Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/1-8-9AuENiX1nQK68jdWDU7AN2UU.roa
File: 1-8-9AuENiX1nQK68jdWDU7AN2UU.roa (raw, json)
Hash identifier: eYe4nG8cfHyj0bQa4PtsDLyspDOBkb74jmYyTxJzxnw=
Subject key identifier: FB:CF:BD:02:E1:0D:89:7D:67:40:AE:BC:8D:D5:83:53:B0:0D:D9:45
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 019EE1C69470038FC3C0C94E5032B2541B6B
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/1-8-9AuENiX1nQK68jdWDU7AN2UU.roa
Signing time: Fri 19 Jun 2026 21:25:48 +0000
ROA not before: Fri 19 Jun 2026 21:25:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219426
IP address blocks: 194.180.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:c6:94:70:03:8f:c3:c0:c9:4e:50:32:b2:54:1b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jun 19 21:25:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbcfbd02e10d897d6740aebc8dd58353b00dd945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:c4:07:79:12:33:05:fa:0d:f5:0a:bd:d8:
80:43:b9:7d:ba:d5:dd:a6:95:e2:2c:c5:07:bf:a2:
b5:28:44:aa:0c:6f:0a:d0:45:b0:21:4a:46:36:92:
18:cc:cd:1e:06:16:08:32:3f:3c:19:d3:4d:91:92:
44:3e:3f:21:34:08:19:46:62:1b:51:55:c4:a6:b8:
54:4f:a4:2e:4e:32:bd:c2:31:20:c5:d4:c5:74:5a:
81:73:40:b5:1d:db:68:91:e8:99:78:ea:44:b9:fd:
36:90:ea:77:59:62:f6:d0:e1:be:68:13:65:76:99:
43:f0:5e:8e:b2:c6:5d:d2:e5:fc:40:1f:30:c9:3b:
ca:43:71:16:2b:db:b0:62:e2:b0:5e:51:e5:61:d2:
67:c3:58:69:be:15:5d:52:c3:09:93:b6:a6:14:ff:
7a:be:67:12:2b:9f:1e:07:d7:e0:59:d5:ec:fa:01:
82:2b:2d:b9:07:02:7e:8f:75:e6:e5:78:94:3a:70:
78:48:7f:14:39:b9:be:dd:a2:39:94:4a:e8:4f:73:
5b:3f:f7:e5:06:5e:60:06:f4:09:de:11:1c:20:09:
fb:ff:fd:df:7f:50:b3:63:eb:ef:25:11:b7:2e:43:
32:9a:8a:ac:8f:ce:35:b1:5c:f1:5d:ab:c9:e4:ff:
57:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CF:BD:02:E1:0D:89:7D:67:40:AE:BC:8D:D5:83:53:B0:0D:D9:45
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/1-8-9AuENiX1nQK68jdWDU7AN2UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:7a:ac:30:a0:7e:41:9b:c6:30:b4:3c:d9:a0:c3:2e:b8:90:
fb:f6:c8:04:be:3b:5a:60:0b:37:40:87:95:02:d0:50:a1:a7:
b1:49:3f:d4:b1:7e:ed:1b:a0:ab:14:f8:b5:c5:9a:8b:d9:20:
8e:77:96:9e:93:65:77:16:51:c8:29:90:21:19:80:0b:89:ee:
9a:f1:5d:20:b1:b8:d7:5f:67:f8:72:57:fd:6b:ce:ca:69:35:
5b:71:4f:3c:d6:40:7c:96:19:29:53:1b:b4:1c:aa:2d:f2:e4:
92:aa:90:b9:6f:5c:4c:cd:b9:2d:b6:68:53:fe:7c:dd:40:47:
2e:8b:5f:08:a2:3e:8b:6f:ed:8c:63:4a:6e:24:ef:fe:59:2c:
7a:f1:b8:50:58:57:a1:d6:0a:1f:d0:64:01:b7:78:3a:2f:12:
69:f8:c8:11:07:7d:09:5b:33:26:fa:2e:7f:d8:20:97:1b:c1:
ea:e5:df:45:ee:23:70:85:91:13:ae:8f:25:50:4c:69:e7:c1:
65:ab:32:78:b1:87:7f:bc:4f:61:96:b8:0a:92:8f:9c:ae:aa:
ee:b0:29:08:80:e0:a3:5e:dd:54:59:8b:16:3b:bc:49:0a:7a:
1e:55:a3:ff:98:d1:d7:59:e6:58:3e:66:8b:38:5e:d3:4a:61:
c6:79:3d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:21:13 2026 by rpki-client