Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/adGbWvpsw6VC1_NJ7BvERNID9To.roa
File: adGbWvpsw6VC1_NJ7BvERNID9To.roa (raw, json)
Hash identifier: H1/E79MIM0Kgc3leMbwF2LE2dmsblfmYbaJNtoyl4xs=
Subject key identifier: 69:D1:9B:5A:FA:6C:C3:A5:42:D7:F3:49:EC:1B:C4:44:D2:03:F5:3A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0CF7320D155F48BAC8714D52AD54E09C9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/adGbWvpsw6VC1_NJ7BvERNID9To.roa
Signing time: Wed 23 Sep 2026 18:07:03 +0000
ROA not before: Wed 23 Sep 2026 18:07:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 9.247.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:73:20:d1:55:f4:8b:ac:87:14:d5:2a:d5:4e:09:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 23 18:07:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69d19b5afa6cc3a542d7f349ec1bc444d203f53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:97:84:c6:0b:3c:ab:55:a8:cc:88:e0:4b:
66:32:48:b4:3f:42:c0:c3:5b:56:4b:f7:14:53:2f:
9c:52:bc:3a:61:a6:8c:e4:c9:11:f4:fd:f9:ec:e4:
80:e4:27:a0:1a:53:04:a1:ea:aa:eb:e1:b1:58:17:
b5:c7:b8:4c:1e:f2:e5:64:17:53:89:f8:c1:d2:78:
91:d6:9e:35:a2:37:a4:36:ea:54:92:26:55:27:78:
2d:d2:89:dd:3e:15:06:72:43:65:49:f7:55:3f:2e:
9b:e9:e2:68:78:10:c2:15:0b:d4:69:02:d3:ee:32:
eb:ca:2c:58:03:5d:e6:ec:71:e9:45:91:2c:c8:53:
87:e8:37:45:99:d6:be:a5:8a:c4:01:18:eb:3d:41:
ca:33:7b:2c:db:25:7d:2e:be:a9:1f:59:ef:f1:c5:
cd:24:3f:8c:3e:f5:48:c4:14:38:2d:2c:38:ea:78:
65:24:7a:b7:a7:ca:11:ee:80:74:56:03:6f:42:be:
22:75:41:41:fd:34:d1:2c:ce:69:37:6c:4d:c6:a5:
35:76:3f:57:d7:68:5a:07:96:a5:15:cc:07:c5:ae:
f5:56:ad:08:01:a5:69:1f:5c:59:93:16:c5:c8:f9:
bb:39:3c:9b:b0:c3:69:f6:b3:f6:8f:c4:a4:88:94:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D1:9B:5A:FA:6C:C3:A5:42:D7:F3:49:EC:1B:C4:44:D2:03:F5:3A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/adGbWvpsw6VC1_NJ7BvERNID9To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.254.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:dc:91:db:3d:89:75:b7:0b:b6:86:7c:ed:c5:d1:8c:30:f2:
3b:06:a0:3b:90:0b:2d:13:54:73:c2:ce:a9:e7:79:d1:19:86:
c8:72:bd:9b:d8:b9:05:0d:94:f7:df:89:40:7d:c8:28:7b:e9:
4c:df:6b:97:bc:3a:0c:12:54:50:1d:29:24:e4:d5:ed:ac:d1:
e2:38:ef:e2:90:83:8d:3f:8e:99:b6:c8:18:b2:7f:3f:26:d5:
15:fb:c6:5f:25:ec:3d:68:9f:a6:ba:2a:7d:eb:62:36:c7:48:
23:53:a3:1d:a8:a7:fe:54:7a:f0:70:d5:6b:0b:42:9e:2e:9f:
73:92:a3:a0:96:e4:26:83:1d:08:d2:a3:e5:ac:8f:c3:49:92:
6b:b6:7e:63:6b:e7:4d:c8:a9:ba:ce:43:c9:31:1a:03:e6:0a:
00:a1:e0:8b:68:87:55:b4:07:5e:bf:e0:4e:97:86:9b:36:3c:
57:06:90:02:45:f4:25:df:fd:cf:f8:d1:d1:03:7d:a3:38:7f:
e0:5e:d5:5b:39:9c:55:81:67:54:51:87:77:82:cd:a7:a8:af:
a2:9c:cb:e0:37:e1:2e:f4:4c:7d:d2:25:15:f6:d0:40:15:d6:
ea:0f:de:fd:78:cf:95:3d:8b:84:49:9f:a4:cc:99:1a:31:8c:
8a:b4:cc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:34:59 2026 by rpki-client