Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9c-ul7Gy6lfMyugoZqabJu4AuME.roa
File: 9c-ul7Gy6lfMyugoZqabJu4AuME.roa (raw, json)
Hash identifier: xV1v3iEBsCcprFBmPwRPaeMj/UYI3EW2vvUQ9eojFNY=
Subject key identifier: F5:CF:AE:97:B1:B2:EA:57:CC:CA:E8:28:66:A6:9B:26:EE:00:B8:C1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D19E1B255ECD21B0E944F879E77DFED1F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9c-ul7Gy6lfMyugoZqabJu4AuME.roa
Signing time: Mon 23 Mar 2026 08:48:34 +0000
ROA not before: Mon 23 Mar 2026 08:48:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205175
IP address blocks: 45.91.195.0/24 maxlen: 32
87.121.220.0/24 maxlen: 24
2a00:1728:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:e1:b2:55:ec:d2:1b:0e:94:4f:87:9e:77:df:ed:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 23 08:48:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5cfae97b1b2ea57cccae82866a69b26ee00b8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:94:14:19:3e:c4:2e:69:fe:96:5b:ac:34:
f9:f6:68:4a:85:0d:1c:bb:4c:57:bd:66:88:17:53:
85:d9:32:75:64:5e:d6:ed:49:35:52:45:25:d3:0c:
48:a1:37:4b:45:9a:bc:80:d4:25:39:f3:38:b1:e6:
3a:04:6f:db:a7:5a:6f:49:df:7e:24:bb:c8:92:22:
0f:d4:a0:83:60:23:16:de:e1:c6:20:86:13:bd:0d:
e0:7a:e5:d1:4c:cc:de:3d:03:dc:ca:6a:d0:d1:17:
4f:4f:d2:eb:82:a3:df:de:68:f2:d4:ed:e4:b2:70:
5a:f9:0a:3b:9f:b9:60:3b:96:5a:5b:3c:45:a7:4c:
ea:b0:69:e2:79:5b:07:f9:eb:9d:a0:f5:c9:7f:fe:
be:c9:fe:4d:0c:5d:0c:c2:36:e6:b0:1c:bb:a1:59:
c0:09:32:78:3b:c2:54:e6:bf:bf:8f:1d:c5:b3:c6:
cd:2f:56:11:0b:b0:38:c3:b4:a5:cf:e1:a2:82:1f:
4c:47:da:e6:60:ea:2f:c6:68:7e:3d:29:4e:b4:b1:
2e:9b:7a:91:4a:42:9b:dc:d3:ae:f2:3d:cf:66:95:
36:d8:15:c6:42:5c:0e:50:e9:f8:27:28:0b:54:5c:
87:84:31:ef:74:21:d2:18:b2:cf:ba:33:40:9f:b0:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CF:AE:97:B1:B2:EA:57:CC:CA:E8:28:66:A6:9B:26:EE:00:B8:C1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9c-ul7Gy6lfMyugoZqabJu4AuME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.195.0/24
87.121.220.0/24
IPv6:
2a00:1728:31::/48
Signature Algorithm: sha256WithRSAEncryption
2a:15:2d:50:6f:0a:70:26:6f:3f:16:96:4b:d6:8e:d7:61:16:
ba:8b:c9:89:53:7e:9e:3f:8f:b6:e9:97:e2:95:c5:2a:66:b5:
23:9f:98:20:fd:bc:58:2d:41:7f:0b:21:06:a6:3b:2c:e9:37:
cb:d1:68:7b:d7:ab:d0:93:85:6a:81:b1:d0:e6:df:45:7e:79:
dc:d0:6c:91:c0:5b:da:c1:ea:d3:4b:21:3c:c7:57:46:89:5a:
e9:b5:5b:b6:13:d7:f9:4f:24:1e:ae:a8:4d:25:63:53:50:42:
04:8e:47:f5:b8:9c:cd:07:58:a2:24:f5:39:3d:19:c6:99:47:
15:d8:7d:c1:ac:3c:97:b0:d6:13:53:42:2a:60:89:a6:5f:2c:
de:e2:44:02:ef:66:be:eb:2b:3f:c5:04:5b:00:d4:b9:f4:99:
69:19:4c:4e:01:e3:68:b4:c3:82:e9:b8:30:31:1e:c1:0e:9e:
f8:d9:d4:32:1e:b5:35:e4:bb:da:35:39:ff:28:18:5d:ff:83:
cc:87:0a:0d:d4:74:0e:d2:b1:07:03:3c:7c:a2:86:7f:36:2a:
ea:b9:64:1a:99:99:96:47:15:cd:f9:40:9a:e4:67:d3:09:93:
38:19:8d:aa:42:51:60:d6:70:07:4d:5c:8b:9b:60:01:e7:69:
70:9f:12:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:48:35 2026 by rpki-client