Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c4de6-794f-481a-840f-4714e097f885/1/9jeQsBy8Ek6DJCckVcCct4bxdfk.roa
File: 9jeQsBy8Ek6DJCckVcCct4bxdfk.roa (raw, json)
Hash identifier: N82CYTcY2mhkb6XQxmPcOuNAWExezJ21HpiQd43onXQ=
Subject key identifier: F6:37:90:B0:1C:BC:12:4E:83:24:27:24:55:C0:9C:B7:86:F1:75:F9
Certificate issuer: /CN=39cbac7e362d4a191ee7d74ecfba1b60df59e623
Certificate serial: 019CDA2816BA62FB11A3EAEE3BFB704F1B33
Authority key identifier: 39:CB:AC:7E:36:2D:4A:19:1E:E7:D7:4E:CF:BA:1B:60:DF:59:E6:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcusfjYtShke59dOz7obYN9Z5iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8c4de6-794f-481a-840f-4714e097f885/1/9jeQsBy8Ek6DJCckVcCct4bxdfk.roa
Signing time: Tue 10 Mar 2026 23:49:45 +0000
ROA not before: Tue 10 Mar 2026 23:49:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51701
IP address blocks: 5.226.32.0/21 maxlen: 21
46.253.192.0/20 maxlen: 20
130.0.200.0/21 maxlen: 21
185.111.240.0/22 maxlen: 22
195.225.184.0/22 maxlen: 22
2a01:7a00::/32 maxlen: 32
2a01:7a00:ada::/48 maxlen: 48
2a01:7a00:b00::/48 maxlen: 48
2a01:7a00:adab::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8c4de6-794f-481a-840f-4714e097f885/1/OcusfjYtShke59dOz7obYN9Z5iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8c4de6-794f-481a-840f-4714e097f885/1/OcusfjYtShke59dOz7obYN9Z5iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcusfjYtShke59dOz7obYN9Z5iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:da:28:16:ba:62:fb:11:a3:ea:ee:3b:fb:70:4f:1b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39cbac7e362d4a191ee7d74ecfba1b60df59e623
Validity
Not Before: Mar 10 23:49:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f63790b01cbc124e8324272455c09cb786f175f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:a9:47:d2:46:d4:11:fa:a7:d5:39:84:7a:
65:9b:b5:97:5b:10:38:00:d4:ce:84:61:3e:c7:31:
db:41:9e:40:f2:09:10:5c:1f:e1:09:44:c1:09:e3:
66:74:d9:ea:12:3a:79:f5:0b:16:c6:7f:29:e2:72:
55:8e:71:86:d1:0a:e7:fe:66:64:37:ca:e6:8b:67:
c9:c5:50:5c:d9:5a:08:96:36:d2:5b:8f:ca:cf:c9:
b1:32:e5:23:ba:76:0c:37:06:cd:82:dd:65:39:18:
03:2d:bf:fb:fe:e2:0c:93:a0:39:06:ae:f7:55:72:
75:03:3e:f4:f8:9b:c9:13:17:e2:30:d4:dc:f8:f2:
cd:78:00:97:a5:f2:09:9f:a7:2e:44:95:93:2a:82:
8d:4b:a3:3e:9b:87:0d:7d:c5:ed:1d:ec:75:e1:6b:
d0:de:2b:c7:d4:9f:a7:af:c4:02:98:a7:77:a5:dc:
b4:53:97:c4:6c:0f:9e:b4:9b:d1:e5:75:b2:32:fa:
f3:c4:f1:4a:5b:87:17:84:c7:38:14:0c:17:03:e1:
36:84:a4:67:68:71:19:e1:0b:f0:52:fc:e6:97:59:
c8:8c:ce:cd:b4:74:74:ea:7b:e5:f0:4b:07:ff:39:
a6:00:2e:67:0b:20:91:8b:62:90:ff:d7:7b:85:36:
6e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:37:90:B0:1C:BC:12:4E:83:24:27:24:55:C0:9C:B7:86:F1:75:F9
X509v3 Authority Key Identifier:
keyid:39:CB:AC:7E:36:2D:4A:19:1E:E7:D7:4E:CF:BA:1B:60:DF:59:E6:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcusfjYtShke59dOz7obYN9Z5iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c4de6-794f-481a-840f-4714e097f885/1/9jeQsBy8Ek6DJCckVcCct4bxdfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c4de6-794f-481a-840f-4714e097f885/1/OcusfjYtShke59dOz7obYN9Z5iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.32.0/21
46.253.192.0/20
130.0.200.0/21
185.111.240.0/22
195.225.184.0/22
IPv6:
2a01:7a00::/32
Signature Algorithm: sha256WithRSAEncryption
1a:ab:20:e9:7b:dd:aa:9b:69:27:4c:63:95:53:6b:e6:34:ef:
13:0a:58:29:1d:b9:be:37:f1:d8:72:fc:29:90:ec:3d:4a:99:
f9:36:3a:2d:f0:37:b7:38:2a:b3:c3:ac:e9:e1:af:f9:31:52:
d6:4f:be:42:13:64:df:38:d1:16:b3:d1:36:68:1d:d3:ee:29:
66:eb:20:8d:71:60:c3:0a:f7:40:fd:dc:60:a3:0e:26:51:fb:
33:ef:e4:ed:77:96:f7:30:e4:80:b4:ab:e4:49:d7:09:4b:49:
58:d6:58:e8:11:41:ac:91:29:21:5f:6d:03:c3:74:4e:ab:87:
42:b7:d9:eb:a9:85:19:c2:af:24:41:f4:57:38:c5:cd:1d:8d:
2d:58:41:da:44:3d:ed:29:f9:53:f7:57:b9:b8:1e:90:ed:c5:
b9:93:e8:d4:f1:d7:fd:a7:5f:37:46:3f:48:d7:a4:70:d0:39:
44:f8:f1:9f:12:e0:de:ae:95:33:91:af:ba:96:0c:14:a0:41:
f3:ed:d5:29:1f:7a:31:65:2e:d1:f4:59:b0:6e:a2:d8:dd:ee:
3b:28:c1:b9:c7:ce:5e:44:c0:24:da:51:ce:6a:cc:49:d6:bd:
d7:05:44:48:19:9e:fe:aa:f1:bd:e1:8b:b4:26:ec:d9:9a:d5:
2c:20:16:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:33 2026 by rpki-client