Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/9R-hF03pvKN9Tr1XUu-pJjdJz5s.roa
File: 9R-hF03pvKN9Tr1XUu-pJjdJz5s.roa (raw, json)
Hash identifier: PNCji/dwuNWe8P78z94y85iajnIaoysJ5zZCU1SO3uY=
Subject key identifier: F5:1F:A1:17:4D:E9:BC:A3:7D:4E:BD:57:52:EF:A9:26:37:49:CF:9B
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A08965FBA0537033D622C771F7F5201DCE
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/9R-hF03pvKN9Tr1XUu-pJjdJz5s.roa
Signing time: Thu 10 Sep 2026 03:39:17 +0000
ROA not before: Thu 10 Sep 2026 03:39:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149766
IP address blocks: 103.203.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 16:18:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:65:fb:a0:53:70:33:d6:22:c7:71:f7:f5:20:1d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 10 03:39:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f51fa1174de9bca37d4ebd5752efa9263749cf9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:3f:37:aa:d1:fe:bb:28:30:51:d3:85:09:
15:b4:0a:0c:8f:c2:d6:1c:bc:37:96:8b:aa:84:78:
6e:4d:45:18:42:6f:63:5a:01:08:c7:ab:d3:fb:2d:
dc:af:9a:1f:ed:0a:de:78:39:09:57:36:bb:9b:19:
b7:a8:dd:23:6b:f8:24:7a:ae:30:57:de:f2:9b:80:
10:02:9a:32:a4:9e:85:80:6a:f5:a7:73:a5:05:a5:
50:8a:47:f9:6f:39:cb:aa:b5:ae:5a:28:0c:1f:75:
27:82:7e:b3:02:f9:81:10:b4:9b:51:51:d3:3f:4a:
91:5a:cc:70:5d:d1:04:91:84:17:bb:38:7f:dc:d5:
15:05:db:ff:73:6e:d7:99:20:3a:19:35:12:bf:89:
02:36:80:84:bc:5f:d7:9e:ac:1c:f5:61:a5:c3:8b:
c4:04:fe:38:92:d0:57:39:3a:c1:d2:85:3c:6d:5b:
d2:90:3c:56:9b:34:ff:42:a7:77:1b:75:6c:ae:9e:
2b:16:75:50:a8:4f:3d:36:52:37:0d:b1:66:94:c5:
13:38:77:e1:73:ea:b4:b5:a3:49:bd:a3:42:c8:6d:
4d:1c:e3:f3:d4:bb:e6:98:d5:35:ef:05:b9:42:94:
ac:f8:f2:24:82:a0:ec:ee:45:c7:fe:26:1a:3b:f6:
59:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1F:A1:17:4D:E9:BC:A3:7D:4E:BD:57:52:EF:A9:26:37:49:CF:9B
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/9R-hF03pvKN9Tr1XUu-pJjdJz5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.203.42.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:35:15:10:b1:11:b6:e9:e8:f5:d2:4e:c4:1a:82:96:60:99:
5a:97:d9:65:f4:f2:5f:ba:39:a2:0d:4a:22:3d:60:9a:a1:6a:
8c:4d:8b:e7:5d:bc:92:41:5f:3f:c4:01:15:3d:ed:8d:16:e3:
15:45:ae:95:7d:b5:f6:29:02:2e:75:61:3d:03:a9:76:1c:9f:
f7:3e:a1:75:b4:71:86:11:d6:99:81:aa:05:e9:da:b0:80:bb:
f1:5e:db:88:15:29:f4:6b:ba:7a:b1:c6:ea:fc:cb:d1:b3:4b:
e6:2e:b2:d3:d9:bb:70:ad:82:eb:53:e3:5f:71:a5:d1:09:a1:
86:71:f2:bc:17:4e:ee:8b:75:18:6b:0f:5c:dd:60:37:f0:25:
64:25:4d:93:53:b0:cb:e1:c8:98:9e:4f:63:ef:55:65:d5:38:
e0:56:d8:af:48:a8:5d:5c:e5:61:a4:76:c2:44:91:0a:eb:59:
83:2a:7d:08:e0:b9:09:9e:c1:57:13:33:cd:9a:1c:6e:f4:5d:
1d:de:5f:21:d1:63:81:2d:e3:19:a9:d9:01:b2:8b:b8:ab:9b:
cc:57:d8:a3:84:ee:bd:e1:b2:db:c2:9a:5e:40:c5:70:15:e7:
38:c1:03:b7:a5:24:d9:d7:42:6f:cd:a6:b4:60:cb:50:9f:86:
40:6a:cc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:28:08 2026 by rpki-client