Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/7xGiL8nvCg3rhYFGjdJVxWh4Mrs.roa
File: 7xGiL8nvCg3rhYFGjdJVxWh4Mrs.roa (raw, json)
Hash identifier: I4Ms+nG9clzzXqbRLMZBQnfcHaFzr4weXSHENGAJ3A8=
Subject key identifier: EF:11:A2:2F:C9:EF:0A:0D:EB:85:81:46:8D:D2:55:C5:68:78:32:BB
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 01A0F837C52403B6D7F8EB3D28EE309E4638
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/7xGiL8nvCg3rhYFGjdJVxWh4Mrs.roa
Signing time: Thu 01 Oct 2026 16:06:39 +0000
ROA not before: Thu 01 Oct 2026 16:06:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 91.213.126.0/24 maxlen: 24
2a12:7280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:37:c5:24:03:b6:d7:f8:eb:3d:28:ee:30:9e:46:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Oct 1 16:06:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef11a22fc9ef0a0deb8581468dd255c5687832bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:d8:85:56:e0:15:0c:1f:50:b8:51:ac:73:
2f:53:a8:aa:a4:d1:9d:b7:58:06:ba:f0:49:82:34:
59:7e:40:22:31:09:9f:8b:17:a2:7d:6c:b0:fa:47:
2a:45:2f:c6:fa:75:e9:d1:17:d6:77:6b:05:d3:ec:
df:7b:63:b6:fa:73:5e:47:8c:8e:1a:3a:5e:46:46:
61:33:0e:aa:91:e8:1b:2b:4c:b6:9f:5a:fa:ec:ac:
9a:50:bb:7f:17:3a:a8:0c:fc:09:eb:bd:be:4a:fc:
96:1d:53:95:24:c2:bb:b8:fc:8b:f7:57:f2:b1:23:
02:c6:31:bf:0c:25:ab:df:e3:d6:bc:02:4c:7c:4c:
9c:d9:ee:65:b7:16:f4:48:87:ca:5d:6b:15:3d:d7:
c8:e0:76:80:21:b2:bd:a5:6b:73:6e:5e:ed:96:80:
24:45:b0:72:6d:a0:89:a7:31:39:4b:b3:1c:07:2a:
e8:84:89:64:c0:c7:90:15:17:70:60:f8:26:85:4e:
45:dd:e7:a4:07:24:52:05:00:c6:6b:d0:f4:6f:6a:
4b:42:50:c5:47:28:78:6f:a6:61:5a:05:fb:c2:e8:
97:72:3a:5b:a9:f5:98:de:b3:ec:33:21:c1:e0:18:
48:8e:22:bb:c6:b5:9f:51:aa:4c:32:03:f0:bd:68:
21:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:11:A2:2F:C9:EF:0A:0D:EB:85:81:46:8D:D2:55:C5:68:78:32:BB
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/7xGiL8nvCg3rhYFGjdJVxWh4Mrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.126.0/24
IPv6:
2a12:7280::/29
Signature Algorithm: sha256WithRSAEncryption
85:e3:17:ee:21:be:1b:01:4e:28:34:45:36:7c:5d:1e:7f:f0:
dc:e2:2c:a0:03:29:62:0a:3a:30:f8:f2:cd:a8:1c:3c:42:19:
cb:c5:81:71:b5:1d:21:af:05:7c:eb:e8:4e:98:11:6e:4e:92:
6f:b2:4c:28:6b:f6:52:b0:0c:dc:ca:4a:b0:f3:ae:d8:3d:b3:
3a:f0:0b:f3:9f:8c:3f:0b:e3:e2:7f:87:66:d3:89:a7:b1:78:
b0:6f:38:e0:77:fe:91:18:f2:97:71:74:3f:c3:0b:6c:1d:17:
0f:80:5f:09:05:8a:fc:58:57:dc:f5:6e:34:4b:44:b9:35:c1:
c9:66:74:a3:8b:b2:87:0a:f9:fc:90:09:e4:e1:ce:29:33:33:
a7:25:9d:79:20:da:d9:05:81:f5:e1:d6:77:0b:08:eb:db:00:
3d:46:5a:0a:81:68:73:e2:83:91:84:2d:01:32:85:9c:4c:b1:
4a:0f:26:c8:25:90:71:d2:c7:ff:59:03:62:d6:f9:43:5a:44:
ee:35:c7:a1:a6:19:05:35:7d:4d:33:6a:13:cd:16:8c:d5:d9:
2b:17:98:3e:86:1b:1b:15:9f:5a:2b:56:dd:bf:c0:d8:09:36:
f0:f8:65:b6:31:01:b1:41:80:c2:c7:1b:ef:a6:92:73:47:93:
30:5b:57:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:37:56 2026 by rpki-client