Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/011f8f-5ce1-4574-a8f9-9a8f0552649b/1/9wiD7VD7Zc2lJtQM2lYp8HD0UQM.roa
File: 9wiD7VD7Zc2lJtQM2lYp8HD0UQM.roa (raw, json)
Hash identifier: 3yefDG+ZCz70NwSPM2SIptMk8Td5Qs5y2VfYxiQR/N4=
Subject key identifier: F7:08:83:ED:50:FB:65:CD:A5:26:D4:0C:DA:56:29:F0:70:F4:51:03
Certificate issuer: /CN=54f84e897f6459ad50a7fa3db63594b01762bd83
Certificate serial: 01A0C9BC65AD1FC70AED1D00A0F83C71A2D3
Authority key identifier: 54:F8:4E:89:7F:64:59:AD:50:A7:FA:3D:B6:35:94:B0:17:62:BD:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPhOiX9kWa1Qp_o9tjWUsBdivYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/011f8f-5ce1-4574-a8f9-9a8f0552649b/1/9wiD7VD7Zc2lJtQM2lYp8HD0UQM.roa
Signing time: Tue 22 Sep 2026 15:29:22 +0000
ROA not before: Tue 22 Sep 2026 15:29:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 194.5.24.0/24 maxlen: 24
194.5.25.0/24 maxlen: 24
194.5.26.0/24 maxlen: 24
194.5.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/011f8f-5ce1-4574-a8f9-9a8f0552649b/1/VPhOiX9kWa1Qp_o9tjWUsBdivYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/011f8f-5ce1-4574-a8f9-9a8f0552649b/1/VPhOiX9kWa1Qp_o9tjWUsBdivYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPhOiX9kWa1Qp_o9tjWUsBdivYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:bc:65:ad:1f:c7:0a:ed:1d:00:a0:f8:3c:71:a2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f84e897f6459ad50a7fa3db63594b01762bd83
Validity
Not Before: Sep 22 15:29:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f70883ed50fb65cda526d40cda5629f070f45103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:58:c2:9b:32:78:48:27:62:63:15:24:8e:5a:
20:43:ff:d3:13:d5:2a:0e:86:5b:54:12:61:31:96:
f1:a3:f5:a8:43:20:e4:90:06:69:a3:dc:88:a7:bf:
ed:64:c3:09:1c:5e:ea:7f:db:ca:49:0f:ed:b5:e1:
ba:b3:f4:c0:83:30:e2:aa:4e:50:47:e6:da:62:37:
fe:71:f6:bd:61:80:43:07:c6:8a:0b:4b:58:b9:cb:
1c:3b:17:82:42:5a:8f:e8:e8:fd:84:e0:c5:6c:08:
bf:71:fa:0b:46:d3:65:d1:67:50:bd:b3:27:1b:cb:
ba:ac:e5:f1:ca:0c:9c:db:d7:b0:a6:b8:67:67:4c:
24:05:b4:81:f5:f9:5f:5a:aa:71:02:3f:c3:9a:30:
67:eb:ab:63:81:ac:da:49:90:22:9d:06:5e:20:68:
d2:6b:53:5e:1b:90:24:f3:22:8b:61:b3:5a:87:67:
20:1e:93:0b:0e:0c:45:13:2f:5b:91:6b:7f:d5:17:
6b:0a:e0:01:65:c0:34:80:64:d0:b7:41:a0:c7:3c:
8e:39:f7:fd:ff:c1:ab:e3:02:f3:4c:7b:c5:34:9f:
c7:a1:93:34:28:d6:70:bb:3a:2a:2b:ad:62:48:e2:
66:b6:23:de:f5:ac:aa:ba:49:7b:fd:c8:e9:4a:f7:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:08:83:ED:50:FB:65:CD:A5:26:D4:0C:DA:56:29:F0:70:F4:51:03
X509v3 Authority Key Identifier:
keyid:54:F8:4E:89:7F:64:59:AD:50:A7:FA:3D:B6:35:94:B0:17:62:BD:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPhOiX9kWa1Qp_o9tjWUsBdivYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/011f8f-5ce1-4574-a8f9-9a8f0552649b/1/9wiD7VD7Zc2lJtQM2lYp8HD0UQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/011f8f-5ce1-4574-a8f9-9a8f0552649b/1/VPhOiX9kWa1Qp_o9tjWUsBdivYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.24.0/22
Signature Algorithm: sha256WithRSAEncryption
25:19:35:6f:f0:b5:3d:06:4c:0b:ff:11:d3:96:a8:9c:5d:73:
ef:a0:e2:1a:0a:6a:7a:8f:36:c3:c8:06:9e:28:18:f8:3a:7c:
67:7f:cb:c1:85:be:d2:bc:0c:f8:02:94:94:90:7a:6b:53:09:
66:da:d7:92:19:87:f9:2a:44:25:bc:7d:75:c6:cb:23:b0:48:
00:87:1c:b0:fa:5d:e0:47:0b:eb:8c:a5:76:dd:dc:ce:92:0c:
64:0f:e1:ed:c3:0b:74:06:f0:3d:3c:9f:d0:6d:a3:27:36:a8:
9c:8b:9a:30:ca:34:8a:6f:8d:0e:c1:51:b0:cb:02:f8:ae:0b:
9c:fe:87:43:e1:2e:0b:8c:c2:12:ec:21:d1:fc:e9:45:14:e2:
e1:e9:41:61:0d:6a:23:68:e5:ca:87:e5:10:a1:2d:94:db:ef:
ae:87:ce:aa:4f:12:8e:fb:1d:c8:1d:ff:a0:b8:32:51:ad:cf:
ee:ef:aa:ee:01:9f:99:db:39:95:1f:4b:f8:58:53:93:80:5e:
60:97:29:7f:7e:7d:c2:cd:0d:a1:7e:96:ba:96:47:86:e6:86:
5e:26:67:c5:38:ac:4c:88:ad:61:bb:1a:95:32:25:c5:d1:2f:
ca:16:9b:c5:10:e9:0d:9b:25:86:a7:7e:ea:b3:b1:bf:88:38:
08:08:6a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:36:52 2026 by rpki-client