Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/e9dh_bZVkNoSWtlVRmdZV4oNLd4.roa
File: e9dh_bZVkNoSWtlVRmdZV4oNLd4.roa (raw, json)
Hash identifier: RmXDKu0x/J+KDA9sUyzcOskX3prxPnKpefo8PsgmTHk=
Subject key identifier: 7B:D7:61:FD:B6:55:90:DA:12:5A:D9:55:46:67:59:57:8A:0D:2D:DE
Certificate issuer: /CN=3cf615f06d23228c769a85faf0510393d064e0e0
Certificate serial: 01A13DDD44326F16576409414BB7181C5168
Authority key identifier: 3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/e9dh_bZVkNoSWtlVRmdZV4oNLd4.roa
Signing time: Thu 15 Oct 2026 04:41:13 +0000
ROA not before: Thu 15 Oct 2026 04:41:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47376
IP address blocks: 91.222.196.0/24 maxlen: 24
91.222.197.0/24 maxlen: 24
103.215.220.0/24 maxlen: 24
103.215.223.0/24 maxlen: 24
195.28.11.0/24 maxlen: 24
195.234.191.0/24 maxlen: 24
195.238.231.0/24 maxlen: 24
2a05:63c0::/29 maxlen: 29
2a0f:c040::/29 maxlen: 29
2a10:ef00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:dd:44:32:6f:16:57:64:09:41:4b:b7:18:1c:51:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cf615f06d23228c769a85faf0510393d064e0e0
Validity
Not Before: Oct 15 04:41:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bd761fdb65590da125ad955466759578a0d2dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:49:de:f7:e0:3d:4b:28:e7:34:65:e1:81:
c5:72:ad:09:d2:d9:92:eb:81:a7:cc:dd:32:2c:93:
7c:d0:8d:83:a6:a3:cd:fc:9f:d9:d9:5c:23:7a:e4:
81:39:7a:76:cd:04:b2:ee:4a:b2:9f:6c:55:ba:4c:
e5:83:71:71:9c:1a:97:0e:69:cf:88:20:f9:cf:5c:
54:ca:48:4a:16:e7:d8:32:4f:d4:8e:18:08:2f:34:
9c:75:af:7a:3f:54:3d:17:df:a3:c6:0a:5f:83:8a:
2c:b2:86:44:ce:1e:ec:53:73:ae:f1:ba:1c:ee:05:
49:6f:8e:7b:06:f6:9a:e3:c5:6a:eb:b8:dc:79:1b:
42:3b:fe:89:97:55:13:0c:02:eb:28:52:ab:9a:23:
72:44:e4:4a:c1:c5:2d:6d:4e:cf:0d:0d:f9:e4:30:
fb:be:d3:6f:57:ee:a3:48:10:e7:a3:b0:34:bb:64:
15:d4:4e:96:69:0e:db:08:48:c5:82:2b:65:10:fc:
57:e2:68:8a:d4:2f:9c:9e:a1:4f:70:7f:2a:e8:d3:
47:a2:a0:e3:59:0f:59:a2:88:aa:7c:6b:42:55:64:
cd:aa:be:19:21:7f:4f:13:59:da:62:fe:a6:b8:37:
6e:a3:06:91:35:92:07:35:2d:14:24:08:2b:98:e3:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D7:61:FD:B6:55:90:DA:12:5A:D9:55:46:67:59:57:8A:0D:2D:DE
X509v3 Authority Key Identifier:
keyid:3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/e9dh_bZVkNoSWtlVRmdZV4oNLd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.196.0/23
103.215.220.0/24
103.215.223.0/24
195.28.11.0/24
195.234.191.0/24
195.238.231.0/24
IPv6:
2a05:63c0::/29
2a0f:c040::/29
2a10:ef00::/29
Signature Algorithm: sha256WithRSAEncryption
36:0c:a2:16:73:5d:09:f9:c4:23:ab:a2:ac:b4:91:ac:99:04:
23:99:4a:31:3f:ad:d5:86:6c:22:32:4a:77:96:93:08:a3:f4:
f7:7f:8c:39:0e:e0:d6:95:58:b0:d6:c7:a4:fe:d5:50:58:29:
da:30:e2:2c:df:74:ea:f1:ec:65:48:bb:2c:bf:a6:f5:a7:c3:
a1:35:01:0a:50:4e:56:83:30:08:d4:54:54:0b:75:b3:ea:4b:
33:d8:e5:c5:4d:0b:36:07:ca:1a:aa:7a:49:62:e6:90:d3:4f:
f2:e0:54:15:40:85:4b:09:d2:42:70:fe:3d:74:f0:2d:25:24:
85:9b:52:bf:4f:24:dd:1f:f9:95:29:28:47:52:0c:f9:a2:6a:
e8:22:0f:ee:9a:73:0b:54:94:16:ab:2c:44:90:94:61:30:9c:
39:90:b0:f4:d5:53:cd:f7:2f:9d:92:c2:06:8a:52:db:de:80:
00:73:85:0c:09:ed:7c:e3:31:d3:71:f3:db:48:7f:8d:46:37:
50:e5:0c:20:04:e1:eb:79:32:4a:87:51:a9:46:68:5f:35:e3:
7d:65:33:1b:b0:31:70:ca:ae:e5:3f:50:62:fa:65:14:20:f7:
57:2b:0c:5f:71:77:5a:46:0d:49:ec:a0:f0:1b:b0:54:73:5d:
9c:6e:53:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:36 2026 by rpki-client