Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/9VpzYaZ8ekveOmY_4OGLTcTuRQ8.roa
File: 9VpzYaZ8ekveOmY_4OGLTcTuRQ8.roa (raw, json)
Hash identifier: uHDXO6LSV+FL3Z1DXFnrXzbP6mrn98ZHISURYaPB27U=
Subject key identifier: F5:5A:73:61:A6:7C:7A:4B:DE:3A:66:3F:E0:E1:8B:4D:C4:EE:45:0F
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019E1B9B355BF32E5AE52B144851CCD12AC8
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/9VpzYaZ8ekveOmY_4OGLTcTuRQ8.roa
Signing time: Tue 12 May 2026 09:53:37 +0000
ROA not before: Tue 12 May 2026 09:53:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274897
IP address blocks: 194.31.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:9b:35:5b:f3:2e:5a:e5:2b:14:48:51:cc:d1:2a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 12 09:53:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f55a7361a67c7a4bde3a663fe0e18b4dc4ee450f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:c7:15:57:3f:72:47:f5:0d:27:1b:86:fb:
c9:ef:8b:be:82:06:5c:90:be:21:89:05:56:85:16:
9a:6b:60:ff:22:27:75:c6:54:9b:ed:e4:89:45:d8:
f7:1a:5a:ff:cf:d7:23:bd:0c:df:b9:f6:1b:f9:4c:
b9:6c:19:de:a4:4b:9c:40:f0:0a:80:bf:34:62:c4:
bc:46:7f:5e:75:20:36:f8:24:52:3a:94:ba:4f:91:
d6:cb:8b:c0:8e:c8:fa:52:c9:59:df:32:15:2f:80:
12:9a:c2:42:85:86:0b:0e:68:0b:56:83:67:29:24:
50:4a:ac:d7:6b:2f:5f:b6:60:89:d2:7a:4a:4e:af:
3d:05:19:36:3b:62:31:cd:02:00:a4:ad:38:27:b7:
79:35:03:99:4e:82:50:61:b9:a1:8c:67:12:28:a2:
ea:79:2b:4e:26:86:46:80:ed:fa:90:af:cf:ec:ff:
e4:a3:ef:33:8b:5c:be:4a:9c:3b:13:3b:05:26:ab:
2c:0f:9d:ae:dc:c3:54:8b:25:54:b8:e7:0e:0e:17:
02:b0:39:2f:2f:6c:b2:a9:a9:8a:d6:2a:4f:db:2d:
64:a8:fa:7d:94:92:96:0f:e2:5d:51:0d:de:49:17:
ff:04:bc:85:e6:48:ab:33:13:76:2c:3b:83:5c:6a:
ae:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5A:73:61:A6:7C:7A:4B:DE:3A:66:3F:E0:E1:8B:4D:C4:EE:45:0F
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/9VpzYaZ8ekveOmY_4OGLTcTuRQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:35:10:25:9e:fd:57:3e:3a:1f:cd:4d:7a:93:28:e5:9d:4a:
dd:b9:31:b0:df:9c:2a:81:10:6e:5c:a2:a1:c7:53:c5:3d:e5:
38:20:8d:6f:f6:08:81:bc:26:c0:86:b2:3d:19:11:44:eb:c0:
9d:af:9f:96:cb:fe:bb:7c:83:b3:a5:aa:5c:d4:c4:bf:85:09:
3f:95:39:26:c1:bf:48:05:c8:9d:c4:33:47:f3:e1:99:68:80:
e5:68:1a:15:b9:e1:a8:4e:1b:0f:4d:0d:b1:9b:ba:30:54:2d:
64:ad:1d:2d:fb:74:e4:6b:d3:45:05:ab:bc:c7:1a:bb:cf:bf:
d6:5c:51:96:88:b5:61:6d:7b:51:05:91:cd:47:f5:62:8a:95:
0b:30:15:9f:81:a5:c9:f7:4e:14:4d:d6:f2:0d:3d:e6:f5:65:
d1:2a:8b:94:83:67:d6:a7:8b:9a:79:72:5a:4d:61:41:df:b4:
c2:e4:e7:26:98:ea:8b:82:99:54:73:32:ed:bf:49:e7:af:72:
b0:dd:86:7a:db:1a:60:84:43:c0:75:43:b8:4f:86:b7:91:aa:
04:15:d6:4e:77:ef:f6:f3:df:08:fe:59:a1:b1:12:f5:ae:0c:
2e:03:82:2a:7b:f9:c7:28:52:6b:26:04:f6:d9:e5:cb:04:b2:
92:21:6a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:45:31 2026 by rpki-client