Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/p9L5cF_zrUQq9yQ8iih6wH2zdz8.roa
File: p9L5cF_zrUQq9yQ8iih6wH2zdz8.roa (raw, json)
Hash identifier: xFDge0h0P1x29btG4Nd0kEneOqOsxT+krJ6Qhd0wSPY=
Subject key identifier: A7:D2:F9:70:5F:F3:AD:44:2A:F7:24:3C:8A:28:7A:C0:7D:B3:77:3F
Certificate issuer: /CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Certificate serial: 019DB911871757C4645F3394D9093C9A81A8
Authority key identifier: 1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/p9L5cF_zrUQq9yQ8iih6wH2zdz8.roa
Signing time: Thu 23 Apr 2026 06:40:26 +0000
ROA not before: Thu 23 Apr 2026 06:40:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8315
IP address blocks: 83.98.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:11:87:17:57:c4:64:5f:33:94:d9:09:3c:9a:81:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Validity
Not Before: Apr 23 06:40:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7d2f9705ff3ad442af7243c8a287ac07db3773f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:3b:80:e3:81:a6:e6:e8:cd:e1:f0:21:26:
1d:15:e4:ab:49:3e:43:4b:3f:45:d8:0c:cf:e3:43:
34:c2:3f:f2:ec:84:be:ae:c8:86:97:5c:83:f8:17:
3b:d5:37:9c:99:9c:25:1f:b9:a0:af:8b:fb:1c:00:
63:2f:ab:ca:e9:d2:ea:56:b2:c2:78:44:82:f4:ce:
7f:1a:a5:a5:ab:59:b3:c1:47:6a:03:3a:93:ea:7b:
49:c4:b2:e1:3e:a4:fb:8f:2e:3d:86:e2:56:5e:b1:
06:c9:a2:e0:1f:f3:cf:78:a9:63:fb:dd:20:ec:fb:
ce:b9:55:46:82:18:ac:5e:79:9c:73:8b:4b:22:91:
0a:3f:0c:77:da:47:69:30:a9:07:34:2d:b5:05:dd:
b4:3b:12:e1:78:bc:f8:05:dc:74:a0:87:fa:6b:05:
93:71:14:a2:88:b5:32:c0:7d:ea:79:f8:82:68:a3:
59:6e:2a:16:11:50:72:0b:0b:76:95:14:94:46:74:
6e:90:0b:37:e6:3a:bb:85:3e:f3:56:87:dc:db:7c:
e4:c3:20:db:e9:4b:16:dc:ad:7b:a6:81:0d:c6:e0:
e1:9d:4a:6b:d3:23:41:15:30:4c:9a:46:3e:87:ca:
c7:19:73:db:66:4e:57:d3:e4:40:32:66:d8:af:e7:
db:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D2:F9:70:5F:F3:AD:44:2A:F7:24:3C:8A:28:7A:C0:7D:B3:77:3F
X509v3 Authority Key Identifier:
keyid:1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/p9L5cF_zrUQq9yQ8iih6wH2zdz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.164.0/24
Signature Algorithm: sha256WithRSAEncryption
93:16:1c:fd:75:43:a0:10:8b:35:00:12:78:35:22:cf:fc:94:
07:b7:54:8d:47:97:b9:ac:4b:b1:e1:e3:b1:85:5a:54:55:a2:
30:7d:76:7f:f2:bb:4e:8f:df:03:fe:a9:94:cb:5b:d1:fa:70:
9a:d9:01:1a:cb:4e:c0:14:e2:62:dc:48:f7:8f:ce:73:b9:01:
6f:51:0f:30:5b:92:5d:33:f9:bd:02:ef:52:f1:a1:2d:b4:50:
b1:dd:d2:9e:d1:b2:54:8d:7e:74:b1:67:03:23:40:35:c2:25:
35:3f:70:16:ee:12:95:ce:8e:d0:95:03:f7:ec:63:49:1b:9c:
65:15:d1:e3:ad:e4:ac:fe:27:48:05:78:ae:a2:54:53:c4:58:
f8:bd:36:36:65:5c:70:85:8b:0e:89:a0:7b:b5:fd:00:2d:e0:
ae:17:55:54:17:00:c4:0a:a1:9f:f5:d4:9f:9a:c9:0d:be:bd:
23:bc:e3:d8:94:ef:0e:c7:16:c5:ee:2c:95:1a:bf:82:78:b0:
5f:8b:36:43:58:7c:ef:b9:6b:04:1d:ea:13:8c:b5:69:cc:ab:
0e:84:d8:ab:79:fa:ed:c8:16:69:03:42:de:b4:32:11:7a:9e:
6d:50:4d:f3:de:98:d1:23:1d:92:b7:ce:e2:55:07:17:e5:5e:
ec:16:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:00:51 2026 by rpki-client