Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/9DQTs2wKqScndspLuFL690S9C10.roa
File: 9DQTs2wKqScndspLuFL690S9C10.roa (raw, json)
Hash identifier: srpl4qi7sPv0BZnzMRCi4rqUA6OuywpyeD8PiEQVVPo=
Subject key identifier: F4:34:13:B3:6C:0A:A9:27:27:76:CA:4B:B8:52:FA:F7:44:BD:0B:5D
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 019E8770767E5D84CC59E9EAC02533A8E8A9
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/9DQTs2wKqScndspLuFL690S9C10.roa
Signing time: Tue 02 Jun 2026 08:25:54 +0000
ROA not before: Tue 02 Jun 2026 08:25:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215496
IP address blocks: 185.118.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:70:76:7e:5d:84:cc:59:e9:ea:c0:25:33:a8:e8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jun 2 08:25:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f43413b36c0aa9272776ca4bb852faf744bd0b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4e:46:73:39:9b:e7:f5:95:27:47:f6:3c:ae:
49:ac:a9:cd:26:3b:78:de:c3:e6:8f:88:c8:11:2e:
6c:82:b8:80:e9:d2:32:e7:9c:cc:65:83:00:14:84:
77:8e:45:c5:c8:5b:5e:4f:4c:8c:01:78:cc:24:e2:
d0:8c:05:74:db:fc:d2:ee:d9:90:d9:65:af:92:fc:
d0:0b:19:45:93:77:9e:65:95:a4:33:73:be:c9:bf:
6a:d5:9f:66:b3:ae:92:f7:dd:ee:5b:c1:df:62:31:
f2:e2:f1:5e:68:34:86:72:c2:92:1f:2b:1d:6c:49:
66:f3:59:0e:6e:4e:f7:9c:17:7d:2c:2c:a3:3e:7e:
cb:98:25:38:44:cd:4a:8b:f2:ca:53:25:a0:9f:77:
8c:1e:37:21:d6:78:8e:8c:f3:74:ce:b6:8d:e2:5a:
4d:c6:01:cd:34:d4:39:0e:07:9e:5f:b0:ba:d4:ef:
fe:6a:57:4c:75:67:af:78:00:09:8f:98:45:36:8f:
71:c7:6d:79:40:f8:88:41:a4:b4:44:4a:c0:67:1a:
ed:a4:67:12:a3:1f:e8:22:25:50:d0:8c:98:e5:1c:
10:10:45:43:80:33:cb:05:c1:cb:22:85:94:a3:98:
fb:83:3f:c9:e0:24:a7:85:8b:65:71:bb:86:db:60:
cc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:34:13:B3:6C:0A:A9:27:27:76:CA:4B:B8:52:FA:F7:44:BD:0B:5D
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/9DQTs2wKqScndspLuFL690S9C10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.12.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ba:9b:99:29:97:8f:c7:3d:d8:f9:25:78:1a:5f:b3:f0:6a:
55:d5:6a:37:eb:75:15:6b:71:ba:95:23:8e:f0:3d:bd:f7:b9:
91:7e:10:be:35:8b:a9:1e:7b:ae:ee:0b:45:cf:eb:83:c6:90:
f3:bf:24:fc:38:17:87:e4:b3:a7:55:9b:6f:d5:20:d1:e4:ec:
86:ad:b3:2b:46:bb:33:8d:25:97:09:18:87:0c:ff:7a:4e:2e:
ab:0d:da:41:39:5d:20:bd:b5:60:f2:11:ff:ca:cd:0a:ca:92:
56:e6:17:a3:42:85:5a:2d:08:67:f8:b5:5e:37:96:aa:cf:4f:
43:20:07:ea:59:12:5c:75:6f:27:92:61:06:59:17:36:a6:e6:
10:e4:44:e2:d9:f9:c4:9b:1a:2a:8b:ab:bb:6d:83:ea:63:07:
78:b5:b1:9a:10:a7:02:d7:7c:ad:4e:c8:9a:e8:3e:a9:2c:61:
8c:70:e2:19:b7:e2:3a:12:b0:40:4f:da:d8:ad:64:b8:ff:af:
92:65:68:d0:07:11:24:a6:26:a2:15:02:df:8a:d7:5a:e3:2d:
16:aa:8a:12:79:35:3b:8a:b7:a1:7c:f5:df:14:21:b6:2a:1a:
94:91:34:92:21:d3:10:da:bd:d4:64:0c:82:98:45:5b:63:65:
47:03:9b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:14:26 2026 by rpki-client