Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/F3ZQh3Km-xgsgyn52H_-qy-RVxQ.roa
File: F3ZQh3Km-xgsgyn52H_-qy-RVxQ.roa (raw, json)
Hash identifier: XUVN18kNWLgsaG15ieowKflypLvKZBFhAxnBSDNLYV0=
Subject key identifier: 17:76:50:87:72:A6:FB:18:2C:83:29:F9:D8:7F:FE:AB:2F:91:57:14
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 01A0F837C474DE3C483C6E49C98AD23A87EC
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/F3ZQh3Km-xgsgyn52H_-qy-RVxQ.roa
Signing time: Thu 01 Oct 2026 16:06:39 +0000
ROA not before: Thu 01 Oct 2026 16:06:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 91.213.126.0/24 maxlen: 24
2a12:7280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:37:c4:74:de:3c:48:3c:6e:49:c9:8a:d2:3a:87:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Oct 1 16:06:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1776508772a6fb182c8329f9d87ffeab2f915714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:7c:82:48:8e:97:a6:40:bf:04:a3:fc:b1:
a0:91:a7:ab:b7:f0:0a:21:25:dc:ae:88:bd:60:85:
85:0a:ed:78:1e:5d:c0:2b:a6:fd:9e:59:62:e3:fd:
76:df:b4:3a:2b:aa:16:47:ba:90:b4:cd:21:24:85:
54:d3:b3:88:27:87:ca:b5:18:28:d9:53:cc:08:f4:
99:66:57:31:50:a8:3e:bc:e8:5c:84:50:79:96:a1:
ad:e5:58:43:38:b0:e3:d0:83:e4:29:7f:78:74:3f:
52:ad:ab:2d:0b:b5:ab:c3:9b:19:4e:0e:15:54:52:
22:1d:84:88:81:e6:45:7e:68:d6:bc:4e:5f:4b:25:
50:d8:3b:28:42:df:0d:9e:d0:b1:69:4f:6e:42:ee:
85:de:c2:f7:d3:81:fb:1a:25:f5:cd:0e:91:ce:da:
25:43:61:97:f0:de:f8:25:f0:3b:df:db:ec:23:d7:
e0:03:b3:3f:5e:f6:85:9c:b4:47:88:76:6b:7b:e9:
e6:b1:70:2f:56:f8:66:a7:57:7c:93:a7:a4:01:ad:
70:96:d1:bd:40:76:27:0c:ca:e0:f8:84:9e:14:d0:
1b:69:21:0f:46:da:a2:53:9a:90:4c:52:13:ff:b8:
77:f3:ab:0f:d3:56:ea:22:fb:2d:cd:79:f6:50:29:
95:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:76:50:87:72:A6:FB:18:2C:83:29:F9:D8:7F:FE:AB:2F:91:57:14
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/F3ZQh3Km-xgsgyn52H_-qy-RVxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.126.0/24
IPv6:
2a12:7280::/29
Signature Algorithm: sha256WithRSAEncryption
6b:52:d7:c0:e0:71:ed:d1:d7:6a:b5:54:02:ea:cc:9a:c5:b2:
69:ad:00:69:68:e8:d2:46:2a:c4:a7:a4:94:2d:2c:7a:9f:e1:
99:4c:d8:4f:dc:23:f6:fa:c3:0c:c4:e3:26:66:9e:24:b4:52:
20:04:f8:f5:86:cf:d3:60:86:47:d1:ea:4d:82:ed:fe:a8:bc:
d6:23:9a:58:38:21:fc:55:a4:c1:3a:31:8e:af:db:9b:fe:07:
f9:cf:46:b5:8c:ec:af:b9:6c:6f:4e:d7:ee:e0:75:29:13:bb:
3d:11:0d:3d:21:20:ef:e8:63:0b:07:b5:44:17:4f:2a:15:ea:
c3:b5:13:6c:bd:ca:33:ce:27:05:14:ac:f3:ab:3d:a8:b9:e2:
13:d5:2b:d5:43:82:2c:f8:d8:b3:ac:f0:67:30:5b:2b:b7:b0:
5a:5f:fc:6e:94:3c:f2:ac:3f:02:9f:7d:f5:cb:c7:1d:89:c6:
19:5b:37:50:78:f4:f5:33:b5:52:79:03:98:98:56:1c:7c:21:
62:c5:47:37:e3:62:53:38:ba:0b:de:51:7b:c2:05:89:fb:69:
92:52:15:33:3a:19:3a:2b:3e:12:a4:d9:50:f2:e1:24:85:7d:
2d:37:25:7e:c6:74:23:d6:3a:7a:16:51:62:7e:00:58:07:4d:
a0:0c:62:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:37:50 2026 by rpki-client