Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/9LnJacci_erR2cZHVgN_5AemqSk.roa
File: 9LnJacci_erR2cZHVgN_5AemqSk.roa (raw, json)
Hash identifier: Su3buYvO3+g5Oi2bVgAQYC5BfjCnL0g2ZF/RyRer+zU=
Subject key identifier: F4:B9:C9:69:C7:22:FD:EA:D1:D9:C6:47:56:03:7F:E4:07:A6:A9:29
Certificate issuer: /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Certificate serial: 019F27D5B058691DFF56BABE8B28D77AD42C
Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/9LnJacci_erR2cZHVgN_5AemqSk.roa
Signing time: Fri 03 Jul 2026 11:55:43 +0000
ROA not before: Fri 03 Jul 2026 11:55:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48364
IP address blocks: 94.199.192.0/21 maxlen: 21
185.131.244.0/22 maxlen: 22
2a02:40e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:d5:b0:58:69:1d:ff:56:ba:be:8b:28:d7:7a:d4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Validity
Not Before: Jul 3 11:55:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4b9c969c722fdead1d9c64756037fe407a6a929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:53:c7:9e:98:c6:c6:61:f1:e5:18:fd:1a:
1a:0b:21:e3:58:c4:d6:6f:78:9b:59:f2:ff:b1:65:
06:b3:12:ef:b9:41:ea:23:bc:c9:f4:87:3f:d0:bd:
92:e5:ca:9e:23:06:be:31:34:cb:40:5b:79:35:08:
25:ce:0e:6d:cb:ca:b9:59:66:6f:d2:52:f5:4f:c7:
f2:d3:2d:d3:e3:ee:c5:47:3a:b2:ff:f0:5a:de:b3:
11:dc:e8:ad:49:df:7c:96:8c:f6:25:d4:83:2a:80:
e3:4c:c5:85:d9:58:8a:f1:45:68:54:bf:79:d9:51:
3f:b5:03:19:49:03:e6:6e:00:ac:42:f3:d7:d8:85:
83:70:fa:8c:bb:27:9b:40:b4:75:5b:16:d9:92:b6:
46:b3:8b:44:5a:5d:ec:1a:cd:51:c4:56:9d:b5:5c:
ac:d8:6e:1e:f8:4e:25:77:a8:98:55:ac:be:ea:dc:
dd:a1:a1:68:41:5e:1c:68:b3:ec:dc:b7:26:6b:40:
bc:cc:0b:37:61:6e:82:03:08:72:dc:6d:cf:22:96:
c0:0f:ad:97:b0:07:b7:40:19:89:3e:b8:8b:07:f3:
5a:52:84:ed:8e:88:b3:c4:b9:d8:2e:d0:cf:70:a4:
f2:ab:2d:52:6e:e0:39:84:90:de:c0:55:ac:18:a6:
2a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B9:C9:69:C7:22:FD:EA:D1:D9:C6:47:56:03:7F:E4:07:A6:A9:29
X509v3 Authority Key Identifier:
keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/9LnJacci_erR2cZHVgN_5AemqSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.192.0/21
185.131.244.0/22
IPv6:
2a02:40e0::/32
Signature Algorithm: sha256WithRSAEncryption
0d:8b:7e:56:4e:7f:75:2f:b2:f5:7f:2b:42:ef:1a:b2:1c:10:
ab:d2:1d:7b:bb:d8:3c:46:16:93:87:90:48:a3:66:23:d7:71:
a7:5d:3d:6e:ba:d4:e2:56:c0:97:05:9d:c2:e2:35:eb:7c:a2:
1a:37:f1:c0:c1:38:a2:f2:fe:16:44:72:ee:ad:05:12:5d:e2:
df:b7:bb:54:14:07:fa:65:e2:0f:22:aa:35:e1:3e:b9:cb:54:
39:52:ce:3a:c5:18:70:26:b0:ca:9a:4f:30:d9:98:04:ac:b9:
bd:74:9f:8f:5d:af:50:55:56:bf:12:0c:21:7c:40:ae:e0:63:
59:d1:fd:27:50:88:1e:02:5e:3e:80:19:25:de:71:c1:84:5a:
48:3d:c5:91:70:af:ca:a8:d4:ce:fa:e4:f3:44:a3:d6:43:95:
a4:09:5c:85:49:6d:46:62:0f:6a:5d:89:2b:ee:1b:ee:16:5b:
7f:93:55:34:d4:27:26:8c:41:4f:74:10:7a:ee:6b:57:32:68:
6b:82:4a:fe:0c:a9:0a:a1:85:9c:c2:81:54:45:da:a3:47:c6:
bc:e0:7f:84:6e:2b:30:c7:6d:ea:83:bd:9f:03:9c:d8:b9:25:
a2:ed:01:12:80:2c:39:2a:8c:e2:a0:ea:e9:d6:ea:6e:5f:65:
47:2f:be:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:40 2026 by rpki-client