Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/9xcDq5BERTPl-taAcvBbAPdIa2s.roa
File: 9xcDq5BERTPl-taAcvBbAPdIa2s.roa (raw, json)
Hash identifier: /rCSnPIAiOhKYzHr0b4Aa11HLmoGu1kBXDiI9N5EJA0=
Subject key identifier: F7:17:03:AB:90:44:45:33:E5:FA:D6:80:72:F0:5B:00:F7:48:6B:6B
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A058DB7496C3C340AC5BD90D83A679B163
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/9xcDq5BERTPl-taAcvBbAPdIa2s.roa
Signing time: Mon 31 Aug 2026 17:26:12 +0000
ROA not before: Mon 31 Aug 2026 17:26:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48539
IP address blocks: 213.109.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:db:74:96:c3:c3:40:ac:5b:d9:0d:83:a6:79:b1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Aug 31 17:26:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f71703ab90444533e5fad68072f05b00f7486b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:09:67:60:59:7f:b8:ca:82:3e:ae:8b:ac:80:
7b:0e:4a:ca:43:be:b1:e9:21:37:08:0d:0e:5f:3d:
ab:a3:e7:0d:e2:37:1c:b9:71:98:d4:0e:ab:c2:4c:
35:c7:4c:85:14:04:6a:81:06:51:37:65:05:68:39:
05:c7:13:b1:ee:7e:02:c1:f2:80:4b:3b:00:6f:a3:
bb:99:eb:20:ae:6d:de:05:ba:24:95:0f:a9:3d:93:
e4:a7:49:74:df:e5:fd:ed:9d:d0:ae:95:2f:46:6c:
00:ba:67:ff:ee:f0:d8:84:3d:23:df:e9:58:4a:8f:
a5:43:c4:89:07:0f:26:ad:f0:73:86:74:0f:a7:a2:
fd:6f:11:35:97:8e:72:08:c0:52:6b:c0:c2:29:a9:
59:21:c3:0e:be:9f:7b:e0:6c:cc:72:8b:c4:f7:64:
13:07:c8:32:c6:dc:fa:5f:ab:c4:30:9a:e1:c0:db:
3f:09:31:b3:50:10:53:cc:4d:e5:ea:3a:41:2e:56:
6c:1c:fb:36:71:92:06:51:74:e5:2d:33:17:65:5d:
64:a2:0e:94:96:56:61:6f:e7:33:96:04:fc:25:05:
2d:02:1a:cb:91:9d:ac:51:13:1a:8b:c7:fb:1d:ff:
ab:4f:af:50:e8:7e:01:08:0a:dc:c2:ee:00:d7:78:
76:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:17:03:AB:90:44:45:33:E5:FA:D6:80:72:F0:5B:00:F7:48:6B:6B
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/9xcDq5BERTPl-taAcvBbAPdIa2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.181.0/24
Signature Algorithm: sha256WithRSAEncryption
65:ba:cd:04:ba:e2:51:b3:f6:7c:58:0b:ab:05:86:6d:33:c3:
b4:d1:3d:36:00:6a:e8:2c:c8:5b:73:c7:06:2d:f4:8e:4b:ff:
14:94:af:06:6e:ec:2d:f2:39:3e:ea:37:fd:b4:91:e9:38:aa:
e4:82:1c:8a:49:5a:a2:c0:d0:0e:e2:3e:83:b2:de:84:8c:da:
79:11:87:a0:47:26:6d:af:17:1c:7b:a4:04:62:5d:f2:f5:b8:
2f:a9:b0:9e:31:15:e8:dc:07:3d:a9:b8:8c:fd:28:b9:b5:13:
95:d7:87:dc:bc:fa:f2:43:dc:96:e2:77:8b:53:ee:4d:51:bc:
6d:c2:77:13:80:0a:ce:55:45:53:c1:a5:5e:5c:25:68:2a:bf:
ea:70:0e:51:a3:37:34:65:a7:0d:6c:bf:5d:f4:ab:6f:a1:99:
0e:dc:1c:8a:e5:a9:76:ac:a6:15:d9:7b:0a:c3:1c:f9:8f:61:
36:ae:63:88:3c:ab:fa:56:fa:5c:fd:25:84:95:02:fc:53:92:
05:cb:78:60:33:9a:95:17:ca:99:22:b2:aa:af:81:6d:3e:28:
11:46:44:40:84:9d:fc:f0:36:36:64:86:7e:18:9d:9f:7c:f7:
34:71:ad:51:4a:b0:5c:80:61:35:19:05:43:0c:61:5a:44:f9:
99:2a:7e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 12:27:03 2026 by rpki-client