Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/s9EWiU39iYMNrFtqvNq3BJrO4kk.roa
File: s9EWiU39iYMNrFtqvNq3BJrO4kk.roa (raw, json)
Hash identifier: o8TXQ6W+cJhZM+9AeN/X1v6EizJQvO7ynYTfhk5CPpU=
Subject key identifier: B3:D1:16:89:4D:FD:89:83:0D:AC:5B:6A:BC:DA:B7:04:9A:CE:E2:49
Certificate issuer: /CN=9eaeac100744d5fd694a39514203f16567e8c317
Certificate serial: 019F2368D4BFBC1B57251A4B284188C61CB1
Authority key identifier: 9E:AE:AC:10:07:44:D5:FD:69:4A:39:51:42:03:F1:65:67:E8:C3:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nq6sEAdE1f1pSjlRQgPxZWfowxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/s9EWiU39iYMNrFtqvNq3BJrO4kk.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47524
IP address blocks: 146.19.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/nq6sEAdE1f1pSjlRQgPxZWfowxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/nq6sEAdE1f1pSjlRQgPxZWfowxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nq6sEAdE1f1pSjlRQgPxZWfowxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d4:bf:bc:1b:57:25:1a:4b:28:41:88:c6:1c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eaeac100744d5fd694a39514203f16567e8c317
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3d116894dfd89830dac5b6abcdab7049acee249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:80:e3:97:48:b7:86:41:60:5b:1c:86:a4:
d9:3e:59:61:d8:48:01:80:0c:19:0b:4e:2a:be:8f:
76:74:eb:0d:4b:11:8a:e7:e5:5e:2e:4b:3b:61:4b:
57:7f:dd:ff:4c:4f:a5:49:f9:7a:bf:4a:8e:0e:5d:
d8:f9:67:74:cd:2a:b6:81:30:e3:95:34:f9:7e:7e:
7c:07:d3:45:42:c9:52:f2:f5:1f:6b:77:2e:2e:65:
b6:33:f0:2a:04:1b:bc:2e:19:98:3c:1c:22:f8:0f:
d2:1e:6d:6b:1c:2b:ce:df:e0:67:84:e6:86:0f:5b:
12:4a:f4:5c:be:53:30:b5:03:ec:db:72:0d:c6:86:
56:f1:d5:d6:aa:90:13:6d:34:7a:b6:49:22:5e:11:
85:0e:29:51:a5:29:7a:e8:7b:5c:13:39:8e:89:e3:
2d:45:0d:b5:97:68:78:94:0b:2d:cf:b0:ab:14:5d:
23:04:5e:50:6c:c0:ad:08:df:2a:d8:ce:55:20:3b:
c7:7d:e2:75:89:07:9c:4f:68:60:1b:3d:53:f4:63:
ab:c9:9a:31:fb:22:be:b8:dd:60:ce:fd:75:a7:d2:
0d:64:4a:61:eb:bd:51:3d:52:75:50:55:d5:85:37:
1b:4c:76:86:b3:7d:9f:6c:09:a4:9b:ac:ad:a1:87:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D1:16:89:4D:FD:89:83:0D:AC:5B:6A:BC:DA:B7:04:9A:CE:E2:49
X509v3 Authority Key Identifier:
keyid:9E:AE:AC:10:07:44:D5:FD:69:4A:39:51:42:03:F1:65:67:E8:C3:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nq6sEAdE1f1pSjlRQgPxZWfowxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/s9EWiU39iYMNrFtqvNq3BJrO4kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/nq6sEAdE1f1pSjlRQgPxZWfowxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.251.0/24
Signature Algorithm: sha256WithRSAEncryption
81:87:c0:53:21:7b:c5:f3:aa:06:38:53:0d:a2:10:84:5e:99:
fb:ae:19:77:fb:47:93:3a:92:8e:aa:07:ab:ce:8a:69:dc:88:
89:99:49:cc:8d:ea:6d:c7:2b:5a:86:cd:ce:80:e4:0d:e1:0a:
76:22:00:a7:1d:62:1d:17:35:88:7c:fd:29:f1:01:24:61:ef:
be:a9:ed:28:ec:00:df:9d:64:15:43:ac:26:5e:b1:a1:63:2f:
04:d7:f6:c6:0a:c9:37:13:b8:b7:0d:a6:9f:24:b7:1f:a6:85:
e7:d9:57:2e:7d:b7:a7:7e:ee:4c:e8:a0:46:72:87:8b:e4:ff:
14:b8:02:16:fc:11:19:95:a7:fe:5b:d3:5e:3e:d8:81:07:82:
7d:f4:3f:5e:5d:b3:08:56:d4:ca:da:06:6c:7f:1d:21:e2:4d:
88:4b:00:55:30:21:4d:9e:7b:8c:8b:61:64:d2:8d:23:31:86:
c0:b1:ca:d3:65:9d:07:f9:6e:df:34:9e:fa:0d:76:c2:e2:fb:
41:af:76:0a:84:94:ba:dc:32:8c:86:6e:c0:c0:1d:81:bc:ab:
73:5f:5d:52:02:a3:c0:cf:98:07:b3:25:87:d4:b8:b5:5c:ab:
9d:a2:c3:86:5e:8c:4f:12:d6:ed:91:26:0b:f5:d6:04:bc:89:
45:cf:2e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:50 2026 by rpki-client