Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/x6SHp9jb9Y7ursmGdVTA1j4Xzyw.roa
File: x6SHp9jb9Y7ursmGdVTA1j4Xzyw.roa (raw, json)
Hash identifier: +x3+qwk1rADPGvdSwpgxmTwHooTjFM1mg8Cp4QbMCTg=
Subject key identifier: C7:A4:87:A7:D8:DB:F5:8E:EE:AE:C9:86:75:54:C0:D6:3E:17:CF:2C
Certificate issuer: /CN=9b29673ed4a3911f73d4b7bde1b1e73fb97835a9
Certificate serial: 019B77589091F7619B62DD9B0AD2CE1F72CA
Authority key identifier: 9B:29:67:3E:D4:A3:91:1F:73:D4:B7:BD:E1:B1:E7:3F:B9:78:35:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mylnPtSjkR9z1Le94bHnP7l4Nak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/x6SHp9jb9Y7ursmGdVTA1j4Xzyw.roa
Signing time: Thu 01 Jan 2026 02:17:31 +0000
ROA not before: Thu 01 Jan 2026 02:17:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31146
IP address blocks: 194.48.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mylnPtSjkR9z1Le94bHnP7l4Nak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:90:91:f7:61:9b:62:dd:9b:0a:d2:ce:1f:72:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b29673ed4a3911f73d4b7bde1b1e73fb97835a9
Validity
Not Before: Jan 1 02:17:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7a487a7d8dbf58eeeaec9867554c0d63e17cf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:4d:cb:18:d9:c7:1b:4d:da:13:b9:3b:c4:
37:f7:c5:1c:e8:83:5c:9d:75:6d:02:f6:26:34:36:
13:30:2c:c7:a8:9f:55:af:3f:c3:86:28:ef:41:fa:
73:a6:a7:1c:cd:03:bd:3f:c8:83:5f:cb:38:26:cd:
b7:96:29:ed:ad:82:70:53:b1:0d:fa:e1:6a:29:07:
47:93:11:73:7d:97:e7:e8:4f:34:9e:4b:8d:c1:2f:
f4:d4:72:f3:c2:f4:2e:69:3b:28:c7:c4:f6:ec:3c:
01:3d:7c:a4:5c:69:d4:d6:50:5a:45:ee:a6:2b:55:
d5:51:c4:d1:28:a8:41:a0:d9:20:b9:17:2a:0a:97:
79:f9:51:13:c8:b2:62:67:07:26:f4:e1:0f:16:ba:
32:4c:c3:7d:dc:d2:ba:6c:78:99:4a:f3:0f:c6:56:
e5:0a:3d:97:0b:32:81:94:ef:aa:c4:7a:ad:ec:5f:
ae:97:9a:40:6f:9f:15:b5:d9:15:52:33:f8:1c:60:
12:fa:89:23:d9:33:a7:75:aa:f3:48:f7:b5:7b:fa:
10:90:bb:bc:8f:84:58:0f:a6:b5:72:71:aa:cc:e9:
c2:87:c6:15:87:8b:57:0f:30:ca:f5:9a:4b:ac:d3:
e7:52:08:52:b9:ab:b9:7c:5b:37:86:e1:37:27:5f:
b3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A4:87:A7:D8:DB:F5:8E:EE:AE:C9:86:75:54:C0:D6:3E:17:CF:2C
X509v3 Authority Key Identifier:
keyid:9B:29:67:3E:D4:A3:91:1F:73:D4:B7:BD:E1:B1:E7:3F:B9:78:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mylnPtSjkR9z1Le94bHnP7l4Nak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/x6SHp9jb9Y7ursmGdVTA1j4Xzyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.190.0/24
Signature Algorithm: sha256WithRSAEncryption
20:25:91:7f:bd:7e:56:ef:af:c8:c2:61:dc:8a:90:6a:db:a3:
e9:42:08:6f:06:53:48:d5:97:0f:be:6c:2d:46:5b:c6:ed:d3:
1d:79:46:ce:4f:96:b1:4f:e8:3f:11:74:50:2f:82:dd:32:15:
51:45:2f:48:3b:e3:04:88:50:c4:ac:9b:bc:04:48:40:eb:ff:
2b:a6:f9:34:22:0d:43:6d:d6:4e:62:81:9f:a6:99:d7:4f:ec:
ef:ec:40:28:5e:9c:13:8b:9a:63:67:44:4f:27:36:c6:6f:8c:
a5:a5:e7:62:77:88:7d:5f:28:2d:a7:3d:13:5f:a4:6f:ad:c7:
38:7b:df:d4:a9:bd:e2:3b:d9:00:16:b3:5c:91:98:17:c0:c9:
04:d5:18:4b:15:c4:e9:10:38:bc:13:46:40:51:f8:54:c1:70:
9a:f0:6e:bb:8c:22:ec:8e:97:52:52:5e:39:f3:6f:95:2c:4d:
db:9e:58:f1:b5:cb:97:a7:c1:3c:0f:21:a0:eb:0d:22:05:38:
df:ed:4e:bc:be:1b:fb:c7:74:35:44:d5:11:fc:1e:d5:fc:7d:
cf:08:ab:1e:b0:6b:a0:90:c3:99:11:2a:56:df:e4:d9:a7:29:
29:2f:ce:f9:61:9a:94:e0:93:9c:fc:c0:16:f0:58:22:83:08:
fc:8f:9b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:54:44 2026 by rpki-client