6:45:fc:4e:0b:ea:9a:59:
7d:0f:e4:6d:23:dd:da:88:6a:38:f5:13:6e:65:91:
4a:63:56:72:50:23:55:33:19:9c:a0:34:ed:1e:b4:
46:4f:e7:42:c8:27:04:29:24:58:95:70:77:75:7a:
0f:24:b2:73:25:c8:d5:e2:e9:bd:19:ab:17:04:50:
33:61:3e:26:34:0d:2d:bc:59:64:5d:de:0e:7f:54:
6a:75:6a:3f:24:93:85:0b:28:c3:93:f1:69:52:01:
6e:a0:a9:34:32:e2:e6:63:65:40:46:08:d4:d6:f8:
a4:1a:1a:f4:65:e0:6a:bc:b3:04:5e:4c:84:3d:b4:
53:49:45:f6:f2:bb:f9:96:71:a6:07:2e:79:5b:ec:
6b:b5:73:44:84:96:11:52:63:42:56:0c:2d:4b:59:
6a:d1:a4:3c:0f:52:87:19:d1:96:da:20:b4:0b:7b:
54:80:88:03:33:cc:3c:73:5c:93:1e:8c:b7:2b:6e:
42:b2:eb:05:69:fd:be:76:9e:56:4c:85:aa:b5:99:
89:3f:45:08:13:b2:6b:c7:a2:07:0f:d6:eb:4c:19:
aa:f5:29:c3:f3:f2:58:a8:9b:e4:36:96:51:37:65:
67:f3:6b:d5:12:13:eb:81:ee:84:4c:09:46:08:9a:
e8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:90:FA:A7:7F:A9:FA:7F:D6:E4:2B:EF:2F:06:45:7C:9D:8B:71:82
X509v3 Authority Key Identifier:
keyid:9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/lJD6p3-p-n_W5CvvLwZFfJ2LcYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.244.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ba:24:67:84:82:bb:39:69:8c:1d:0e:07:38:76:a3:fd:02:
83:ce:ab:6b:fa:d6:55:22:bc:49:00:67:6c:64:a1:ad:7e:5a:
ae:0f:f8:c6:96:70:44:4a:80:34:70:97:91:d7:de:ca:72:66:
73:5a:da:27:54:63:68:9f:27:44:26:88:de:91:ce:57:6f:3b:
ae:42:30:03:71:da:8d:89:ad:cf:0b:a6:fe:af:c7:5d:f6:01:
00:ea:3c:cb:65:b0:66:c6:fd:32:b8:78:61:78:66:f4:69:d2:
39:1b:59:08:23:b0:53:b2:1b:d2:ee:61:13:bf:b1:33:a0:8f:
ec:59:97:2c:30:e2:66:dc:5c:e0:29:ae:e8:f3:90:ff:7a:67:
77:8c:0e:49:38:c1:39:53:ca:a7:f6:6a:61:13:17:66:9d:ef:
d7:e5:c9:97:7a:b4:21:00:a4:e0:36:86:08:30:f6:21:e6:9a:
ee:d0:09:90:00:24:c5:16:56:7b:9b:30:80:7a:e7:8e:e2:4c:
e8:99:a1:ae:9f:d0:15:5c:93:94:93:d7:be:58:32:8c:08:6c:
c2:84:05:50:00:b5:2f:b9:bb:0d:65:58:0e:49:b0:07:23:1d:
8d:d6:d5:0e:4c:c4:ce:cd:42:c0:ba:8a:51:52:a2:83:45:d4:
82:61:90:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:51:31 2026 by rpki-client