Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/iJQRSgjpxdNtNulFNn4Q4TxjfJ8.roa
File: iJQRSgjpxdNtNulFNn4Q4TxjfJ8.roa (raw, json)
Hash identifier: gfvNvlA3ELIrgvwhQVIz5BIs3SBGThtCx78SKlUF2dU=
Subject key identifier: 88:94:11:4A:08:E9:C5:D3:6D:36:E9:45:36:7E:10:E1:3C:63:7C:9F
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0D41DBFA17AF6DB0E25AB025945589A46
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/iJQRSgjpxdNtNulFNn4Q4TxjfJ8.roa
Signing time: Thu 24 Sep 2026 15:51:54 +0000
ROA not before: Thu 24 Sep 2026 15:51:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203778
IP address blocks: 185.206.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:1d:bf:a1:7a:f6:db:0e:25:ab:02:59:45:58:9a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 24 15:51:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8894114a08e9c5d36d36e945367e10e13c637c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:64:3d:20:eb:54:7d:32:28:78:20:e2:88:
41:33:0d:07:93:48:5f:5e:bb:04:a9:b2:d0:3b:40:
26:27:5a:43:15:ce:05:b1:c3:7b:ea:02:e8:25:08:
c4:9d:e9:f2:cc:e7:24:39:7c:6e:aa:67:79:3b:37:
61:1a:a2:0e:94:7c:d7:a9:7c:a6:62:96:f1:0c:d5:
9a:55:2b:bc:70:3b:60:d8:da:ab:67:0f:50:80:1d:
5e:d7:bf:9e:63:2c:84:16:77:8c:a4:33:53:f2:8c:
fa:fd:8f:93:fa:d0:ca:b1:ea:b6:37:f2:1a:43:56:
0c:97:cf:37:21:37:4f:2e:6b:ac:64:31:07:f6:db:
f8:2d:32:95:4d:65:9f:f1:55:9a:3e:09:48:08:f7:
aa:a4:5b:82:b4:fb:68:35:1f:5a:03:bb:f2:69:87:
5e:ae:a6:d1:5d:a8:cd:c6:de:f0:50:9c:ca:fa:50:
9c:e6:d4:39:ea:28:82:00:84:10:c5:a5:69:10:6c:
cd:13:7c:80:75:1f:63:b1:ca:ec:e0:24:ee:82:21:
55:45:96:fa:56:48:f8:d5:f0:f2:a3:7a:66:40:e9:
b5:53:62:ac:05:54:c1:58:18:c8:ed:39:10:f7:16:
0d:42:8f:96:50:c5:f6:1e:73:b3:e9:58:e5:b1:45:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:94:11:4A:08:E9:C5:D3:6D:36:E9:45:36:7E:10:E1:3C:63:7C:9F
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/iJQRSgjpxdNtNulFNn4Q4TxjfJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.128.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:16:d5:cb:c6:e6:e0:7e:6a:0d:ed:52:f7:fe:5a:41:2c:e5:
a1:d0:44:7c:01:fc:1d:96:22:fa:fd:fe:1c:0a:64:b1:2c:04:
9e:4f:74:3c:9c:ba:08:b2:7a:4c:87:38:8d:4e:c3:50:ed:b9:
dc:16:79:f4:be:25:89:ca:af:1c:c6:d3:2b:8b:96:0d:a4:a0:
c2:2c:d2:fa:de:93:62:e5:2e:a6:9c:de:f6:78:2f:1d:2c:4b:
d3:b0:cd:1c:50:d0:7c:ab:8b:9f:27:5e:98:73:6f:f3:27:2a:
7c:83:a6:d1:41:0f:22:05:e6:c7:ef:d4:6f:5b:af:c3:06:de:
f7:21:9a:9f:cb:35:5c:b3:6d:82:2b:e0:8b:96:37:6b:d3:5f:
af:9a:26:3e:f4:8d:a6:15:f1:c3:84:a7:bb:43:93:1a:a5:1b:
09:bd:08:17:7a:6d:ff:f4:9b:18:a8:f4:bd:8a:b1:93:b2:79:
59:0c:40:f9:b9:f8:4c:0f:27:bb:67:98:25:97:ee:1d:47:25:
e8:c9:5e:ff:cb:ac:32:e9:9a:8b:29:f6:01:ba:41:bb:19:0a:
9c:19:38:87:12:9d:06:be:33:e1:b3:ac:2e:f3:06:ab:30:a3:
0b:e5:14:7f:2d:73:82:33:04:f9:39:7e:78:db:d1:8c:33:76:
18:28:a7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:54:21 2026 by rpki-client