Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/0gV__O_tCRpe--Gi6BtNH-1wRu8.roa
File: 0gV__O_tCRpe--Gi6BtNH-1wRu8.roa (raw, json)
Hash identifier: r8hvmDtHKK1vnnnMTl88tE5Vnjz7akL/SOSVhN4ALN4=
Subject key identifier: D2:05:7F:FC:EF:ED:09:1A:5E:FB:E1:A2:E8:1B:4D:1F:ED:70:46:EF
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 01A0B4C383A57B05D4981C5FE781BD3BEF8C
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/0gV__O_tCRpe--Gi6BtNH-1wRu8.roa
Signing time: Fri 18 Sep 2026 13:45:07 +0000
ROA not before: Fri 18 Sep 2026 13:45:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197961
IP address blocks: 185.48.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:c3:83:a5:7b:05:d4:98:1c:5f:e7:81:bd:3b:ef:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Sep 18 13:45:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2057ffcefed091a5efbe1a2e81b4d1fed7046ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:e8:b3:c7:43:c8:14:e7:3e:cd:a1:62:6d:
35:3a:57:b9:37:f7:bd:57:37:b1:5f:4c:fe:5f:bd:
c8:b3:ac:fa:3d:46:e1:00:4f:0d:f5:c9:b6:59:59:
a2:07:91:25:04:8e:05:c8:c0:5a:af:6b:d2:33:77:
2d:62:d3:90:ee:dc:71:f9:82:aa:8f:93:55:3c:47:
09:11:46:fe:10:8c:1e:a8:28:39:df:0b:7d:fe:ba:
e2:09:93:7a:9f:3e:b7:fe:58:19:59:64:5b:c1:94:
55:ea:7a:4e:ce:d4:1b:32:30:b3:85:df:0f:4d:2e:
4e:e8:74:50:a5:a3:fe:74:cb:b7:a9:0a:c6:57:da:
7f:b6:32:c3:57:17:64:66:4b:e5:8b:98:e1:b1:09:
dd:32:5a:40:d4:f0:f4:3e:5f:b4:58:0b:2b:83:eb:
2c:15:6f:5c:02:a2:6b:50:b7:ac:1c:cf:30:e9:a3:
48:d1:43:92:2f:f1:3f:b0:92:b8:d5:be:3c:c5:1a:
b3:f7:46:31:4e:02:ad:1b:5e:ec:a1:50:bd:02:c1:
7f:28:91:e6:54:6e:93:99:b7:94:5d:42:0a:76:71:
96:99:bc:cf:bc:79:0a:1d:d4:63:cd:df:7c:7c:c9:
3a:39:99:25:0b:d6:af:54:40:0f:a2:b8:96:ce:41:
30:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:05:7F:FC:EF:ED:09:1A:5E:FB:E1:A2:E8:1B:4D:1F:ED:70:46:EF
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/0gV__O_tCRpe--Gi6BtNH-1wRu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d8:11:84:63:a9:5d:c2:c6:2d:f4:33:34:d3:db:9c:e8:b5:
5a:fa:dd:a4:67:d5:6a:81:63:a2:76:71:32:e7:d5:b9:37:26:
a1:73:d9:3f:2d:aa:a2:6b:98:c3:b0:86:16:c1:35:99:8f:8c:
98:2b:5c:de:eb:0a:97:87:58:11:3a:ec:97:a4:f9:95:6d:b5:
b4:17:fc:75:ad:c6:94:3b:fb:5a:f6:6f:e1:a9:c6:b2:a5:97:
63:46:04:46:a3:c2:a5:7e:75:21:b3:0b:29:f3:5a:63:e2:51:
fd:94:de:27:4d:d0:a2:31:0b:7a:53:be:6f:67:37:ea:55:a8:
c9:ea:8a:7a:53:56:c6:be:33:5c:d8:c4:cb:8b:fe:97:5e:8b:
a4:64:7a:4d:f5:ce:d1:84:e9:bf:0b:09:35:b8:f2:80:81:ec:
18:e1:67:f9:0b:c0:bb:02:dd:a4:18:8e:3d:97:0a:98:bf:b0:
26:3d:11:82:2e:92:de:d8:3f:77:aa:2a:8d:e7:ae:fb:29:e6:
b6:0d:e1:48:13:d0:b5:95:d2:20:51:d7:5c:f2:07:8a:ee:46:
42:65:6c:fb:62:13:35:56:df:d4:6b:3d:5a:45:ee:83:3d:f5:
07:3e:30:3a:2b:06:9b:08:02:55:60:dd:e3:73:23:0f:5b:63:
bd:7f:d1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:01:09 2026 by rpki-client