Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/9x-vfw8iTv008gl1P6GePuhIq8U.roa
File: 9x-vfw8iTv008gl1P6GePuhIq8U.roa (raw, json)
Hash identifier: NhQXxFkfrbjDSJueXlQqwna/TV4lmQ6k87UbwJAjE+M=
Subject key identifier: F7:1F:AF:7F:0F:22:4E:FD:34:F2:09:75:3F:A1:9E:3E:E8:48:AB:C5
Certificate issuer: /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Certificate serial: 01A12020FDF40D65E069C500660FA9D79EBD
Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/9x-vfw8iTv008gl1P6GePuhIq8U.roa
Signing time: Fri 09 Oct 2026 10:06:35 +0000
ROA not before: Fri 09 Oct 2026 10:06:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198024
IP address blocks: 185.191.192.0/22 maxlen: 22
2a0a:1c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:20:fd:f4:0d:65:e0:69:c5:00:66:0f:a9:d7:9e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Validity
Not Before: Oct 9 10:06:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f71faf7f0f224efd34f209753fa19e3ee848abc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:05:8d:7a:30:43:1e:d3:8f:b6:33:09:7c:
dc:af:aa:76:f6:90:cb:bc:cc:16:0e:35:23:c8:01:
26:98:58:35:1e:ef:41:05:bd:28:24:82:a2:4f:17:
30:4b:b5:1d:3d:1e:dc:57:39:e4:c6:fd:74:86:da:
2d:95:86:02:3f:05:67:7a:78:a5:84:16:dc:59:29:
6b:57:d5:b2:44:0e:81:dc:87:c8:25:d0:45:55:19:
87:49:47:2f:c2:b6:c2:a7:e7:15:30:7f:13:e5:b8:
11:85:d8:ef:59:bb:a2:dd:00:a5:dc:82:aa:62:50:
14:ad:19:81:21:6c:2e:13:b0:94:75:7b:0a:dd:10:
27:99:fa:4d:84:4b:b1:a0:46:7c:8f:d1:cf:55:b4:
26:c3:92:4b:e7:67:9a:ec:b3:32:eb:df:6d:30:a0:
5e:54:65:d3:72:dd:05:0d:91:08:bc:22:54:17:52:
b4:fa:29:ea:8e:b2:a1:4d:18:2a:f7:a6:10:68:23:
6f:ee:96:55:74:06:65:88:0a:ad:da:34:6e:c7:a0:
c1:0e:8d:45:1e:d9:90:ba:a0:2b:b0:38:ef:c3:55:
0a:7d:d6:56:7e:d3:4b:8c:12:d0:be:87:56:66:62:
4d:25:f6:0c:59:8f:a1:07:b2:46:74:64:7c:73:1f:
3a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1F:AF:7F:0F:22:4E:FD:34:F2:09:75:3F:A1:9E:3E:E8:48:AB:C5
X509v3 Authority Key Identifier:
keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/9x-vfw8iTv008gl1P6GePuhIq8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.192.0/22
IPv6:
2a0a:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
ba:e1:d3:40:23:e4:b4:17:fe:ef:89:be:28:64:39:c4:16:83:
03:7e:f2:e6:5e:93:f5:2c:3f:13:88:88:8b:6b:36:88:41:65:
c1:4c:f9:c5:e5:87:a9:4b:93:6f:ff:40:63:4c:9b:bd:64:5f:
00:19:9b:cc:94:ef:d7:f7:30:17:6d:0d:50:9c:c7:ec:f3:f9:
fd:13:10:f8:4f:21:8f:bf:31:37:1b:9c:f4:2f:92:a0:a1:01:
b9:22:8c:d6:65:88:8a:87:a9:11:b1:da:1f:71:c2:67:af:f9:
87:53:65:d0:6c:fa:54:a9:da:13:83:81:4e:e4:ad:24:67:c9:
84:73:2c:e2:18:22:d5:85:7e:00:12:6c:98:2b:64:b7:96:b1:
bf:cb:a8:80:c0:7d:f7:e9:45:27:80:4e:ab:2d:26:5b:3e:0b:
d8:b8:f1:a9:07:ec:8d:cf:3e:8e:f2:70:4b:31:7c:2a:fd:a7:
6b:38:de:60:57:1d:36:3b:8e:0a:7d:73:1f:a7:12:72:0c:ca:
3a:94:41:ef:a2:64:10:e3:b8:da:03:14:b8:b3:f4:64:7a:78:
47:cb:90:6d:6c:85:5a:e8:fb:d3:f5:28:fe:ab:3a:77:21:27:
89:dd:39:c0:da:e1:ba:ed:de:cf:1b:f2:62:c0:0e:7f:16:12:
5c:b9:e2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:29:40 2026 by rpki-client