Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/9EtuXpMLZ6sQQPEORkpOUuNq7kA.roa
File: 9EtuXpMLZ6sQQPEORkpOUuNq7kA.roa (raw, json)
Hash identifier: jJcZdafCJvTzptVALUPjvYgNWN2W1aePSl9m2ANl5Pk=
Subject key identifier: F4:4B:6E:5E:93:0B:67:AB:10:40:F1:0E:46:4A:4E:52:E3:6A:EE:40
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019F367BB31FEEF7181496580A54403A9102
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/9EtuXpMLZ6sQQPEORkpOUuNq7kA.roa
Signing time: Mon 06 Jul 2026 08:11:44 +0000
ROA not before: Mon 06 Jul 2026 08:11:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152918
IP address blocks: 185.92.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:7b:b3:1f:ee:f7:18:14:96:58:0a:54:40:3a:91:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 6 08:11:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f44b6e5e930b67ab1040f10e464a4e52e36aee40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bc:23:98:7d:28:33:4d:e3:2c:d7:79:8f:30:
44:ab:a3:00:22:0a:34:91:1f:0f:88:e9:c2:8f:bd:
c7:c4:6f:3b:fd:c5:63:43:06:79:d2:f7:09:4e:36:
fe:cc:30:0c:b4:a7:1f:7e:30:a3:47:02:8b:43:58:
42:20:51:3b:2b:fe:62:01:34:14:e0:ee:4a:85:1b:
cf:72:37:14:be:ef:c4:c6:44:d6:7a:ea:8e:99:87:
34:61:cc:7e:ab:64:06:1a:2e:b0:19:f3:f4:ed:4a:
60:41:9e:8d:bc:a4:30:1f:e5:f0:b1:3a:ca:40:c8:
0d:8d:5c:f1:31:45:26:ef:69:eb:74:ef:ef:36:ad:
37:8d:23:7a:ab:81:19:0f:8d:a8:56:95:89:ad:91:
e1:82:65:50:d1:18:76:64:ac:be:d6:46:6e:0f:5d:
66:d9:60:3b:5f:69:e9:7b:d1:e6:00:b8:c4:fe:b9:
77:16:23:cf:69:d5:2f:96:a1:c8:a0:90:3f:bd:6d:
e0:6e:d4:fd:72:6e:e9:46:f9:46:38:89:b7:65:e3:
e2:e1:95:c8:40:ec:2a:66:22:07:4c:c2:bc:19:a0:
c3:9f:d3:e3:10:71:45:37:09:09:95:e7:b2:9f:d2:
53:6f:99:b5:37:e8:5a:20:81:51:cf:7e:44:04:eb:
3a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4B:6E:5E:93:0B:67:AB:10:40:F1:0E:46:4A:4E:52:E3:6A:EE:40
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/9EtuXpMLZ6sQQPEORkpOUuNq7kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.47.0/24
Signature Algorithm: sha256WithRSAEncryption
72:8e:06:66:80:7d:cf:3a:3c:47:53:28:61:08:ec:92:2e:3e:
fc:16:d2:40:ed:6c:e4:85:14:4e:76:da:0f:43:ca:f6:77:09:
60:57:82:4a:32:1d:b9:be:b8:a1:2a:37:46:e9:d7:71:be:28:
93:da:99:1e:25:3f:22:90:0e:2d:e0:a3:c5:eb:df:c0:49:5b:
c6:c2:49:56:18:7f:5e:3a:ca:e7:37:06:5f:3f:d2:0e:59:d7:
c8:7b:a0:38:29:5f:8d:58:a7:9b:46:75:17:0f:26:2f:ab:fe:
4e:62:83:68:1c:3c:e3:39:25:65:bf:5a:ad:2f:2a:28:b8:89:
bb:ac:33:81:8b:f3:b0:5a:84:76:a4:fb:bc:d8:a6:28:52:f3:
a3:bf:12:7d:60:b3:eb:8d:31:c8:11:bc:b0:ab:75:6f:82:5c:
3c:23:8d:e2:b1:f2:05:7f:ad:0a:eb:9e:50:3f:44:cb:40:6c:
51:e1:29:03:73:87:c8:04:85:c7:c6:30:d7:75:5d:de:e8:94:
dc:6d:2f:de:2a:98:28:75:c7:50:24:0f:2c:5a:be:54:16:13:
5e:c2:7a:6c:69:c2:d6:56:2d:8b:31:f3:42:40:97:a8:93:1a:
a7:53:75:34:52:27:19:b5:46:2d:a4:bf:2b:3b:03:57:25:04:
7d:92:c3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:26 2026 by rpki-client