Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/r9cyYz5gQDHO7JEIkBDX-MYg38Q.roa
File: r9cyYz5gQDHO7JEIkBDX-MYg38Q.roa (raw, json)
Hash identifier: HRtQbXTLeClS9SRzwe/ZSriRk7p5DeNMKB9PPL2Rh68=
Subject key identifier: AF:D7:32:63:3E:60:40:31:CE:EC:91:08:90:10:D7:F8:C6:20:DF:C4
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A15DD4674B40DAAA252ECC5B6A0670F2D9
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/r9cyYz5gQDHO7JEIkBDX-MYg38Q.roa
Signing time: Wed 21 Oct 2026 09:39:23 +0000
ROA not before: Wed 21 Oct 2026 09:39:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 193.219.7.0/24 maxlen: 24
2a0c:56c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:d4:67:4b:40:da:aa:25:2e:cc:5b:6a:06:70:f2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Oct 21 09:39:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afd732633e604031ceec91089010d7f8c620dfc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:c6:9b:c9:a8:f6:86:36:88:b4:a1:51:af:
47:4e:61:6d:fa:41:d0:da:b3:07:4d:61:cc:17:50:
15:f7:32:ec:36:f3:4d:60:c1:f5:56:a9:d1:79:b4:
e2:35:6f:ee:e6:84:60:22:b3:b4:62:f7:62:ad:04:
c3:cf:7d:da:c3:30:71:4b:b1:bc:09:80:c7:9d:d7:
18:b3:59:6d:b2:24:03:20:21:6f:fd:57:ae:5a:89:
07:f2:6e:ab:b3:72:36:14:4c:66:15:32:4a:9c:4a:
db:fd:6d:bb:3c:5c:13:bd:b8:51:48:b4:5b:1b:4e:
41:8b:5c:e4:7b:71:70:fc:bf:db:9f:a4:91:49:e4:
8d:05:7e:9d:48:f3:2a:24:6a:d5:26:46:c1:03:ed:
b0:55:9c:63:5f:fd:cb:56:b5:6b:cd:23:0f:78:5f:
a7:fe:1a:d6:50:3f:f4:ed:53:c0:d1:f1:9d:2e:bb:
8a:08:0d:1a:f4:54:b8:4f:8b:7d:10:bc:5e:4f:17:
e4:a2:71:07:f5:5f:eb:d2:cc:58:01:17:15:aa:38:
1d:fe:2c:bd:cf:8c:62:6e:63:e7:4c:9c:c8:02:7b:
19:3d:4b:03:48:15:6e:8b:c5:fb:c2:31:8e:9e:4b:
32:ec:f8:45:ca:7c:18:84:d4:dc:91:c1:62:6c:e2:
4d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D7:32:63:3E:60:40:31:CE:EC:91:08:90:10:D7:F8:C6:20:DF:C4
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/r9cyYz5gQDHO7JEIkBDX-MYg38Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.7.0/24
IPv6:
2a0c:56c0::/48
Signature Algorithm: sha256WithRSAEncryption
05:87:88:b9:5f:7e:ff:68:74:50:25:e2:df:d9:4c:7b:18:bd:
ff:19:7f:56:5d:64:05:68:06:a0:94:9e:91:92:ea:ae:7e:d0:
59:4e:b6:15:b9:3e:e1:c0:00:3c:ce:2a:5e:1d:c5:76:04:81:
17:9b:02:0f:0c:8e:4d:32:65:9a:1f:57:f0:74:32:8e:07:6f:
d6:67:78:3a:19:4f:51:fe:b1:10:3c:e0:0b:a5:48:b1:57:7d:
ed:a6:83:c9:45:fa:fc:fb:a5:7e:b0:75:21:dd:9c:a9:c4:17:
19:ba:70:d5:dd:8d:08:28:75:78:5b:e3:db:0d:3f:c1:6f:93:
fe:f6:20:6b:78:e9:41:92:2b:11:63:be:b5:a5:67:10:4a:cd:
17:a1:74:04:ff:98:ac:f9:99:f1:ae:1a:20:e2:a6:c7:b5:c7:
c6:22:b7:a5:d8:d5:e8:89:4f:1b:f1:2a:1a:54:73:ec:6b:d6:
74:d1:49:4c:2e:39:18:69:ac:47:8e:99:14:2c:e3:d2:60:78:
44:53:bc:78:6e:69:fc:37:93:b2:ee:ee:17:f6:c1:da:51:ce:
fb:6a:4d:29:11:9d:29:9d:b5:2b:8f:ce:72:1e:84:da:4b:77:
b2:ee:55:46:15:0b:e5:d0:cf:b7:6c:85:5d:20:26:8d:36:74:
20:94:05:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:35 2026 by rpki-client