Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/E9zNAd6ONbhY0Fz05hGqVpFuAKo.roa
File: E9zNAd6ONbhY0Fz05hGqVpFuAKo.roa (raw, json)
Hash identifier: nBGuNMGZ4l3PiiYXjA8/tLRFB68ddgBEws5Con/ad7Q=
Subject key identifier: 13:DC:CD:01:DE:8E:35:B8:58:D0:5C:F4:E6:11:AA:56:91:6E:00:AA
Certificate issuer: /CN=c334a35abfa82d549e490704d68bbe658005d63c
Certificate serial: 01A0346C4C1D8237DBAF7DBA30663183E7F8
Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/E9zNAd6ONbhY0Fz05hGqVpFuAKo.roa
Signing time: Mon 24 Aug 2026 15:38:27 +0000
ROA not before: Mon 24 Aug 2026 15:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44980
IP address blocks: 51.163.156.0/24 maxlen: 24
2001:1a08:666::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:6c:4c:1d:82:37:db:af:7d:ba:30:66:31:83:e7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c
Validity
Not Before: Aug 24 15:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13dccd01de8e35b858d05cf4e611aa56916e00aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:88:ee:6a:0c:8b:b3:ad:97:66:ce:fe:8e:
46:f1:31:f5:67:a6:83:57:a9:3a:3d:61:66:c6:b8:
6a:35:96:c5:87:ab:74:0a:73:2b:44:8a:8e:93:8e:
8b:50:05:f5:80:d5:8b:ea:68:f5:eb:b5:4c:4a:f5:
ae:60:0a:2e:dd:bd:38:8e:ee:96:e2:93:fc:e2:f7:
f5:65:4d:3f:0c:db:2c:2a:1b:02:ff:3d:40:34:85:
fa:1c:14:ea:34:3e:79:89:b8:73:7e:26:da:79:a0:
db:fd:84:a6:bf:b4:44:86:1b:74:c4:bd:cb:0b:ff:
d2:41:76:d5:c7:b5:79:b0:71:d0:63:98:ef:3d:3c:
00:30:a5:01:30:9e:98:fb:36:4a:e0:54:ad:cb:1c:
3b:84:60:1e:ab:25:63:cd:b8:60:76:4f:e8:ab:3f:
dd:14:53:82:79:26:c0:43:0f:17:2b:70:f4:84:d0:
e6:a0:c9:ac:54:ac:30:16:ff:54:df:56:a0:63:da:
d7:13:0a:12:7d:d3:db:96:74:9c:70:d9:66:7a:25:
86:86:7f:23:e5:9f:6c:87:57:38:87:46:95:64:6e:
c0:ce:4f:7a:f5:21:47:76:ba:c4:ab:c4:11:4a:ef:
e6:40:51:cf:20:60:84:64:01:c4:88:5a:09:20:97:
cb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DC:CD:01:DE:8E:35:B8:58:D0:5C:F4:E6:11:AA:56:91:6E:00:AA
X509v3 Authority Key Identifier:
keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/E9zNAd6ONbhY0Fz05hGqVpFuAKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.163.156.0/24
IPv6:
2001:1a08:666::/48
Signature Algorithm: sha256WithRSAEncryption
9f:b0:61:ee:dc:ef:68:e8:ac:2d:5e:5a:c6:56:8f:9d:f1:c7:
7a:a0:e0:00:24:33:6d:eb:fe:49:ac:e5:39:33:0d:fd:d3:13:
68:e0:ec:dd:65:9c:dc:88:be:4f:c2:56:7c:d2:2f:8f:8a:ba:
bd:8d:db:a8:0e:bc:91:94:16:7a:09:36:0a:d2:32:16:6b:6f:
3e:cd:83:01:1b:3c:7b:ba:93:22:78:5c:5f:d6:a9:96:6d:02:
c6:44:4b:bc:a5:cd:1f:68:1d:ed:6e:a2:f5:1e:50:e0:7c:97:
78:ca:9d:a6:eb:d5:85:fe:5c:93:cd:c6:37:78:a3:f1:62:8f:
5a:4d:20:75:a6:34:8d:95:ab:39:8b:99:73:15:fe:56:97:c0:
5f:bc:3f:92:a5:65:2a:d6:e0:69:dd:5e:d9:7a:d1:21:02:f9:
55:f9:72:9d:e4:01:b7:82:54:ea:5e:69:af:fd:76:82:60:b4:
67:ed:c8:c6:eb:37:8f:b5:df:23:f1:ce:42:24:52:c0:6e:1a:
aa:39:2c:6e:4b:c4:d8:4f:1f:28:60:82:0b:f9:79:af:af:32:
7b:53:e1:2f:0f:ef:a0:de:04:a2:5f:05:16:6a:f8:7f:e6:46:
21:93:73:4c:75:b3:b9:cc:c0:6b:7b:3b:6e:fd:48:7e:b6:b9:
89:9f:5b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:03:15 2026 by rpki-client