Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/V3m1MsfPtHCZgvDm04V9UxUStk8.roa
File: V3m1MsfPtHCZgvDm04V9UxUStk8.roa (raw, json)
Hash identifier: 1ORQHgiLwJEjOt0CQpYp2HSCE8BD0iAFurpSeRHjcCs=
Subject key identifier: 57:79:B5:32:C7:CF:B4:70:99:82:F0:E6:D3:85:7D:53:15:12:B6:4F
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01A06687F341956697C6130BC091889C26B8
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/V3m1MsfPtHCZgvDm04V9UxUStk8.roa
Signing time: Thu 03 Sep 2026 09:09:40 +0000
ROA not before: Thu 03 Sep 2026 09:09:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 193.108.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:87:f3:41:95:66:97:c6:13:0b:c0:91:88:9c:26:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Sep 3 09:09:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5779b532c7cfb4709982f0e6d3857d531512b64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:6d:04:33:d5:7e:f4:74:6b:a5:3a:b2:7c:
81:50:7b:4b:ad:c2:30:7c:6c:56:c4:27:59:bd:02:
ed:5a:93:98:e2:08:5c:16:28:44:f0:23:b7:53:0a:
79:21:02:df:c5:cf:11:d2:6c:54:34:ec:24:42:bd:
6f:b0:e2:09:34:68:d6:71:f0:45:df:3c:ba:e8:db:
fe:f0:03:76:fa:ad:e5:28:ea:34:96:ba:27:f8:f9:
5a:c3:c6:ab:12:86:5f:7d:8d:0a:38:d7:3f:01:58:
c0:d9:e3:02:b4:75:46:de:fc:4d:40:a3:38:7a:26:
03:28:71:f6:1c:31:5a:98:24:19:db:67:34:11:8f:
44:53:54:b2:21:16:e1:03:25:83:38:fd:90:6b:b1:
e0:e2:bd:1f:0c:a9:43:ad:50:3a:ff:3d:16:a4:a3:
55:3e:84:5d:06:0c:2f:77:2e:3e:af:37:4b:d1:1f:
14:80:bb:38:38:76:58:f5:6a:88:22:c2:1d:2d:61:
b0:c9:83:d0:1a:a4:12:af:d6:64:09:f4:99:79:7f:
a4:47:82:c7:1d:5a:fc:e3:34:61:26:64:90:b8:dd:
20:47:4c:96:8a:fb:35:01:a0:c9:ed:89:3f:52:85:
10:4f:e8:f5:e8:fa:ab:00:2a:f6:f6:72:7b:5a:bd:
fa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:79:B5:32:C7:CF:B4:70:99:82:F0:E6:D3:85:7D:53:15:12:B6:4F
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/V3m1MsfPtHCZgvDm04V9UxUStk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.131.0/24
Signature Algorithm: sha256WithRSAEncryption
33:5a:03:5d:55:7f:e6:36:24:fa:3f:83:12:e5:e4:b7:f4:c9:
c4:9c:dd:e0:c1:4e:95:90:a1:10:06:56:20:15:f2:e6:ec:09:
9e:8c:8b:38:5f:ac:8f:71:3d:76:c0:b9:3b:10:bd:0f:55:86:
6a:ac:c2:63:9f:66:2b:64:9c:8b:0c:3d:b0:cc:aa:25:71:9b:
93:f4:1c:a1:9a:57:c2:2e:cc:1d:31:54:9d:c1:53:74:41:2b:
5a:77:17:b0:13:73:48:41:32:a3:2d:d6:16:17:a8:3c:a3:e4:
bb:40:ef:d9:b1:b4:1c:a6:c2:c6:5c:7f:69:c3:f7:98:72:e6:
2c:6a:93:73:6d:53:51:04:5e:79:25:dc:68:f0:92:ce:59:6a:
1a:15:77:b6:e9:3e:93:15:8b:5c:61:08:f2:be:84:c7:84:70:
3d:5c:dd:08:d4:dd:c0:60:65:20:a1:bf:46:86:34:b8:b8:b7:
54:7b:da:6b:51:70:a2:99:05:ee:c8:4a:e7:f4:f7:43:f7:67:
7c:26:20:fb:f4:14:10:7f:2c:b1:8f:01:c4:36:8c:1e:72:3e:
df:a8:3f:38:34:d8:bc:5d:4f:e6:9c:d6:71:7a:a7:2d:27:05:
bf:e3:d0:13:8f:2b:d6:38:a0:fd:4f:78:87:3e:02:cb:52:30:
0d:40:ec:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:36:14 2026 by rpki-client