Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/rJtFAaihKwhTzfzLn9-a6P1w8XI.roa
File: rJtFAaihKwhTzfzLn9-a6P1w8XI.roa (raw, json)
Hash identifier: B8CZ2EbQTKFiK2knWInh1wLJvgTohC2zNRpfKKdNVRg=
Subject key identifier: AC:9B:45:01:A8:A1:2B:08:53:CD:FC:CB:9F:DF:9A:E8:FD:70:F1:72
Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial: 019FF0483230E8AE6DE60283BA4D72E35564
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/rJtFAaihKwhTzfzLn9-a6P1w8XI.roa
Signing time: Tue 11 Aug 2026 10:04:51 +0000
ROA not before: Tue 11 Aug 2026 10:04:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209179
IP address blocks: 194.76.243.0/24 maxlen: 24
2a03:bb80::/48 maxlen: 48
2a03:bb80:1::/48 maxlen: 48
2a03:bb80:2::/48 maxlen: 48
2a03:bb80:3::/48 maxlen: 48
2a03:bb80:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:48:32:30:e8:ae:6d:e6:02:83:ba:4d:72:e3:55:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Validity
Not Before: Aug 11 10:04:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac9b4501a8a12b0853cdfccb9fdf9ae8fd70f172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:8f:80:29:68:3b:88:cc:15:16:a3:6e:ac:
aa:6e:9e:a1:50:92:d6:7b:f9:70:c6:d6:cf:58:24:
b1:51:b5:e4:a1:08:70:a1:4f:bd:0c:12:9a:0f:e3:
f6:bf:7e:bd:6d:f0:87:6c:a5:a8:16:84:5c:5e:22:
68:18:d8:11:08:d0:53:5e:d7:33:e2:76:74:b0:76:
5d:a9:86:88:a1:05:d2:63:17:c5:07:e3:ff:a7:ba:
c8:82:a5:49:b7:41:72:a0:2a:d9:bc:0e:3c:15:3c:
61:3c:30:96:19:37:12:79:b8:82:58:e0:c0:30:ee:
c1:b9:05:74:22:b8:39:50:2b:cd:4c:89:97:7b:24:
d4:54:d0:d1:11:52:34:7f:97:cd:d3:24:9a:e9:ab:
01:a9:2d:13:d4:ac:83:55:3d:c7:2e:96:34:3f:db:
80:88:4c:89:09:3b:ac:e9:96:fb:df:6c:0a:39:f2:
ff:6d:24:2c:24:ef:94:c2:42:f3:1c:6b:77:b2:ea:
48:15:78:50:bf:13:f5:aa:2c:e3:1a:64:ab:da:78:
34:bd:be:c9:2a:32:57:92:19:3f:0f:99:f1:f2:29:
10:42:ac:53:33:30:10:d1:cf:e6:c5:67:19:4a:0c:
3c:ac:06:66:68:28:0a:6e:3f:58:48:1c:69:21:56:
08:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9B:45:01:A8:A1:2B:08:53:CD:FC:CB:9F:DF:9A:E8:FD:70:F1:72
X509v3 Authority Key Identifier:
keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/rJtFAaihKwhTzfzLn9-a6P1w8XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.243.0/24
IPv6:
2a03:bb80::-2a03:bb80:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7f:d4:0a:96:ba:b8:bf:c1:1c:50:5c:b6:71:43:18:20:5b:95:
82:96:9a:03:f3:08:7d:6a:92:ab:99:90:a5:44:a1:a5:98:d9:
6d:50:9a:58:d6:51:92:0d:e5:82:49:94:32:87:70:2a:d0:40:
8e:87:79:84:4c:e1:cb:20:f6:d0:bc:07:3a:e7:27:38:e6:f7:
6a:db:25:2c:ab:c0:55:7e:80:4f:f1:68:33:bb:57:69:b9:35:
51:c1:c9:0b:2a:fb:66:fc:a0:61:f8:9d:54:1c:57:d7:c6:ee:
2b:67:39:11:8f:38:65:75:52:77:0a:37:07:60:bf:32:e3:a6:
80:cc:40:31:b0:ac:d1:03:db:5e:e6:9e:2c:01:4e:ca:4b:91:
cc:1e:85:ca:17:19:53:de:07:aa:f6:9e:19:9d:0c:4c:8e:87:
63:9d:49:67:b2:14:85:d5:00:7b:46:8a:c2:86:25:59:3b:04:
81:cc:cf:ba:ef:88:1a:6c:d6:89:de:90:2c:43:19:50:35:98:
1b:ac:ef:39:fb:14:11:55:d1:57:fe:33:cc:cc:5e:df:7b:76:
20:3e:3c:6c:9b:72:70:e5:54:ab:82:ca:19:3f:aa:8b:79:43:
62:12:a7:6c:0a:e8:bb:18:1e:9e:2c:21:34:f7:2f:a1:96:38:
78:f0:cd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 21:30:59 2026 by rpki-client