Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/9QdlknWZ4OMboGxjAADXJxO9UPA.roa
File: 9QdlknWZ4OMboGxjAADXJxO9UPA.roa (raw, json)
Hash identifier: sI6mV2VF/PMi0q/p4atmEH2bb6DPFyZGr7glssOf33c=
Subject key identifier: F5:07:65:92:75:99:E0:E3:1B:A0:6C:63:00:00:D7:27:13:BD:50:F0
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 019F7659A58008B01466A4A6A4ECC617F655
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/9QdlknWZ4OMboGxjAADXJxO9UPA.roa
Signing time: Sat 18 Jul 2026 17:50:14 +0000
ROA not before: Sat 18 Jul 2026 17:50:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202412
IP address blocks: 94.154.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:59:a5:80:08:b0:14:66:a4:a6:a4:ec:c6:17:f6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jul 18 17:50:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f50765927599e0e31ba06c630000d72713bd50f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:ce:5d:77:f4:ec:e8:08:88:19:71:78:a5:
8c:41:4f:49:d8:9b:24:1e:4f:af:d9:aa:e6:36:8b:
b4:bd:b1:8b:b0:51:27:2f:b9:01:f4:39:ef:8c:7e:
84:48:f3:95:c2:dd:d4:f2:ef:93:0d:f5:27:41:ec:
6a:bf:c6:69:28:d6:45:35:c7:47:bb:c3:fb:6d:cb:
a5:43:8b:e9:76:9d:49:d8:eb:1c:ab:3a:bd:22:bf:
d6:f4:7f:19:15:d7:1d:c1:79:ee:41:49:44:61:75:
6e:32:63:f0:71:5b:cd:ba:87:a2:0e:d5:62:48:9a:
48:f9:61:1b:70:40:fc:dd:3c:ae:af:d4:35:c1:f8:
b3:bd:e1:58:9a:d2:17:49:18:78:cc:e4:ef:d6:4f:
e2:cb:d2:c6:00:33:f3:fb:97:da:f8:c1:5b:2d:36:
c3:cc:71:50:44:1d:5e:87:41:66:0b:96:f8:cf:e0:
d7:75:e5:08:0c:9b:c7:b6:a4:47:b0:7e:15:42:1a:
81:f7:8c:b3:e7:93:f7:bb:fc:62:d0:22:e9:56:21:
c1:a9:e5:45:cd:fb:ab:d6:7f:c0:61:24:73:8c:ee:
0d:ef:50:50:0f:f4:25:fb:97:26:31:f4:a3:49:7c:
c1:43:74:ff:47:9a:d6:5b:97:35:9e:fb:ae:65:d3:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:07:65:92:75:99:E0:E3:1B:A0:6C:63:00:00:D7:27:13:BD:50:F0
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/9QdlknWZ4OMboGxjAADXJxO9UPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.46.0/24
Signature Algorithm: sha256WithRSAEncryption
42:59:92:f9:54:6e:bb:e9:8f:4d:fa:e9:28:35:f3:dc:44:af:
f4:d7:aa:db:09:7a:b1:f3:ad:83:bf:22:78:6e:56:c0:9e:94:
c2:74:ba:b0:b0:20:73:fa:cb:5a:a7:18:8d:df:ad:d2:51:3a:
4d:c0:e0:40:95:8e:10:5e:0f:8c:78:57:e7:2d:d7:27:c7:b5:
b7:14:25:ab:77:26:d6:7b:e2:32:f7:2f:9f:ea:37:60:22:67:
9b:0d:b2:b6:f7:9c:52:83:93:bd:06:14:ae:c3:c3:27:30:d4:
53:c2:59:af:66:e5:1c:ad:e3:f4:ba:a1:4a:a7:f5:69:7c:c7:
67:d9:82:2e:c6:9d:c4:c4:4f:04:74:ff:d1:bb:c4:d6:35:bb:
a8:a1:d8:3b:08:bf:87:ff:94:66:d9:58:91:df:34:90:6f:c7:
15:fe:8e:0c:90:66:c5:c9:d2:6f:d6:e0:2a:a5:3d:03:53:be:
fa:5d:4c:ea:74:ff:83:e0:dd:d1:40:ff:ce:42:67:d3:24:64:
52:2d:4c:cf:04:b4:55:25:c3:12:d9:df:73:72:3d:85:8f:a6:
d8:fb:56:4b:a3:17:22:4c:cd:be:50:fb:b7:26:39:31:bd:4a:
e3:27:cc:b7:36:2e:61:b6:ba:87:22:9c:aa:b1:aa:b8:8a:bb:
2c:44:df:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:39:40 2026 by rpki-client