Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/9CW7PS1O-yaGQw798fnARuiUrJY.roa
File: 9CW7PS1O-yaGQw798fnARuiUrJY.roa (raw, json)
Hash identifier: pJA5oJPC8LVm68jDybSlz7FMMO+yc+xxykw7/S2Fs08=
Subject key identifier: F4:25:BB:3D:2D:4E:FB:26:86:43:0E:FD:F1:F9:C0:46:E8:94:AC:96
Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial: 019F4BAC3098AA9A3209ABEA1234DE313033
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/9CW7PS1O-yaGQw798fnARuiUrJY.roa
Signing time: Fri 10 Jul 2026 10:56:43 +0000
ROA not before: Fri 10 Jul 2026 10:56:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39582
IP address blocks: 185.231.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:ac:30:98:aa:9a:32:09:ab:ea:12:34:de:31:30:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Validity
Not Before: Jul 10 10:56:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f425bb3d2d4efb2686430efdf1f9c046e894ac96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:89:74:11:4f:51:c2:31:30:5e:9a:3c:90:3a:
08:bc:15:be:8b:02:d5:34:25:1b:f4:3e:e6:0c:ed:
1f:75:08:da:dd:1f:b0:4e:91:e7:6c:a5:42:d2:a1:
66:0e:cf:5b:f1:d2:d9:a5:90:9a:7a:40:b0:a8:c7:
ee:09:dd:e4:26:6d:90:a3:8e:6b:66:26:19:8b:ee:
c6:14:7a:aa:ef:1e:0e:65:f2:3c:14:65:51:86:6b:
96:d1:d8:68:d8:0d:f1:4c:2d:18:22:03:6d:bb:73:
fc:38:99:a1:41:27:62:8a:e8:70:0e:43:3e:f4:84:
8f:00:74:b2:d3:52:1c:4a:22:6d:9f:e6:eb:0d:e5:
d6:82:1a:ee:1b:c4:77:87:27:13:f4:17:95:25:78:
3d:04:f6:16:f5:34:fe:ba:4a:68:e4:9d:b7:9e:78:
b0:95:54:02:91:27:d1:03:6d:37:1a:5b:f1:26:02:
46:cd:de:b5:06:55:e3:00:ff:f6:c9:4d:99:05:0f:
ff:b6:ed:31:45:e1:43:e3:f8:96:c5:aa:c3:94:8a:
be:d0:07:8d:57:3d:80:d1:68:f6:f5:44:26:72:91:
a1:19:67:1c:aa:42:37:49:7a:d5:cb:68:55:fc:c8:
2c:cb:b4:e6:98:4d:06:16:f4:38:3e:0e:cf:cb:8f:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:25:BB:3D:2D:4E:FB:26:86:43:0E:FD:F1:F9:C0:46:E8:94:AC:96
X509v3 Authority Key Identifier:
keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/9CW7PS1O-yaGQw798fnARuiUrJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.109.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:9b:7d:fe:a9:54:e0:6c:0a:b9:95:a7:9f:bb:b7:ac:ca:65:
41:0f:41:61:a2:b5:f5:a5:8a:e4:06:b7:98:dd:07:af:70:eb:
01:4f:86:01:b8:66:59:59:10:69:28:77:4e:5e:10:af:97:30:
5c:2a:f2:c6:1d:9c:10:25:f9:84:3c:bb:f0:02:fe:dd:2b:b7:
9a:17:70:03:55:aa:b8:7d:f8:be:17:3e:69:de:72:47:ea:87:
b1:a4:dd:78:87:ca:1a:21:60:0a:58:d1:30:cf:06:f2:77:5e:
4b:b4:8b:42:db:5d:c8:de:ce:18:d6:8c:9d:37:05:63:fc:c4:
47:df:ea:4a:e9:54:ca:b0:61:67:bd:5d:a0:7f:42:bb:f4:01:
93:dd:69:f4:45:7f:1c:82:59:12:3c:b5:bc:4a:33:b4:c0:11:
c6:1b:11:75:11:c5:24:5b:f1:c8:5d:bd:aa:47:52:16:7f:cf:
3c:bf:22:d1:9c:dc:13:65:28:30:8c:d0:b7:12:ca:28:29:18:
cb:6d:e5:cd:07:69:73:1a:05:12:de:47:60:61:50:2b:26:0f:
4d:c0:00:ed:5e:ba:59:8f:15:38:66:51:21:e3:61:b4:58:7b:
7b:d8:19:d3:4f:9f:20:f0:df:96:bb:e8:0a:ac:4e:7b:d2:60:
51:ec:5d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:00 2026 by rpki-client