Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/fni4F9UqmVq6XjkfQM2mlICXn2A.roa
File: fni4F9UqmVq6XjkfQM2mlICXn2A.roa (raw, json)
Hash identifier: /xTY9wO0RVS1lCPmi0MbtNS2MzThX4qwZ8rkpFYNO4Y=
Subject key identifier: 7E:78:B8:17:D5:2A:99:5A:BA:5E:39:1F:40:CD:A6:94:80:97:9F:60
Certificate issuer: /CN=5157c87d111c8050fd5c9ac2b06be62323675033
Certificate serial: 019CFB4689A612C2832C2824D5A6F7863A68
Authority key identifier: 51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/fni4F9UqmVq6XjkfQM2mlICXn2A.roa
Signing time: Tue 17 Mar 2026 10:10:29 +0000
ROA not before: Tue 17 Mar 2026 10:10:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58082
IP address blocks: 109.233.128.0/21 maxlen: 24
109.233.128.0/22 maxlen: 24
109.233.132.0/22 maxlen: 24
2a01:9300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:46:89:a6:12:c2:83:2c:28:24:d5:a6:f7:86:3a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5157c87d111c8050fd5c9ac2b06be62323675033
Validity
Not Before: Mar 17 10:10:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e78b817d52a995aba5e391f40cda69480979f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:09:62:5e:d7:d5:9b:14:ff:7d:e7:0b:8b:
db:e9:72:37:1e:78:1c:eb:2b:bd:d6:da:ec:31:4f:
56:4c:47:3f:5c:18:55:82:bc:5b:37:af:59:ab:48:
37:10:c1:d2:5d:29:90:02:30:d5:bc:16:09:01:eb:
d1:aa:53:23:7a:1b:8a:89:26:83:5c:43:7b:2a:07:
0d:6d:12:8d:0c:d0:12:4e:3a:ed:e8:88:eb:db:4e:
bb:0e:ae:5e:62:9f:c0:05:61:3a:59:5e:80:75:5f:
f7:9f:5d:05:26:b2:45:e8:35:00:91:dc:75:7b:98:
0e:66:c6:17:1e:93:26:00:05:8d:8b:72:f0:58:25:
00:12:98:72:8c:a0:3d:48:f9:8d:06:32:0c:16:8b:
4d:0b:65:ed:eb:fb:b0:c7:8c:6a:84:c0:61:b6:82:
85:22:1e:33:07:f6:0e:a9:21:6a:a8:a7:a9:9a:95:
74:1a:7d:aa:98:14:e4:d4:ef:02:fe:be:97:79:97:
a9:5f:62:a5:4c:0e:48:65:44:f9:58:f7:7e:3b:38:
dd:cc:27:d2:ca:9e:dc:af:fc:ba:d2:f0:7a:ce:82:
1c:24:37:20:7f:d2:19:30:72:bf:8e:a0:46:cc:1e:
24:82:4a:b0:d7:8a:7a:f7:58:1b:d5:d7:cc:53:a6:
40:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:78:B8:17:D5:2A:99:5A:BA:5E:39:1F:40:CD:A6:94:80:97:9F:60
X509v3 Authority Key Identifier:
keyid:51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/fni4F9UqmVq6XjkfQM2mlICXn2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.128.0/21
IPv6:
2a01:9300::/32
Signature Algorithm: sha256WithRSAEncryption
c4:77:bd:1d:ff:4e:c4:a5:3e:02:d3:9d:31:a8:ef:48:44:89:
22:e1:f3:65:9a:85:c3:ea:e6:fb:8e:a4:60:7f:c3:88:99:af:
0f:cf:b5:18:e7:a3:3a:92:89:31:a0:b0:68:1d:ea:fa:b6:ec:
02:f1:36:71:f3:35:11:81:79:19:a1:f6:13:a0:43:50:e4:aa:
ff:07:06:ca:58:82:ed:4c:d3:c0:cb:f4:34:e2:c8:96:32:8d:
be:99:62:a5:8a:93:56:e7:5b:7d:99:86:31:a5:43:aa:fa:49:
41:72:91:0a:35:ec:00:c7:58:be:d1:d9:79:4b:23:d7:d8:ba:
eb:f2:b7:58:1f:00:7f:df:83:72:a5:40:27:30:7a:33:ac:50:
fb:78:71:16:47:4f:a3:c7:7e:56:85:69:02:ea:9f:c8:de:b2:
a8:79:7b:33:bd:b2:ab:9f:ad:ed:09:7b:72:3f:91:62:7e:e3:
a1:aa:95:3e:65:9c:d1:3f:ee:db:5f:4e:06:dd:24:bc:28:02:
38:4c:4e:ba:1d:03:73:5a:59:89:4f:f8:13:0f:98:30:c0:7c:
5c:2c:3e:8c:73:19:20:44:7b:94:47:51:d7:d9:9c:52:84:e6:
7a:a6:02:b6:93:5d:39:55:a4:c7:56:db:5b:21:16:f4:3e:ec:
99:9c:9c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:03 2026 by rpki-client