Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/jO9SyJJYwAVFjKX5LgAdEPZOqcs.roa
File: jO9SyJJYwAVFjKX5LgAdEPZOqcs.roa (raw, json)
Hash identifier: 8HoVP5VELc7CzKN7Bn+BGOvO4Td1iICKlPMbMx4D+04=
Subject key identifier: 8C:EF:52:C8:92:58:C0:05:45:8C:A5:F9:2E:00:1D:10:F6:4E:A9:CB
Certificate issuer: /CN=734c3511cbff092816418be477cb553d66b5b84f
Certificate serial: 019DE08337805AF74CFECEB77BC643D3F2F4
Authority key identifier: 73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/jO9SyJJYwAVFjKX5LgAdEPZOqcs.roa
Signing time: Thu 30 Apr 2026 22:29:49 +0000
ROA not before: Thu 30 Apr 2026 22:29:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31463
IP address blocks: 109.71.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e0:83:37:80:5a:f7:4c:fe:ce:b7:7b:c6:43:d3:f2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=734c3511cbff092816418be477cb553d66b5b84f
Validity
Not Before: Apr 30 22:29:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cef52c89258c005458ca5f92e001d10f64ea9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6e:42:38:29:8f:53:2d:2b:09:ff:30:32:84:
31:bb:09:26:eb:64:34:f9:f6:7e:17:a9:0e:a5:9d:
86:5c:38:72:a9:4f:dc:4a:23:de:a2:7b:7b:38:f4:
6e:5a:f9:44:f6:ab:03:30:1b:f1:81:d4:39:a2:76:
5d:16:44:11:72:2f:dd:38:d4:6b:c8:04:ce:47:46:
9f:14:a7:99:65:13:af:ee:3d:fe:61:76:aa:09:29:
66:23:7a:14:e7:3f:ef:a1:6e:32:01:8b:b2:08:b4:
aa:29:70:6d:61:2c:01:90:11:08:8e:5d:8a:0d:3e:
cb:c2:21:81:84:f3:c3:6a:29:01:5f:be:ab:62:09:
1d:6e:a4:5a:4c:ba:e7:29:1c:a1:5f:dc:92:73:46:
c7:df:c1:ce:1f:54:cc:96:87:2b:38:98:c2:6c:24:
b5:c5:92:0c:ec:7c:31:b5:f9:68:36:c6:56:2d:e7:
b5:04:76:89:21:7c:6b:b5:6b:c7:83:bf:ef:c9:ef:
74:81:49:1f:7a:8e:04:90:0c:b3:7c:89:ee:53:58:
a7:72:67:12:7e:c1:70:74:ae:6e:2d:aa:a6:15:7a:
d0:ae:bf:19:69:ab:da:70:9c:40:50:b4:aa:6c:f8:
5c:b9:ae:4c:a2:4b:fa:de:94:86:8a:3e:d0:a1:6e:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EF:52:C8:92:58:C0:05:45:8C:A5:F9:2E:00:1D:10:F6:4E:A9:CB
X509v3 Authority Key Identifier:
keyid:73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/jO9SyJJYwAVFjKX5LgAdEPZOqcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.78.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f6:20:fc:e6:21:32:92:02:29:e6:05:35:41:89:d2:f5:49:
20:71:01:72:08:fe:6f:df:41:3a:c5:73:30:a0:3a:e6:ac:2d:
ba:15:40:31:36:6b:ef:e7:c7:d1:29:bf:5d:3d:e2:3b:ae:e1:
65:c3:a0:66:c5:a6:5e:ea:d4:44:56:a5:51:bd:ab:c1:82:12:
10:9f:1f:cc:05:ca:ce:a2:c2:6b:28:79:29:6d:cf:7e:2f:cb:
8e:f7:65:9e:59:9e:3f:53:bb:8f:ea:a4:6f:ca:b4:f2:67:2b:
54:b4:ed:ae:56:1a:65:91:27:1f:cb:70:a2:f3:54:ed:f4:05:
d6:21:b6:2f:19:91:8f:cc:64:17:4b:be:18:a1:e8:74:2a:a4:
de:c3:30:a3:2b:6f:3f:76:c3:97:85:e2:91:b5:d4:e1:0d:5e:
39:15:71:1a:0c:d5:d8:50:c0:cc:34:cc:22:34:b1:3e:9b:36:
e3:6c:2a:c8:48:c2:97:2f:dc:b0:43:7d:1b:98:3e:27:98:59:
d5:e3:49:9b:f3:f9:81:06:4a:2b:1e:f6:9e:9d:3f:34:db:d5:
84:1a:fe:62:a3:c8:40:37:36:1e:48:41:12:2d:b6:2f:5f:d7:
20:e1:7c:ee:b8:5c:64:80:e1:0b:f4:55:fd:e1:35:15:cb:78:
cc:dd:34:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:51 2026 by rpki-client