Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/n-LkYEYl_BKToTd94568MGgE5jc.roa
File: n-LkYEYl_BKToTd94568MGgE5jc.roa (raw, json)
Hash identifier: dbNcQZB+XqGNZ6CWLvpvwNF67hivn9OZiLltxklIlbE=
Subject key identifier: 9F:E2:E4:60:46:25:FC:12:93:A1:37:7D:E3:9E:BC:30:68:04:E6:37
Certificate issuer: /CN=c24d1a436b8d95cd6c2a5d038b7a10b5ee85ecf6
Certificate serial: 019F2368F33A459219E2896908643182D5C8
Authority key identifier: C2:4D:1A:43:6B:8D:95:CD:6C:2A:5D:03:8B:7A:10:B5:EE:85:EC:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/n-LkYEYl_BKToTd94568MGgE5jc.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8708
IP address blocks: 194.102.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f3:3a:45:92:19:e2:89:69:08:64:31:82:d5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24d1a436b8d95cd6c2a5d038b7a10b5ee85ecf6
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fe2e4604625fc1293a1377de39ebc306804e637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:47:b6:8e:fb:b4:94:19:f2:2d:2f:d6:cc:ce:
8e:ef:9d:c0:ec:fb:20:0b:ea:f6:12:66:a7:66:0b:
26:84:f6:10:7b:1a:93:a0:67:e8:4f:21:9e:60:48:
00:db:81:e7:0c:0b:78:35:69:6c:69:2f:63:f9:aa:
4d:7e:17:70:70:24:8a:e9:cf:c5:df:13:d6:43:f0:
b1:1e:9b:53:22:57:f7:ea:9e:8b:31:32:fd:00:15:
35:61:37:19:3a:2b:5d:70:fb:78:da:4a:5b:82:6a:
16:68:e1:a8:48:5c:79:52:eb:c3:0b:29:5f:a0:31:
b4:de:2b:a5:9f:99:8e:57:6f:ad:16:1b:ad:28:27:
2f:6a:75:70:8f:c1:f9:15:e2:10:22:24:55:e0:62:
7b:98:8a:75:6b:22:c6:72:b6:b0:d3:41:22:55:f1:
95:f9:47:09:b2:f1:03:7c:e9:58:cc:ab:3f:1e:47:
0d:91:51:63:e5:eb:cf:54:68:2d:7f:67:a5:e4:13:
76:8d:d7:b4:f4:46:db:de:27:5a:f0:80:50:17:db:
4c:75:8c:e8:ce:c9:70:cd:fb:2a:9e:3d:6e:2c:18:
38:09:4f:7b:c0:78:85:3e:02:40:f6:22:34:5b:db:
0f:9a:9f:ed:cc:77:f2:97:d0:70:61:12:41:c2:6b:
17:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E2:E4:60:46:25:FC:12:93:A1:37:7D:E3:9E:BC:30:68:04:E6:37
X509v3 Authority Key Identifier:
keyid:C2:4D:1A:43:6B:8D:95:CD:6C:2A:5D:03:8B:7A:10:B5:EE:85:EC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/n-LkYEYl_BKToTd94568MGgE5jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.190.0/24
Signature Algorithm: sha256WithRSAEncryption
92:da:e6:42:76:56:17:57:dd:13:5f:b4:c7:37:91:76:be:1b:
80:28:d8:9c:40:1a:a5:0a:09:c0:29:48:ad:4c:d1:68:38:6e:
0a:52:ff:13:3d:26:2f:5c:0b:0a:1c:b4:e8:c2:1b:ad:5e:86:
a8:e7:0e:9b:93:4a:d1:74:b4:5c:99:57:1a:f4:a9:37:04:50:
55:3a:a0:a6:0a:1f:c1:f0:be:e2:11:2c:8b:d5:9a:aa:80:d5:
50:74:6a:7d:9f:bb:a7:8d:a5:4f:61:00:11:10:86:4d:83:33:
a3:46:f1:aa:51:09:7e:c0:47:00:bf:3f:92:83:e5:52:02:8b:
be:2b:98:22:c6:8a:11:5d:c4:a3:f7:ad:2e:2a:8a:8a:ee:6b:
8a:a2:87:0e:01:da:4b:8e:1e:e7:a2:c5:8c:33:d5:5e:45:58:
3a:61:8d:e3:d6:27:bc:ef:89:8a:2d:f5:8f:77:15:2d:63:4b:
e1:fd:bd:08:f2:fb:fe:b3:f8:74:bc:ee:8d:f9:75:d4:00:a5:
1c:79:46:53:ab:07:5f:5d:f1:11:af:61:31:41:4b:7a:eb:75:
3a:1e:a1:03:3e:3d:a1:1e:d0:26:3e:dc:fd:92:c7:9c:43:0c:
4e:d0:fe:8c:15:bd:ba:3f:cd:15:e6:22:5f:92:74:2c:ba:c4:
8f:3c:aa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:10 2026 by rpki-client