Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/J3ZME9qRtUF6jT_j0TDu89kBRLY.roa
File: J3ZME9qRtUF6jT_j0TDu89kBRLY.roa (raw, json)
Hash identifier: utIFqmQJTC/k0tS5ZFWyEo0xIHdrzsIXgB7ixanQtbo=
Subject key identifier: 27:76:4C:13:DA:91:B5:41:7A:8D:3F:E3:D1:30:EE:F3:D9:01:44:B6
Certificate issuer: /CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Certificate serial: 01A089FB9C6A8748E1C5D4EB76BAE5E6A149
Authority key identifier: 20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/J3ZME9qRtUF6jT_j0TDu89kBRLY.roa
Signing time: Thu 10 Sep 2026 06:22:43 +0000
ROA not before: Thu 10 Sep 2026 06:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213972
IP address blocks: 193.17.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:fb:9c:6a:87:48:e1:c5:d4:eb:76:ba:e5:e6:a1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Validity
Not Before: Sep 10 06:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27764c13da91b5417a8d3fe3d130eef3d90144b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:46:b5:80:f6:ed:7f:90:51:c5:b2:c3:96:
64:1f:ea:09:d1:f3:c4:54:83:16:d8:05:50:5e:09:
52:d2:1b:f0:1a:76:0e:cf:93:89:14:80:61:10:34:
4b:ff:fa:62:ef:7e:3a:ee:39:e9:23:5e:9a:e4:3d:
ba:54:c6:b9:fb:8e:6d:79:dd:c1:09:42:38:f4:40:
e3:73:99:83:48:68:76:9d:e3:87:63:3d:c5:de:72:
a5:a9:52:3f:3e:87:72:d7:a4:6f:b3:e3:c6:62:e3:
ab:6c:eb:8e:cd:87:12:07:d8:3c:8a:ad:f0:9c:ff:
e7:8d:e1:c9:c3:7f:84:65:f9:b2:9d:b9:37:fb:1b:
5d:b9:c8:87:a6:14:92:bc:c5:d2:7c:1e:a3:58:b0:
cc:90:e7:a8:af:c9:da:be:41:3f:27:b7:45:9b:4a:
0d:bf:a4:22:e8:92:83:07:29:30:79:44:0b:a4:a7:
54:db:d8:bb:4e:9b:da:92:db:a8:0f:7a:6f:68:b0:
03:2c:60:83:b3:98:e8:ca:f6:3f:7a:a9:47:8f:8a:
5d:e6:f7:e5:b7:1b:4d:48:a9:ac:4e:f9:39:6a:a1:
1d:cc:b1:af:fa:b5:03:9a:84:3d:05:32:38:83:b3:
6c:2b:40:95:33:fd:0c:c9:2a:fe:f9:42:5f:db:d1:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:76:4C:13:DA:91:B5:41:7A:8D:3F:E3:D1:30:EE:F3:D9:01:44:B6
X509v3 Authority Key Identifier:
keyid:20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/J3ZME9qRtUF6jT_j0TDu89kBRLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.32.0/24
Signature Algorithm: sha256WithRSAEncryption
88:53:7f:66:dd:4b:e0:66:c9:ef:05:d2:e2:c2:e8:d3:fa:a4:
f0:6c:6b:01:46:2c:84:bd:0c:78:36:24:dd:29:d3:55:f4:50:
8a:f5:a8:cb:7d:c8:ad:68:2d:41:4c:b6:af:33:0f:e5:71:34:
23:f1:ec:8f:9d:38:80:c5:85:04:ee:ed:78:ed:02:69:90:27:
9b:ce:26:cf:60:95:b6:2e:ab:d5:c7:64:b8:b6:ab:64:8a:f6:
e5:c4:08:0c:39:0e:3d:62:85:e5:ee:a2:36:55:14:23:97:c4:
3c:72:59:14:d8:12:87:ab:7a:60:a3:62:c5:2b:ee:8d:0b:07:
f7:e6:3e:11:28:99:8f:23:c1:e0:57:14:20:ad:54:1c:20:cf:
2b:b8:51:ae:58:06:5b:6c:f8:5f:7f:10:17:22:ea:c9:64:70:
cc:95:4c:da:c9:6f:50:e6:73:28:6e:f8:da:87:57:5c:c1:e6:
69:b9:b5:81:b1:ee:65:a7:70:13:b1:56:fc:67:75:cf:c3:ee:
0d:f5:37:ce:3f:99:6f:de:d7:89:e8:5f:5c:bc:63:f1:e8:a0:
78:05:25:f7:f8:d2:d5:65:23:a7:dc:b1:bf:f7:1b:cf:11:e4:
3a:80:eb:df:4f:3a:7e:9b:82:e0:90:03:b3:54:0e:b5:99:b2:
89:32:d5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:55:22 2026 by rpki-client