Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/1Ml0a3GV05dVKgyQm1AT6O8-qig.roa
File: 1Ml0a3GV05dVKgyQm1AT6O8-qig.roa (raw, json)
Hash identifier: vDmeyy3WLO0HE90pdx4TXzv29kbhC6H5/Xm0kajhfQI=
Subject key identifier: D4:C9:74:6B:71:95:D3:97:55:2A:0C:90:9B:50:13:E8:EF:3E:AA:28
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 01A068430F99A1EA85803B853401C6C8851E
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/1Ml0a3GV05dVKgyQm1AT6O8-qig.roa
Signing time: Thu 03 Sep 2026 17:13:40 +0000
ROA not before: Thu 03 Sep 2026 17:13:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51803
IP address blocks: 176.120.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:43:0f:99:a1:ea:85:80:3b:85:34:01:c6:c8:85:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Sep 3 17:13:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4c9746b7195d397552a0c909b5013e8ef3eaa28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:4f:9a:16:3f:b7:c3:18:ca:fd:87:74:c6:
e4:48:7d:e0:fd:0e:9c:3d:35:ff:c0:53:eb:65:1c:
7d:1e:1d:5a:69:5e:51:a3:25:20:88:85:02:c6:5d:
84:0f:65:8e:56:a3:22:e6:e3:79:85:f4:2b:4a:e6:
46:5a:fa:37:db:3e:6c:3c:17:9f:c7:74:96:88:f5:
31:fd:7d:9f:8b:dd:20:8e:16:77:a9:79:c8:47:49:
bb:c6:ad:f6:ec:02:46:dc:76:29:08:33:43:5b:8c:
b9:69:06:81:28:d0:c8:91:e4:f6:d0:a5:bf:b7:07:
b7:64:7f:47:ab:e6:45:05:62:01:da:50:05:82:96:
2d:25:d8:61:a5:f1:65:74:5e:04:6c:0e:7c:e1:4c:
95:58:f6:08:df:f1:3c:0a:fa:93:52:21:2b:b1:2b:
bf:11:8e:b7:79:d0:9a:e4:ed:90:32:53:9e:1c:25:
fd:89:73:0f:2c:ac:0b:af:1a:5c:a7:da:c2:6b:64:
ea:b0:95:47:36:ea:ed:0e:08:a7:18:c1:5d:36:2a:
a6:a3:19:0d:47:2a:b1:8a:b7:9e:6f:f8:e7:b6:fc:
fe:6b:40:45:7c:d4:85:f2:4f:9d:6c:a0:eb:99:19:
10:b4:20:07:7c:6f:0b:3b:ee:2d:06:90:e9:cb:02:
3b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C9:74:6B:71:95:D3:97:55:2A:0C:90:9B:50:13:E8:EF:3E:AA:28
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/1Ml0a3GV05dVKgyQm1AT6O8-qig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.98.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:60:a8:49:9b:d7:c6:0c:ef:9c:12:d0:fc:8f:0a:ae:80:03:
f2:3d:ba:12:00:9e:b7:55:33:be:2b:49:2d:f6:2d:48:a6:d7:
cb:30:1a:aa:81:39:0c:c1:a0:19:31:1e:d8:32:cd:af:24:d6:
8b:13:ed:da:bb:da:80:ec:10:5f:23:ba:81:7a:cb:d7:10:2d:
ee:a7:e1:e3:66:71:a2:95:31:99:34:c2:86:8f:d7:18:17:2b:
60:69:17:85:9e:37:c0:42:1e:28:8c:d4:52:31:e3:4b:34:e7:
03:1a:3c:ad:dd:0a:2d:e8:16:6c:f5:41:14:43:09:20:1e:fd:
92:e6:2a:b3:a3:f7:94:4a:07:f8:c6:5e:11:24:78:f7:67:23:
a5:29:cb:f5:59:ea:ed:0c:57:c1:83:12:d1:33:83:12:c8:7c:
1f:38:22:a3:ee:74:ca:18:a7:00:1a:6d:b5:37:2e:a1:85:7f:
ed:2d:b2:0e:66:00:e2:4c:a8:ab:27:ca:59:2f:54:8a:4f:51:
ea:82:2a:d4:5d:e9:6a:1c:b3:01:7b:93:a4:11:a0:ba:eb:ea:
3a:c1:8c:9c:12:f7:59:7d:dc:51:d1:4d:fd:4f:2c:57:43:da:
75:1f:90:a0:df:41:50:78:9a:0c:f9:6f:92:6c:29:56:09:35:
77:68:a7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:29:50 2026 by rpki-client