Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/zN9zshVcbLaxGmPY9IoxTTh46cE.roa
File: zN9zshVcbLaxGmPY9IoxTTh46cE.roa (raw, json)
Hash identifier: lwvqsUUAUGcqsHo7wPkCfnsjzH9q3csw70U8jkFV6t4=
Subject key identifier: CC:DF:73:B2:15:5C:6C:B6:B1:1A:63:D8:F4:8A:31:4D:38:78:E9:C1
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 01A19BD0549A715793DE2D9D56CEDADB3339
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/zN9zshVcbLaxGmPY9IoxTTh46cE.roa
Signing time: Mon 02 Nov 2026 10:31:23 +0000
ROA not before: Mon 02 Nov 2026 10:31:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9
IP address blocks: 188.0.131.0/24 maxlen: 24
188.0.144.0/24 maxlen: 24
188.127.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:d0:54:9a:71:57:93:de:2d:9d:56:ce:da:db:33:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Nov 2 10:31:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccdf73b2155c6cb6b11a63d8f48a314d3878e9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:05:72:84:8b:7c:0d:11:b1:91:a5:77:50:
f5:0d:d5:b8:f7:b2:a5:b3:8a:0e:3a:52:b3:2f:cb:
2e:59:95:54:09:de:00:39:38:a0:23:be:45:be:f0:
59:f8:4e:15:7b:dd:89:e0:4a:44:3d:8d:3c:18:e7:
91:51:c7:67:33:72:7a:86:24:62:37:0f:e2:fa:59:
25:f2:7c:f6:89:a6:ed:4d:af:78:81:a0:78:a2:34:
98:28:71:67:23:75:e0:6a:c6:ae:22:e8:5c:90:9e:
dc:0b:1c:af:70:47:20:ef:0a:d6:1f:48:f2:1c:a2:
3e:63:98:be:36:91:3a:1b:72:3c:38:45:7f:9d:7b:
a0:c6:46:bd:f9:7a:87:6c:60:e9:bc:e7:a6:a5:a7:
d0:d1:e3:36:6f:00:ea:89:60:60:fe:a4:c1:3f:8a:
2f:b6:b1:4b:30:1b:be:00:82:36:eb:6d:9c:fa:00:
06:5b:36:58:de:78:d0:d8:ae:2c:e2:4f:b2:2e:1d:
26:24:f2:b7:17:0c:cf:03:1c:3d:ad:c4:2a:c2:bb:
5e:0e:c3:38:31:e5:ec:4f:d8:01:77:91:72:43:1e:
c5:68:63:2b:45:fe:8f:5b:81:d9:b9:b8:fd:1a:93:
b9:e5:77:76:62:da:ac:02:28:63:61:1f:21:9a:15:
e4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DF:73:B2:15:5C:6C:B6:B1:1A:63:D8:F4:8A:31:4D:38:78:E9:C1
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/zN9zshVcbLaxGmPY9IoxTTh46cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.0.131.0/24
188.0.144.0/24
188.127.37.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:10:76:8c:c6:4d:9d:23:2f:e5:56:aa:aa:3b:e8:9f:1d:ff:
a6:d7:27:39:5b:c6:a1:c5:2b:94:66:a7:4c:54:af:99:a9:3d:
a3:c7:fb:fe:63:03:ad:b4:fb:73:e8:b7:a3:51:03:15:97:c4:
2a:6d:60:99:94:12:1b:ed:84:b5:5c:f3:c7:3a:1c:b9:ad:7e:
56:bc:36:af:f0:aa:3e:19:dd:2e:4f:5d:49:6d:e6:88:24:4e:
c7:66:a0:23:86:1d:fd:3b:3e:3b:00:08:c9:a6:a3:79:af:90:
ae:21:56:c5:9e:01:7a:ee:e7:7f:86:b3:21:d8:76:e7:3e:19:
72:f8:1b:60:31:17:a9:3e:3f:c7:98:7e:e1:06:5d:14:da:5b:
29:1e:e9:07:db:9e:14:ce:c8:5d:85:1a:66:b7:60:50:cf:41:
fd:a5:10:e3:c1:fe:7d:7e:75:c6:58:c4:79:7c:d8:52:03:e3:
d0:f2:99:00:4c:ce:f8:65:86:cb:23:44:f8:d2:02:6d:30:97:
df:55:eb:a8:d9:6c:9a:18:9f:a0:ef:bd:6b:49:b0:4b:4b:f1:
75:45:c6:07:88:dc:47:fb:0b:ba:62:b5:72:61:35:57:89:73:
df:27:55:57:fb:88:9f:40:5d:87:45:ce:db:cf:d0:58:91:ae:
39:7e:cf:f5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaGb0FSacVeT3i2dVs7a2zM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjEwZjIyNTkwOTNhYWY0NTI4NTkyMmE1ODhlOWE2NjFh
YmE5ZmEwHhcNMjYxMTAyMTAzMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2RmNzNiMjE1NWM2Y2I2YjExYTYzZDhmNDhhMzE0ZDM4NzhlOWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaQFcoSLfA0RsZGld1D1DdW497Kl
s4oOOlKzL8suWZVUCd4AOTigI75FvvBZ+E4Ve92J4EpEPY08GOeRUcdnM3J6hiRi
Nw/i+lkl8nz2iabtTa94gaB4ojSYKHFnI3XgasauIuhckJ7cCxyvcEcg7wrWH0jy
HKI+Y5i+NpE6G3I8OEV/nXugxka9+XqHbGDpvOempafQ0eM2bwDqiWBg/qTBP4ov
trFLMBu+AII2622c+gAGWzZY3njQ2K4s4k+yLh0mJPK3FwzPAxw9rcQqwrteDsM4
MeXsT9gBd5FyQx7FaGMrRf6PW4HZubj9GpO55Xd2YtqsAihjYR8hmhXkTwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMzfc7IVXGy2sRpj2PSKMU04eOnBMB8GA1UdIwQY
MBaAFJ0hDyJZCTqvRShZIqWI6aZhq6n6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQt
NDM4NDNjMmU5NDNiLzEvek45enNoVmNiTGF4R21QWTlJb3hUVGg0NmNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQtNDM4NDNjMmU5NDNi
LzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvACDAwQA
vACQAwQAvH8lMA0GCSqGSIb3DQEBCwUAA4IBAQAMEHaMxk2dIy/lVqqqO+ifHf+m
1yc5W8ahxSuUZqdMVK+ZqT2jx/v+YwOttPtz6LejUQMVl8QqbWCZlBIb7YS1XPPH
Ohy5rX5WvDav8Ko+Gd0uT11JbeaIJE7HZqAjhh39Oz47AAjJpqN5r5CuIVbFngF6
7ud/hrMh2HbnPhly+BtgMRepPj/HmH7hBl0U2lspHukH254UzshdhRpmt2BQz0H9
pRDjwf59fnXGWMR5fNhSA+PQ8pkATM74ZYbLI0T40gJtMJffVeuo2WyaGJ+g771r
SbBLS/F1RcYHiNxH+wu6YrVyYTVXiXPfJ1VX+4ifQF2HRc7bz9BYka45fs/1
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:39:02 2026 by rpki-client