Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/Cl9almC-MnHRf79Rx17mqL3de4s.roa
File: Cl9almC-MnHRf79Rx17mqL3de4s.roa (raw, json)
Hash identifier: au7aQyBRsleKEfcWTbTtfB//oyWFLd+LaOHUvN6wKBA=
Subject key identifier: 0A:5F:5A:96:60:BE:32:71:D1:7F:BF:51:C7:5E:E6:A8:BD:DD:7B:8B
Certificate issuer: /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial: 01A019DF6BCFCEA5DC15CD1A222EF13D07CD
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/Cl9almC-MnHRf79Rx17mqL3de4s.roa
Signing time: Wed 19 Aug 2026 11:54:27 +0000
ROA not before: Wed 19 Aug 2026 11:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12552
IP address blocks: 91.135.34.0/24 maxlen: 24
2001:8c0:3403::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:df:6b:cf:ce:a5:dc:15:cd:1a:22:2e:f1:3d:07:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Validity
Not Before: Aug 19 11:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a5f5a9660be3271d17fbf51c75ee6a8bddd7b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:60:bc:ab:db:72:db:97:5e:f1:d7:e9:01:
a6:9d:21:c1:d3:fb:b3:75:4a:e5:93:c2:ad:2b:44:
c3:59:44:f3:15:ce:39:b2:b6:0a:b3:1b:1a:11:23:
3c:f4:8c:e0:84:51:fe:d8:2e:55:36:fa:43:59:e9:
9e:0e:81:cc:79:2f:8c:1f:ac:32:fc:b2:64:4d:6d:
c5:2c:f1:cd:c9:1e:ac:2d:ae:9a:cd:2b:de:b3:66:
8d:84:9f:03:1b:b7:32:30:e6:47:7f:10:83:5c:9b:
b3:ea:e9:da:24:d4:d9:f9:8f:31:89:41:e0:f2:1a:
23:b4:75:76:a2:f2:df:7d:00:4f:5c:bf:24:cf:9b:
d3:d8:bb:44:9c:2e:0f:92:68:fd:8b:e7:13:a0:3f:
fe:91:1e:04:4c:e9:de:aa:f7:c2:90:bd:e3:e0:35:
6a:29:cf:67:01:3a:a2:6e:0e:57:81:a8:78:19:4a:
86:14:37:ae:84:47:3d:22:a0:a7:55:c7:11:fb:e8:
36:f5:15:26:d7:36:3e:34:88:41:7c:3b:b5:8a:ee:
31:79:9b:02:38:eb:ef:d0:98:2c:04:70:ad:ca:09:
63:3d:d5:f5:1e:e5:5d:1d:b5:18:ca:eb:9c:8c:6b:
d1:73:92:46:8c:88:6e:9e:d1:e1:fe:08:a2:8f:0a:
34:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5F:5A:96:60:BE:32:71:D1:7F:BF:51:C7:5E:E6:A8:BD:DD:7B:8B
X509v3 Authority Key Identifier:
keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/Cl9almC-MnHRf79Rx17mqL3de4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.34.0/24
IPv6:
2001:8c0:3403::/64
Signature Algorithm: sha256WithRSAEncryption
db:58:d3:3d:a3:85:58:d7:42:42:ad:46:ed:1d:65:1c:86:a0:
60:bf:04:92:21:b8:7a:93:b5:72:98:9c:8f:b2:09:19:d4:4f:
55:2b:14:65:f2:7b:92:37:85:76:de:f5:c6:c2:88:a3:b2:53:
15:48:4f:3d:18:b9:15:74:2a:5c:bd:be:ae:86:76:4d:cd:8b:
c6:53:ac:52:30:40:af:f6:33:f3:52:2d:e1:85:d6:60:bb:63:
24:20:37:5a:cf:83:4e:e9:65:85:7a:cf:68:fb:09:95:9d:c5:
51:85:7a:5f:5c:00:21:65:94:8c:86:67:33:61:f4:80:18:27:
24:3c:47:23:41:0b:ff:df:7d:9e:e6:c0:93:f7:26:90:44:7d:
30:5d:95:cd:5b:89:73:e9:b7:e1:9a:62:4f:52:09:47:bd:0c:
2c:5b:d2:1b:aa:a0:4e:eb:31:2d:54:40:c7:3a:8b:3d:92:a4:
36:04:a9:e7:85:e8:aa:c0:fd:db:bf:7b:0b:81:09:db:06:73:
01:8a:02:7a:d4:f3:47:fa:98:0c:28:83:94:c8:c6:c0:19:50:
7b:5f:3c:76:f5:0e:56:d2:e2:5e:ee:5a:47:fb:2e:c4:b6:a2:
6a:d6:4c:47:87:30:6f:7b:15:4a:dd:c8:ff:38:29:94:52:19:
f6:03:ef:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:31 2026 by rpki-client