Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/9GgBHYY6IQ5bLuxDhfnwDkKcCp8.roa
File: 9GgBHYY6IQ5bLuxDhfnwDkKcCp8.roa (raw, json)
Hash identifier: 3BRepv5Zv9EHU3V6O2OMNP8hqSTNe1ZH0MSVN1g871U=
Subject key identifier: F4:68:01:1D:86:3A:21:0E:5B:2E:EC:43:85:F9:F0:0E:42:9C:0A:9F
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 019E3F99FC6F3ED4627C6EC3EBEBEB7DAEFA
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/9GgBHYY6IQ5bLuxDhfnwDkKcCp8.roa
Signing time: Tue 19 May 2026 09:38:36 +0000
ROA not before: Tue 19 May 2026 09:38:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402487
IP address blocks: 5.102.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:99:fc:6f:3e:d4:62:7c:6e:c3:eb:eb:eb:7d:ae:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: May 19 09:38:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f468011d863a210e5b2eec4385f9f00e429c0a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:72:b1:95:27:f3:fd:ae:98:82:17:7c:c0:
4c:5e:46:0a:a5:8e:d1:9f:6f:7d:c9:8c:0f:41:02:
d6:95:3a:a4:68:1a:84:8f:b3:38:c2:90:d8:ea:31:
aa:be:de:1e:5f:b7:b7:b3:0a:a7:a5:13:ad:a2:70:
8a:c3:11:52:2a:f4:46:5d:e4:7d:d6:2d:5b:69:0e:
9c:3a:34:ee:2e:6d:7d:fc:f0:17:c7:73:35:44:ff:
82:96:cf:2d:60:8b:38:be:31:3f:f8:11:40:f4:3b:
14:0e:1f:d8:ec:31:ba:f6:4d:17:1f:88:80:08:1a:
f2:e9:04:53:e1:08:3c:43:b1:12:36:3c:08:5e:99:
4c:82:74:41:da:e5:71:94:28:22:73:41:6d:2f:92:
9c:c2:a6:30:4a:0c:bf:da:da:4f:85:f5:ef:55:bd:
25:30:48:40:05:83:75:67:c6:00:00:c2:b8:a1:dc:
da:19:52:9f:5d:f9:63:99:62:1d:c8:e8:6b:66:46:
b2:24:5f:1f:3a:e2:6d:78:59:d3:b2:8b:77:3a:cf:
c6:ec:18:66:98:d7:a4:ce:d5:93:7a:1c:cd:fa:15:
11:67:71:61:33:dd:fe:30:97:8e:c6:98:39:ef:37:
38:45:f3:21:08:d3:27:49:1e:9e:04:2b:56:aa:4c:
6d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:68:01:1D:86:3A:21:0E:5B:2E:EC:43:85:F9:F0:0E:42:9C:0A:9F
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/9GgBHYY6IQ5bLuxDhfnwDkKcCp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.38.0/24
Signature Algorithm: sha256WithRSAEncryption
64:7f:72:7d:62:3d:79:7a:de:52:35:dc:dc:a4:5e:bf:0c:f7:
a2:c8:dc:c2:76:df:3c:6d:bf:ae:d6:60:eb:f4:9d:80:31:19:
65:78:19:41:7b:68:a7:8d:87:62:6c:34:20:60:b0:9a:f5:30:
20:de:95:65:f6:95:af:98:d0:90:12:b1:59:76:d3:e5:e8:f7:
e3:ce:53:32:17:75:c6:83:cf:d5:4e:36:f3:1d:06:f7:54:40:
2e:c5:27:bf:d2:ed:eb:ed:1d:65:20:99:0f:2e:b6:dc:f8:09:
ba:56:76:61:cf:29:7b:a8:80:a8:35:0d:14:dc:30:9d:f4:cc:
60:e1:51:ce:f5:31:f5:52:67:c2:b3:a3:79:5f:cf:22:c1:00:
7d:27:ac:1a:0d:56:ff:ac:47:03:80:ab:fc:70:5c:51:70:2e:
33:de:6e:2e:a2:b9:58:26:14:4b:43:ab:52:0e:50:a7:18:c8:
8f:f3:7e:b7:af:65:9f:3e:1a:bd:5b:0f:a6:88:cb:03:18:55:
2e:ac:21:f3:22:fe:64:5f:fe:61:bf:c3:99:28:90:de:ce:1e:
a0:c4:74:c4:fe:d4:5a:c1:e8:5d:50:ba:c0:03:fa:42:8c:f3:
a5:07:84:74:bf:e4:1b:6c:e0:6a:ae:1e:7b:c5:88:1b:cc:9d:
69:5a:86:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:09:21 2026 by rpki-client