Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9T5HxPAk6GRZfVjyQisSJLW6HMQ.roa
File: 9T5HxPAk6GRZfVjyQisSJLW6HMQ.roa (raw, json)
Hash identifier: knO4Gk2h5gl6DIilBrsY3DO4/TsFIejRcQFsRNg8tUk=
Subject key identifier: F5:3E:47:C4:F0:24:E8:64:59:7D:58:F2:42:2B:12:24:B5:BA:1C:C4
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 019D1F34FBB348A11FE42AA8D97D9ED4FFF1
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9T5HxPAk6GRZfVjyQisSJLW6HMQ.roa
Signing time: Tue 24 Mar 2026 09:37:39 +0000
ROA not before: Tue 24 Mar 2026 09:37:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 31.133.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:34:fb:b3:48:a1:1f:e4:2a:a8:d9:7d:9e:d4:ff:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Mar 24 09:37:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f53e47c4f024e864597d58f2422b1224b5ba1cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fb:43:e6:71:63:a0:3c:a7:ad:d4:4a:a6:de:
f7:90:d6:7a:0c:f9:be:79:2e:9b:fd:92:1a:12:18:
59:be:7f:76:6f:f2:04:28:71:0d:0f:2e:d5:3e:3d:
a0:75:d8:c4:c7:b5:0b:96:ad:6b:0c:05:ee:a9:04:
5e:ca:d5:dc:27:7a:55:b4:93:f1:ac:12:a2:db:38:
5b:6f:e8:0f:bc:65:16:0f:a3:92:c8:fe:01:84:90:
05:da:00:a2:f3:02:0b:01:f3:df:c6:95:dd:a8:89:
ba:ad:fc:e4:33:a2:46:da:7d:b9:8d:6b:ef:5b:f2:
c2:d2:ac:dd:75:60:23:e7:32:10:2b:61:78:a6:71:
d2:9e:b8:e8:73:53:33:9b:41:9d:d6:88:5d:d6:44:
b3:80:f1:44:d4:01:64:a5:ce:2a:48:76:2c:51:a0:
be:99:d8:dd:13:13:48:99:b5:bd:7b:ab:5f:be:f3:
cc:09:04:25:e8:7b:50:31:8f:8b:f5:72:fc:9b:5d:
7b:f7:8b:c1:5f:ee:c4:16:1b:1e:18:bb:2a:45:27:
ad:41:07:36:5e:52:e4:26:96:4b:77:05:31:63:99:
b4:30:ea:28:82:ed:fe:f8:5d:36:dc:30:dc:4f:c2:
25:af:7a:90:85:1b:cd:12:90:c3:71:35:e4:1f:13:
fd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3E:47:C4:F0:24:E8:64:59:7D:58:F2:42:2B:12:24:B5:BA:1C:C4
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9T5HxPAk6GRZfVjyQisSJLW6HMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.84.0/22
Signature Algorithm: sha256WithRSAEncryption
25:13:9b:4c:4b:cb:5a:0e:a8:58:64:11:96:14:35:a1:0e:83:
69:6a:b6:bd:76:70:b4:ac:93:c0:10:54:82:cb:02:af:a0:50:
0e:7a:c9:1e:84:f6:ed:58:e0:b8:17:5f:0d:8f:40:3f:2c:05:
50:1c:6b:0c:b2:23:59:f9:4a:13:39:b2:8a:b6:a2:6f:70:76:
f5:0e:9d:b6:27:de:98:62:f3:5a:7e:f2:18:37:7d:02:d8:e3:
59:f7:6d:99:c7:c2:1d:09:4c:ad:f4:6a:31:ae:91:5c:50:cc:
dd:2c:b8:7d:d8:c0:dc:17:a5:c8:0d:9f:e8:1f:bf:cf:7f:86:
b4:05:42:24:d4:a0:b8:03:ff:92:a9:e7:8f:77:52:29:b4:df:
22:f9:95:87:1c:13:76:86:d5:33:32:d6:0d:b2:d0:e2:fe:12:
6a:ba:03:07:43:d3:21:1d:a1:d1:74:10:f1:7e:8a:e5:c2:cc:
ce:0e:0e:1e:04:71:38:81:a7:71:a1:c9:5c:fe:25:d6:53:29:
a1:3a:74:da:c2:be:1b:89:5f:e3:24:5f:dd:bb:b2:51:13:5a:
b7:6f:de:f5:12:05:c1:66:b0:21:d3:67:b8:f4:d1:35:5a:e9:
12:11:ed:4b:7d:5a:ac:50:ca:a8:75:70:a4:37:69:cf:2f:bc:
59:f3:9c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:41 2026 by rpki-client