Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/x9WwTsf6oq2Wm1sx344wAY3kFgk.roa
File: x9WwTsf6oq2Wm1sx344wAY3kFgk.roa (raw, json)
Hash identifier: HTpECY59VY6PDNF6YftRP3Eef57aiba0Z1IIXlvm9tQ=
Subject key identifier: C7:D5:B0:4E:C7:FA:A2:AD:96:9B:5B:31:DF:8E:30:01:8D:E4:16:09
Certificate issuer: /CN=8a400c117b367b9231b3052fa5157c39a5e0c49b
Certificate serial: 019B7D5CE463F6F0851CD3C50CF4E516229C
Authority key identifier: 8A:40:0C:11:7B:36:7B:92:31:B3:05:2F:A5:15:7C:39:A5:E0:C4:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/x9WwTsf6oq2Wm1sx344wAY3kFgk.roa
Signing time: Fri 02 Jan 2026 06:19:58 +0000
ROA not before: Fri 02 Jan 2026 06:19:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203127
IP address blocks: 193.30.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:e4:63:f6:f0:85:1c:d3:c5:0c:f4:e5:16:22:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a400c117b367b9231b3052fa5157c39a5e0c49b
Validity
Not Before: Jan 2 06:19:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7d5b04ec7faa2ad969b5b31df8e30018de41609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:09:9e:e0:09:d3:6d:7e:52:27:4f:02:46:5d:
52:fa:fd:6b:53:e2:55:3d:d3:7a:6f:c0:99:6a:d1:
87:8f:bb:11:c9:6c:a5:de:0b:e5:ea:14:a3:00:c5:
dd:d9:53:db:4d:0f:48:b6:be:e1:e0:eb:af:d5:9a:
e5:36:f4:35:67:ab:39:e2:16:aa:73:46:84:42:61:
ff:f3:ec:91:83:47:15:2c:9b:04:5f:e0:29:cd:a2:
97:d4:d4:6a:e3:cc:c1:3f:d3:b8:e9:90:c9:c8:c7:
1a:0a:5f:f0:1d:b1:2c:5f:97:02:6e:03:25:88:1b:
e6:c5:4d:33:4d:46:50:8b:ae:67:c1:35:c1:13:fa:
37:d4:00:28:21:13:34:74:a1:28:7c:17:12:3d:d3:
a4:8d:06:71:e6:7f:69:9b:49:e1:78:09:df:f3:5e:
57:94:0b:26:7a:3f:b0:b1:e7:58:31:4e:d8:36:e0:
64:f0:10:60:b9:e5:06:df:dd:0b:66:38:9c:c2:a2:
bc:36:4d:bb:c4:4a:e7:36:0d:04:6d:8b:b4:e2:8e:
b3:99:d3:81:91:70:0a:44:ee:4e:16:48:54:cd:1a:
8f:ad:3a:76:44:23:96:f8:04:a5:0c:e6:4b:26:b3:
be:8f:eb:80:9e:0e:4f:67:36:e2:96:59:0b:da:34:
71:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D5:B0:4E:C7:FA:A2:AD:96:9B:5B:31:DF:8E:30:01:8D:E4:16:09
X509v3 Authority Key Identifier:
keyid:8A:40:0C:11:7B:36:7B:92:31:B3:05:2F:A5:15:7C:39:A5:E0:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/x9WwTsf6oq2Wm1sx344wAY3kFgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.92.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:24:bc:b6:20:3a:6a:09:6e:5d:88:35:d3:cd:d4:51:b5:1a:
4e:38:f3:ac:39:b3:a6:9e:21:36:47:21:14:66:4d:56:af:f8:
54:48:91:01:20:cd:3c:3c:46:81:d4:bb:2c:34:d4:a4:84:54:
bc:e6:c8:e7:a6:51:91:c3:31:cb:ff:64:42:ee:d9:5d:fd:8a:
bf:43:f7:7e:93:e1:72:9b:cd:98:bf:fe:08:7d:f3:7b:1a:e2:
94:d1:fd:95:6b:e4:2d:a7:a5:54:c2:0b:54:b8:3e:d2:98:e1:
01:7b:48:b7:b3:3f:dd:9b:85:18:07:8f:71:e4:3c:45:a8:5e:
ef:65:8e:98:0d:77:3b:ed:c3:ea:57:2d:39:aa:f9:e2:d6:4a:
d7:6b:43:c0:12:0b:52:b2:02:d2:71:08:69:36:ac:71:d9:b8:
97:01:76:fa:e5:22:27:af:e2:64:ae:50:d7:db:f9:19:8f:0c:
19:39:e7:fb:f3:d4:5e:b0:07:7f:15:f7:e0:32:cc:93:ef:1e:
6e:15:bf:45:62:24:99:1d:f1:14:19:a4:a3:b7:4e:39:0d:08:
47:66:b1:8c:ae:50:6c:0f:4d:c9:54:db:27:96:5f:6e:55:b0:
14:01:67:7b:0b:50:19:81:f3:ee:93:9c:bd:bf:3b:40:60:72:
ca:45:f9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:08:02 2026 by rpki-client