Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/1-bDqvi_4Mc-Zt2RhA9DsJLBmruY.roa
File: 1-bDqvi_4Mc-Zt2RhA9DsJLBmruY.roa (raw, json)
Hash identifier: KD4TndoP9a8jrSokheVf5gZGM8WkPWsQCaAuWU8HuI8=
Subject key identifier: F9:B0:EA:BE:2F:F8:31:CF:99:B7:64:61:03:D0:EC:24:B0:66:AE:E6
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 019F4B5621A5B9F05AE099FB87F3C682BB59
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/1-bDqvi_4Mc-Zt2RhA9DsJLBmruY.roa
Signing time: Fri 10 Jul 2026 09:22:43 +0000
ROA not before: Fri 10 Jul 2026 09:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9457
IP address blocks: 94.231.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:56:21:a5:b9:f0:5a:e0:99:fb:87:f3:c6:82:bb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Jul 10 09:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9b0eabe2ff831cf99b7646103d0ec24b066aee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0c:c1:71:b3:1a:bf:ae:a7:45:e0:d6:48:1c:
da:99:ca:b5:1f:f5:43:1c:93:4e:50:f1:c5:32:ca:
a3:2b:02:29:82:e8:84:53:14:de:0e:90:3f:49:f5:
b9:27:13:dc:1f:98:2b:cd:bf:8f:9b:d2:92:7b:cc:
a4:d5:67:e9:26:4d:67:ba:18:18:b4:7c:cb:3f:c7:
cd:d9:29:c3:54:ef:d2:84:a0:f9:10:c3:ba:0e:63:
04:c6:30:70:02:7a:25:3b:7a:c2:44:6b:58:e6:bb:
0c:21:98:64:d3:b8:d6:05:8d:e0:7b:d4:be:17:9f:
80:3e:56:87:0b:0c:a7:e4:40:db:50:7c:0d:f4:70:
ec:dd:87:01:10:ea:d0:52:02:d9:77:9d:f5:85:1e:
d6:c4:3d:be:08:22:8f:23:c0:be:53:5c:2e:f0:dd:
a2:fd:6a:59:fb:25:32:d1:cf:eb:3a:8b:1d:f2:b8:
3d:1c:03:81:fc:0a:53:ba:b8:23:2d:75:0e:cb:ec:
b3:88:b8:b9:55:d4:ad:fb:0c:74:45:f3:12:8a:7f:
81:31:0d:4a:aa:d0:ae:52:32:84:e2:2c:83:3a:b4:
43:6e:ea:e6:74:cb:66:ed:86:65:b4:06:93:15:2f:
c9:5b:8a:e7:8c:ce:ce:a7:ae:fc:91:30:ed:a6:48:
c9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B0:EA:BE:2F:F8:31:CF:99:B7:64:61:03:D0:EC:24:B0:66:AE:E6
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/1-bDqvi_4Mc-Zt2RhA9DsJLBmruY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.232.0/22
Signature Algorithm: sha256WithRSAEncryption
17:89:a3:3f:a2:64:f2:7b:dd:ed:10:82:5d:9f:96:78:86:62:
ec:dc:e5:af:5d:e2:ad:29:ff:11:ef:4d:cb:1f:5a:24:62:7b:
13:00:01:e7:77:66:95:61:83:16:d1:18:48:49:be:4b:05:19:
f6:2d:3d:c2:2a:d7:47:e8:e5:b4:fe:a9:8f:e2:fd:57:73:4b:
84:45:b7:b9:9f:76:5b:9a:f5:a7:dd:d9:78:1d:6e:e5:d4:1a:
6c:64:03:6c:41:71:6c:85:9c:61:42:e3:82:d5:0f:6b:2d:f2:
1d:7d:f3:d5:74:ba:e7:3a:e6:89:c2:ea:65:03:cd:ab:a3:c9:
e4:40:ec:61:be:b6:2d:14:95:84:9e:f6:d7:17:7b:78:54:2e:
ce:f5:36:b9:01:74:41:9d:b4:60:ff:1b:45:cf:7e:a6:c8:84:
5b:9b:95:33:93:6d:f0:2a:fe:8c:1c:79:ab:eb:56:b3:34:93:
7a:2a:0c:8d:92:19:22:91:8f:86:b8:a0:d3:ec:2f:2d:cb:a4:
ea:db:31:52:8e:d6:5f:6d:d1:c4:1e:cc:31:99:21:94:7d:3d:
a9:cb:0e:fb:b5:de:84:3c:a7:50:ce:93:a3:a4:b9:0f:16:ae:
51:26:cd:7f:d4:94:2a:02:f3:d7:1d:02:e2:6a:25:8b:5f:25:
db:59:35:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:41 2026 by rpki-client