Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/F9-TtLeGp5Zi8Xx4OGNJZQREZQ8.roa
File: F9-TtLeGp5Zi8Xx4OGNJZQREZQ8.roa (raw, json)
Hash identifier: w95uLEhSRW0HEpsxo2sLSthAa84cXprY24xXtceKquw=
Subject key identifier: 17:DF:93:B4:B7:86:A7:96:62:F1:7C:78:38:63:49:65:04:44:65:0F
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019E4A71DDE41899762955C048468C30A3E4
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/F9-TtLeGp5Zi8Xx4OGNJZQREZQ8.roa
Signing time: Thu 21 May 2026 12:10:36 +0000
ROA not before: Thu 21 May 2026 12:10:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203545
IP address blocks: 194.146.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:71:dd:e4:18:99:76:29:55:c0:48:46:8c:30:a3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 21 12:10:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17df93b4b786a79662f17c78386349650444650f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:8e:64:83:88:39:da:e0:74:15:47:7f:f1:
b6:bd:86:a3:21:10:60:c8:f4:5b:17:30:8a:d1:81:
66:a7:d9:d1:60:b3:d3:fc:f3:df:a9:38:c3:fd:86:
cd:f0:15:79:05:bf:08:85:17:7b:4e:19:58:c1:dd:
a8:15:ed:fb:26:bb:36:9b:7c:65:f2:1e:7b:1b:18:
ab:7d:21:ac:c0:55:f6:d8:bf:f4:3e:95:97:cf:f5:
a9:d2:4a:d8:9b:22:92:fa:f9:b4:8e:3e:f9:34:51:
b5:c1:e0:6e:8c:b8:c5:de:e8:0d:df:19:ec:1d:fa:
97:e2:fc:76:d3:4e:03:bd:dd:06:48:34:81:de:a3:
be:3a:4e:03:9a:8d:f1:fe:03:57:d1:38:cd:9f:7f:
a9:46:ea:80:d1:d5:eb:04:0e:9f:32:ad:c4:84:cb:
9d:cb:7f:7d:34:1c:5f:5e:09:f7:45:3b:37:95:8f:
23:86:39:25:4b:ed:90:25:a2:67:7a:1b:1f:4a:fb:
ce:43:21:73:d4:de:79:65:f0:5b:36:f2:a1:2f:97:
e3:49:84:93:86:99:9b:9a:93:c6:79:b8:f3:50:45:
f7:a4:c1:0b:5a:c6:2e:8d:d1:a3:17:28:2b:12:e8:
12:6e:49:3f:13:a6:61:7c:c1:d9:e6:95:1c:39:3c:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DF:93:B4:B7:86:A7:96:62:F1:7C:78:38:63:49:65:04:44:65:0F
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/F9-TtLeGp5Zi8Xx4OGNJZQREZQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.26.0/24
Signature Algorithm: sha256WithRSAEncryption
63:9b:91:38:ee:9c:aa:2e:9d:c1:3b:aa:8b:7d:ed:43:7e:ee:
1a:db:5d:8e:a8:b0:25:54:ad:a4:1d:3e:e4:d7:c7:18:d2:8e:
ff:eb:1f:83:ac:00:16:eb:a8:2f:b4:d0:6b:4b:06:2a:e8:02:
27:9e:c7:50:47:60:c3:05:c7:a6:60:6f:92:13:9d:4b:a8:fd:
5f:0f:e6:ef:16:8e:a3:54:0d:92:23:cb:fb:f6:e7:3b:4b:09:
d6:35:1c:38:fa:f5:8f:72:33:20:dc:b6:ac:31:59:70:68:61:
1e:90:8d:9b:46:3f:b7:5a:5c:5d:a1:58:95:e1:94:f0:f0:82:
6f:72:61:48:3a:61:38:61:98:39:34:5a:e9:7c:78:5f:71:7e:
05:64:fa:6d:52:20:a4:e6:62:0e:d8:5b:61:f5:28:d0:42:6a:
40:41:56:6d:6a:1c:37:fe:8a:31:5b:b1:e0:4b:c8:85:bf:4e:
ab:9f:90:8e:5f:b3:ed:67:3b:05:b2:2d:70:72:9e:14:34:60:
a9:75:84:1b:39:e8:a8:9b:eb:90:0c:00:52:23:ab:16:ab:d7:
9e:41:5d:ff:6d:24:32:3d:d7:d7:5c:66:a7:d8:7f:a5:7e:6c:
d0:a2:3c:1e:7d:5d:23:5c:3d:c2:d8:97:bc:4a:59:57:f0:1a:
47:52:db:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:49:24 2026 by rpki-client