Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9MnWQot7LKY09P8lFlcvdhzPECU.roa
File: 9MnWQot7LKY09P8lFlcvdhzPECU.roa (raw, json)
Hash identifier: oswn9m/9soKAkYBM/TPhQXW/CZHgrR45dPizF1tshoo=
Subject key identifier: F4:C9:D6:42:8B:7B:2C:A6:34:F4:FF:25:16:57:2F:76:1C:CF:10:25
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A17E62CC41BBA557B8EBDEA6A6853716B4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9MnWQot7LKY09P8lFlcvdhzPECU.roa
Signing time: Tue 27 Oct 2026 17:22:46 +0000
ROA not before: Tue 27 Oct 2026 17:22:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218522
IP address blocks: 201.8.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:62:cc:41:bb:a5:57:b8:eb:de:a6:a6:85:37:16:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 27 17:22:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4c9d6428b7b2ca634f4ff2516572f761ccf1025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:0a:93:d9:16:91:f3:0d:f0:c2:ed:87:ac:
ae:a6:5d:93:3b:c1:bd:ea:95:1e:e2:e7:ad:b3:5d:
e8:32:39:2c:79:04:27:f6:0d:4a:af:68:c5:1c:46:
f6:5f:5b:18:29:92:25:42:e6:76:af:90:5c:0c:4e:
1f:dc:3f:2c:99:31:ed:64:c3:7d:72:04:a3:16:1a:
c1:9a:22:05:7d:e2:b9:75:5a:30:b4:4a:20:71:a1:
58:65:64:8e:c9:a9:97:15:9b:01:a0:ee:b2:01:f3:
20:d6:e3:32:44:e1:13:70:71:01:fb:13:25:52:a8:
14:8c:a6:54:c0:2d:30:e7:2c:87:a1:d2:2e:23:cd:
2e:bc:89:1f:62:84:fc:7f:f2:8c:a3:95:1c:d4:ca:
51:f5:6d:3b:9d:1b:62:d5:ac:e1:ff:43:a4:1c:db:
59:b8:30:62:0e:3d:9a:22:26:57:2e:0e:c9:fe:f0:
a2:63:95:8a:86:bb:06:39:ee:0d:9e:1f:68:50:3a:
bb:b0:97:0d:ab:49:1f:a9:57:2d:7c:07:ef:af:22:
33:3c:fd:75:22:3b:2b:7a:eb:d0:fb:0e:cd:85:ea:
7b:7e:d6:21:b2:ba:7c:6a:ef:3c:9f:93:86:a9:04:
2d:d9:51:a0:1e:5c:34:5e:32:60:82:b2:72:56:d5:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C9:D6:42:8B:7B:2C:A6:34:F4:FF:25:16:57:2F:76:1C:CF:10:25
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9MnWQot7LKY09P8lFlcvdhzPECU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.8.74.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:46:25:d7:26:06:e6:01:81:5d:aa:ca:29:06:df:6d:19:fb:
dd:7c:20:12:1d:93:c6:28:ef:72:cf:20:91:f3:71:08:f4:fa:
aa:cb:c5:fb:ac:e5:87:a1:cc:59:89:2e:85:aa:35:8f:e2:c9:
57:4e:22:6b:d8:96:1b:b5:0a:1e:40:bd:3f:49:5d:a7:d7:8d:
e5:93:2d:5c:a2:e9:49:84:4c:37:8c:16:14:d3:35:78:7a:d7:
e0:90:42:ef:54:54:14:70:c9:4b:4e:59:f0:6b:73:18:27:21:
dc:48:f0:85:df:65:a1:eb:b4:a8:45:4c:a0:ae:fe:21:71:0f:
1c:f9:2f:9a:b8:ad:3e:99:76:f3:d0:42:74:8d:b4:6b:02:98:
70:3e:33:21:26:be:6a:60:0a:e1:31:60:8c:65:2c:94:e0:34:
0c:62:a7:03:4d:8f:91:b8:bd:8a:a2:01:0a:dd:0f:8a:4b:b3:
b5:d4:59:81:8d:ef:91:41:55:70:42:52:ce:87:1c:b8:4e:1f:
5a:fe:c3:97:b0:3d:f1:b8:8d:39:2b:5a:7a:c5:de:d2:83:20:
28:02:3c:22:99:63:43:2d:0a:e9:38:2c:49:f3:fd:49:22:88:
68:ca:68:67:25:b8:4f:3a:c9:2a:10:78:05:f5:41:d9:24:18:
24:eb:49:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:26:07 2026 by rpki-client