Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/D9vGSctTQ6G39-Tj1KvzWEev7A0.roa
File: D9vGSctTQ6G39-Tj1KvzWEev7A0.roa (raw, json)
Hash identifier: dCtLdzE8AAyiXqvWxFMu+nXlWgdt/7ZcgVwWdiQ4TE4=
Subject key identifier: 0F:DB:C6:49:CB:53:43:A1:B7:F7:E4:E3:D4:AB:F3:58:47:AF:EC:0D
Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial: 019CEC03FA431F890803E69A7110CD5A8748
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/D9vGSctTQ6G39-Tj1KvzWEev7A0.roa
Signing time: Sat 14 Mar 2026 11:03:29 +0000
ROA not before: Sat 14 Mar 2026 11:03:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59711
IP address blocks: 193.9.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:03:fa:43:1f:89:08:03:e6:9a:71:10:cd:5a:87:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Validity
Not Before: Mar 14 11:03:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fdbc649cb5343a1b7f7e4e3d4abf35847afec0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:ca:45:81:ae:ab:43:3d:e3:b9:b1:f6:84:
01:62:c1:14:1d:10:b3:e7:dc:ba:61:eb:fe:58:2f:
e1:41:7e:18:da:81:e4:6d:54:45:ad:40:f3:fd:b4:
ac:52:7e:bd:6b:c8:f2:53:bd:5a:58:91:90:e2:1a:
bc:f7:e6:75:13:82:08:5f:c9:60:90:76:2d:e7:a1:
5b:08:9c:c3:78:3b:dd:7f:49:25:1e:ba:cc:e9:b2:
c3:de:0d:91:f3:ae:d8:9f:f6:f5:d7:32:d2:a9:69:
25:13:72:a2:0f:b9:f0:2c:70:1c:39:51:62:a0:7b:
bc:79:bf:d9:e9:2f:d6:7b:0f:7f:44:7c:69:07:b4:
8c:b6:31:38:a4:20:89:30:c5:6f:b6:b0:e1:f3:f9:
1d:5a:29:85:5c:60:01:23:c4:40:f3:5b:bd:3f:8a:
ae:1e:ce:c0:5b:34:93:f3:0e:3e:5f:97:7e:ae:ee:
6e:29:bf:7b:03:c2:71:e7:a9:a6:eb:00:42:14:03:
d8:da:49:f6:35:52:40:cc:ae:55:57:68:de:89:95:
a6:98:65:fb:ec:df:59:be:d7:51:cb:66:f8:07:75:
f7:de:cc:77:8b:6b:14:20:c9:3f:46:93:39:7b:7f:
d2:e8:a5:28:85:fa:71:f5:11:c1:8b:66:f4:f2:bd:
6a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DB:C6:49:CB:53:43:A1:B7:F7:E4:E3:D4:AB:F3:58:47:AF:EC:0D
X509v3 Authority Key Identifier:
keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/D9vGSctTQ6G39-Tj1KvzWEev7A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d3:d7:56:45:f7:2f:31:8c:b9:9a:85:b8:97:45:3e:9e:5c:
0b:bb:67:aa:f5:0f:c6:84:32:ed:f1:ae:76:02:fe:f8:d6:79:
fa:ae:8c:4a:66:db:cd:63:07:89:9e:3b:a8:14:e5:bd:1b:92:
88:d1:e9:2b:82:e8:70:40:a5:1e:90:40:99:96:68:bf:97:30:
ef:a4:b1:5f:74:e8:56:b4:be:65:4f:ff:29:04:6d:59:32:ba:
30:54:0d:60:63:1f:ba:ef:a7:11:22:35:9b:83:b5:c9:24:a0:
72:b8:c0:e9:26:cf:49:9b:2d:17:b1:fe:d8:57:f1:42:19:b2:
82:d6:d0:55:13:d8:d2:49:36:1e:d6:01:90:ca:75:dc:a5:25:
cb:4b:63:78:98:e6:93:bb:35:9b:f6:9f:53:f4:70:fa:55:a2:
b0:35:69:37:5e:f8:c6:28:4a:a6:21:c0:1b:2d:40:13:50:47:
53:dd:91:0d:c7:02:f9:19:08:6e:d2:e9:d6:d3:a6:9a:78:49:
ad:de:77:bb:3c:26:bb:11:6e:08:a9:7c:ab:a8:81:a8:93:bc:
b6:df:aa:5d:39:50:23:31:dc:2b:01:1a:04:de:b3:86:3e:ef:
62:79:1d:52:2d:f8:5a:4a:b4:e4:6a:b9:c8:27:ac:19:e9:b3:
15:18:f5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:08:42 2026 by rpki-client