Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/duH5i6Kj1hWUJ7lpkj5WRA3KMoc.roa
File: duH5i6Kj1hWUJ7lpkj5WRA3KMoc.roa (raw, json)
Hash identifier: 9eDuQ2k6LA/RA0m8rrspBTd/eZocOclB7P+1x5v2y2M=
Subject key identifier: 76:E1:F9:8B:A2:A3:D6:15:94:27:B9:69:92:3E:56:44:0D:CA:32:87
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A08C0E614AC21EDE25332E486BA57E4949
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/duH5i6Kj1hWUJ7lpkj5WRA3KMoc.roa
Signing time: Thu 10 Sep 2026 16:02:27 +0000
ROA not before: Thu 10 Sep 2026 16:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218731
IP address blocks: 78.40.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 16:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0e:61:4a:c2:1e:de:25:33:2e:48:6b:a5:7e:49:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 10 16:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76e1f98ba2a3d6159427b969923e56440dca3287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:35:1e:f2:cb:85:97:5b:ca:c5:a6:56:11:
93:13:36:87:a4:3b:16:72:e7:c9:27:6f:17:0e:8a:
d2:08:11:2c:e9:4a:0e:2c:da:53:8d:7d:e1:1b:6b:
43:25:5f:25:82:54:81:40:a8:f1:51:45:8f:9c:ec:
05:be:1b:46:98:af:3b:43:a9:a2:d9:bd:19:c5:69:
af:da:8f:68:b8:62:ea:af:40:5b:2c:d5:68:97:d6:
b7:56:fa:c6:23:38:3f:df:4d:76:a1:9a:00:2f:07:
48:c4:01:07:67:8d:68:33:ca:e3:33:e0:99:bd:2c:
4f:82:a6:3f:22:85:37:bc:2d:51:e0:94:79:26:76:
85:3b:e2:d6:5e:1a:1e:0e:29:eb:2c:e7:fd:b3:48:
d2:51:af:1a:67:05:ba:01:3e:77:19:f5:8a:9e:b4:
54:b2:17:0a:29:f9:4c:a2:41:40:bd:47:1c:b9:90:
66:e9:ba:ca:e4:c7:22:2c:3d:44:54:0f:ff:9b:c9:
7f:f0:f7:e7:63:e8:14:84:1c:6c:be:cb:a4:b6:69:
4a:0e:e2:67:5b:51:20:a1:db:cf:90:83:d4:d6:f8:
e9:0d:61:e8:1a:8c:8d:e2:b5:4b:50:de:0b:d2:cd:
19:1b:74:68:49:2f:aa:31:66:91:f0:9f:0d:80:9d:
cd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E1:F9:8B:A2:A3:D6:15:94:27:B9:69:92:3E:56:44:0D:CA:32:87
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/duH5i6Kj1hWUJ7lpkj5WRA3KMoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.209.0/24
Signature Algorithm: sha256WithRSAEncryption
51:10:e2:0e:c1:74:8b:1e:6e:25:fb:de:75:46:9e:45:ae:90:
9e:1b:f6:6d:2c:e7:74:48:39:e5:04:4c:97:7a:70:21:de:eb:
2b:1f:9f:54:24:0f:04:3a:ac:7b:de:45:4e:90:a9:b6:b1:25:
3f:e3:8b:f6:d1:47:ad:ea:8a:e7:fe:76:d9:87:de:bd:99:08:
1d:1b:de:49:fe:75:cf:df:0b:b1:a8:c6:48:e8:89:be:01:0d:
92:90:4d:dd:57:55:e9:9e:7b:f8:e8:14:cc:5e:d9:e5:03:01:
f3:bc:2c:67:e4:e2:42:9e:06:59:06:d1:5d:24:6a:c3:bc:9f:
81:08:20:ae:23:98:47:2b:38:91:3e:d5:8d:4f:5c:db:09:26:
f4:84:c6:08:6b:4d:35:5c:fe:42:1b:4b:77:9d:2f:8e:52:b8:
8f:32:a3:10:b3:19:ee:c3:01:df:c2:7a:e4:ba:39:0b:24:5c:
64:65:69:37:5b:0c:69:ab:f1:31:54:16:dc:e7:f1:57:76:2b:
83:31:bf:b0:5e:ff:ba:36:02:2e:9b:2a:01:1b:c5:61:17:e8:
bd:4f:92:12:5b:99:3d:4e:45:19:fb:3a:60:02:a0:23:c1:51:
70:3b:90:86:5b:84:27:5f:ce:01:17:db:db:7c:8d:ff:a9:b1:
b5:8e:34:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:30:35 2026 by rpki-client