Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/4V-9xblXh3p4hsMcELpD2FlsUlA.roa
File: 4V-9xblXh3p4hsMcELpD2FlsUlA.roa (raw, json)
Hash identifier: kRr8MpAPoenaKhVsIA64eElM5LVWHVB6/SUqnX6gbUI=
Subject key identifier: E1:5F:BD:C5:B9:57:87:7A:78:86:C3:1C:10:BA:43:D8:59:6C:52:50
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01A05BDF3F4C63C9969D396D58A476AEDC8E
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/4V-9xblXh3p4hsMcELpD2FlsUlA.roa
Signing time: Tue 01 Sep 2026 07:29:12 +0000
ROA not before: Tue 01 Sep 2026 07:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197170
IP address blocks: 109.160.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:df:3f:4c:63:c9:96:9d:39:6d:58:a4:76:ae:dc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Sep 1 07:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e15fbdc5b957877a7886c31c10ba43d8596c5250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:43:03:72:14:c5:22:73:ec:34:45:23:a1:a0:
10:dd:4e:be:79:4f:f6:46:86:29:60:52:05:89:6d:
2b:b6:6b:a0:b8:3d:8c:ca:6d:25:1f:13:92:93:34:
32:37:3a:fa:89:57:4d:e2:77:6b:c5:6e:36:f5:02:
f3:86:07:6e:d6:d0:40:58:5b:cf:3c:85:3d:9a:23:
86:6d:97:c1:44:e1:94:28:02:b1:a0:5b:dd:5f:f5:
61:c6:83:0e:50:1e:39:50:e0:33:86:29:9a:08:fa:
2c:50:47:a6:ab:37:ec:5d:7c:ab:23:e7:8a:5b:e9:
33:d7:3f:b4:1b:3d:5f:07:5f:2c:f8:ef:4c:0c:31:
ac:76:c5:81:5d:51:4b:39:c4:2b:29:be:3f:22:d1:
39:b6:55:db:36:84:5f:51:33:71:5d:3b:c0:b0:e0:
5c:21:a2:de:28:c4:bd:f6:41:ca:40:d1:c2:b7:39:
35:ee:10:ad:d5:47:cc:13:d0:01:ec:9c:d9:aa:0c:
87:52:e7:77:31:be:ad:71:77:43:60:42:81:06:e8:
c8:93:ac:81:a3:4f:fc:6e:37:8e:07:ca:17:db:dd:
d0:9e:0f:ef:90:35:f9:82:2b:e5:e4:b8:44:34:de:
17:d4:ed:10:f8:ed:62:48:26:9e:3f:1a:63:ed:d1:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5F:BD:C5:B9:57:87:7A:78:86:C3:1C:10:BA:43:D8:59:6C:52:50
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/4V-9xblXh3p4hsMcELpD2FlsUlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.32.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:69:08:cb:b4:9a:51:5f:bd:53:d2:cd:b4:ad:77:c2:ed:b8:
4b:18:b6:46:1d:86:89:0a:2d:99:b8:55:28:c7:e7:73:d6:f8:
13:1e:2d:ca:f7:13:02:12:99:d0:eb:1d:01:4f:d6:00:a4:75:
9c:61:ca:1e:e0:22:c1:72:ec:ee:eb:c5:50:bf:cd:d3:b2:9d:
ca:b7:16:e8:07:37:6f:de:1c:f2:ac:9c:aa:5c:cf:c7:5e:03:
77:0b:1a:84:44:db:71:b5:35:51:0b:e9:39:42:5a:ae:a8:0e:
84:70:21:a6:65:d9:36:26:a3:82:5b:dc:b1:99:8b:8f:e2:20:
d6:6f:4e:a7:9d:98:6c:37:ae:6d:7d:4e:fe:6a:10:56:ea:07:
5c:01:14:be:4e:34:d2:1d:33:cd:51:23:a0:28:35:6c:eb:27:
40:c1:76:b9:a4:5f:29:7c:1f:7a:56:d5:be:12:80:2f:70:bb:
42:18:0d:79:ca:9b:6d:9f:38:d2:ac:c6:f3:97:f8:09:b6:90:
3b:d9:e2:2a:34:65:d5:88:ed:aa:63:8a:26:a8:bc:d1:33:ec:
5c:ff:fd:4c:50:92:55:dd:70:e9:57:ce:2d:9d:b2:89:d5:e4:
2e:fb:2b:28:8a:95:89:c2:93:89:f1:b7:ac:9b:f9:d6:96:6e:
0e:ae:cc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 03:06:41 2026 by rpki-client