Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/n1yEN-tJZUUUhAbfI7e_lDzeHAQ.roa
File: n1yEN-tJZUUUhAbfI7e_lDzeHAQ.roa (raw, json)
Hash identifier: Zbw0Y+Nehs78yQDHmr1Fak6mRWBOoL3ytc/RgOAnIzQ=
Subject key identifier: 9F:5C:84:37:EB:49:65:45:14:84:06:DF:23:B7:BF:94:3C:DE:1C:04
Certificate issuer: /CN=ce10101388b7ce378707993a0576aa3ddd95a979
Certificate serial: 01A0F2526023E6C6E24F121F3EFE3D2034FA
Authority key identifier: CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/n1yEN-tJZUUUhAbfI7e_lDzeHAQ.roa
Signing time: Wed 30 Sep 2026 12:37:59 +0000
ROA not before: Wed 30 Sep 2026 12:37:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209163
IP address blocks: 193.109.250.0/24 maxlen: 24
193.109.251.0/24 maxlen: 24
193.239.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:52:60:23:e6:c6:e2:4f:12:1f:3e:fe:3d:20:34:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10101388b7ce378707993a0576aa3ddd95a979
Validity
Not Before: Sep 30 12:37:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f5c8437eb496545148406df23b7bf943cde1c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dc:52:6d:18:26:e0:4b:1f:39:fd:ec:87:bd:
33:01:49:54:02:bd:b6:e4:8b:09:66:05:df:8e:58:
8d:16:b8:91:3a:5e:22:ff:99:ce:cd:95:0d:63:11:
3b:eb:6f:6b:ad:26:2a:d6:2e:50:67:ab:c3:a3:62:
29:68:3c:88:55:ae:d0:8e:0f:ee:e6:32:f1:c1:26:
86:37:d7:4e:96:4b:8c:75:5b:24:77:83:39:38:dd:
ef:ed:78:bd:aa:b7:48:0f:92:98:c1:db:d9:31:ec:
19:87:6c:58:46:9a:55:6e:fb:62:b8:45:68:94:99:
5b:29:5b:1e:43:8d:db:62:15:6e:8e:19:7c:ee:68:
2f:70:05:54:d9:b9:51:e2:13:2a:b1:96:6c:56:12:
a2:fc:35:47:9a:66:40:e4:c5:aa:c3:14:f3:9d:67:
7d:7c:43:3f:60:ec:ad:16:8d:39:9f:3d:6d:7b:6b:
10:00:11:c2:d2:74:67:34:b0:14:95:03:da:bf:16:
54:2c:e6:34:6a:91:06:77:b8:3d:b0:b5:5c:12:b8:
42:fe:13:5b:79:7a:75:bb:ce:22:82:7d:21:e4:12:
f6:49:49:c0:6f:dc:ab:9d:64:dc:14:75:33:7d:3c:
f4:fb:36:83:32:e8:95:24:84:e8:f8:ae:b4:4a:39:
ac:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5C:84:37:EB:49:65:45:14:84:06:DF:23:B7:BF:94:3C:DE:1C:04
X509v3 Authority Key Identifier:
keyid:CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/n1yEN-tJZUUUhAbfI7e_lDzeHAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.250.0/23
193.239.240.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ee:da:d6:79:48:01:e4:47:9c:bd:a2:97:4d:73:4d:fb:76:
37:0b:85:9c:f3:7f:3f:10:cd:df:ed:56:1b:2e:33:8f:06:66:
72:bd:be:90:5e:8d:3b:2c:64:00:9c:8f:26:99:63:62:1b:fb:
f3:99:31:93:9c:0a:2e:9f:21:bf:0b:2e:74:38:b0:50:5c:a0:
18:e5:fb:79:f4:be:1b:32:ed:d5:8c:ff:44:63:c9:fe:b5:17:
74:97:ea:e7:1d:a6:29:68:c6:34:f2:df:9c:3c:3e:4e:f5:b9:
d2:d3:a2:1e:6e:ba:b5:8b:18:57:ef:b3:e0:5c:91:c2:f2:c7:
c2:b4:eb:31:9c:5d:38:23:24:2a:54:a7:45:6d:ba:2b:08:16:
8e:5d:0c:e2:b5:b0:d9:f5:c9:64:3c:36:29:ea:a6:e7:88:82:
72:f8:91:6c:cf:20:41:e4:33:a0:d9:ff:76:03:b7:ea:74:3c:
d0:bc:e0:20:b4:34:47:33:73:8f:47:cf:65:d3:21:e3:ff:2d:
60:b4:8a:34:25:ae:ee:cd:4e:47:61:1e:8d:2a:50:d5:75:4a:
35:2a:33:6e:c4:97:6c:1b:61:c4:63:63:38:61:bc:94:99:e3:
db:22:cd:98:d1:17:8c:fe:5e:91:3e:52:ec:8f:87:00:29:f3:
b3:50:d8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:48:40 2026 by rpki-client