Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/1X5LpoPkiiIfqJJshC34MniOMI4.roa
File: 1X5LpoPkiiIfqJJshC34MniOMI4.roa (raw, json)
Hash identifier: UQKIVsiFeFuAnLSpr7xUCS9KnEW9kjaFk6PUq4VbMUQ=
Subject key identifier: D5:7E:4B:A6:83:E4:8A:22:1F:A8:92:6C:84:2D:F8:32:78:8E:30:8E
Certificate issuer: /CN=886ddac22af7bc6944b8b2632a4baac522c9207e
Certificate serial: 019F236938ECEC2E3EAB309CCFD271A5C7F7
Authority key identifier: 88:6D:DA:C2:2A:F7:BC:69:44:B8:B2:63:2A:4B:AA:C5:22:C9:20:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iG3awir3vGlEuLJjKkuqxSLJIH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/1X5LpoPkiiIfqJJshC34MniOMI4.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 160.9.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iG3awir3vGlEuLJjKkuqxSLJIH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:38:ec:ec:2e:3e:ab:30:9c:cf:d2:71:a5:c7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=886ddac22af7bc6944b8b2632a4baac522c9207e
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d57e4ba683e48a221fa8926c842df832788e308e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:3e:2c:7d:9f:f4:84:39:00:64:1c:27:be:
03:d8:72:f9:49:8e:9a:5e:d0:2a:c8:f5:e8:67:1b:
11:e9:d2:1b:7c:fa:15:bc:c6:37:f7:e1:3b:9b:ff:
5b:af:55:3e:fb:2b:04:d6:90:80:c4:69:75:c1:69:
a4:f5:2d:52:72:ed:6e:97:0d:5b:9a:d3:31:12:b4:
58:3c:bd:7f:5e:48:b6:13:85:da:9d:8b:63:61:05:
a0:f4:b6:9a:18:ad:fb:c0:de:ec:2b:3b:92:e4:d9:
58:a3:2e:c6:fd:06:40:77:aa:c7:78:2f:b1:c3:ea:
7b:3e:7e:7d:7e:54:3e:f2:db:1b:60:5b:8f:52:72:
71:d1:04:28:96:bc:2b:df:4a:7d:0f:ad:de:4e:22:
9e:ab:6c:27:8c:ac:3c:b5:92:b2:10:73:c8:dd:22:
1b:e3:d2:9c:91:6c:64:c4:01:c9:ba:35:a9:c3:be:
ec:3e:66:d0:f2:ab:1f:aa:44:fc:08:21:f8:f2:6c:
03:bf:e2:1b:c1:86:7d:39:6d:c4:ec:76:7a:a2:4e:
fc:be:75:28:64:3c:1a:1d:5e:e8:31:cf:8a:d2:6f:
bd:e3:18:37:94:05:b3:f6:ec:16:65:8b:be:fc:11:
09:1f:90:ee:bb:01:d5:6c:0b:1b:e1:7b:ff:b6:60:
e1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7E:4B:A6:83:E4:8A:22:1F:A8:92:6C:84:2D:F8:32:78:8E:30:8E
X509v3 Authority Key Identifier:
keyid:88:6D:DA:C2:2A:F7:BC:69:44:B8:B2:63:2A:4B:AA:C5:22:C9:20:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG3awir3vGlEuLJjKkuqxSLJIH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/1X5LpoPkiiIfqJJshC34MniOMI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.9.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b0:6b:7f:12:1f:dc:81:c5:82:25:2c:ba:f8:f8:fa:2f:90:b0:
93:dd:54:5a:cd:ed:1b:9f:b5:75:a4:86:5e:41:b7:fb:1c:5e:
0e:5a:c5:2a:b2:ae:93:a8:c9:4e:56:fc:d1:a9:40:42:c4:a7:
08:21:bc:70:00:16:c8:fe:b9:65:78:d2:20:4a:3c:0b:3f:28:
c1:3b:f6:4b:8c:ac:a9:fa:9d:c2:ce:94:f9:fd:a7:f3:8b:f1:
d3:d1:22:e1:a1:a4:7a:1b:80:fe:2e:e4:b1:87:37:0d:df:f6:
92:43:26:c6:6a:fc:98:2f:33:d0:97:8c:46:f9:6d:91:a7:02:
7d:c4:06:cc:5b:d5:03:e6:b2:87:19:31:f6:b6:f8:7a:17:c0:
04:10:51:77:49:8c:f6:35:51:60:d8:25:2c:31:09:aa:22:56:
34:f7:f0:a0:5c:31:8f:80:01:14:6d:da:2e:a4:f0:fb:a9:ca:
6c:c2:89:17:d0:01:14:a8:bd:93:3c:27:55:29:bf:ee:7e:c3:
64:d2:01:1b:5d:64:73:a5:fa:8c:47:11:fb:cf:5f:ce:df:8e:
19:97:05:69:22:42:62:ff:d5:7f:77:35:0a:43:39:a1:de:a1:
25:68:2b:aa:c8:99:d3:10:07:73:c0:0a:f0:c3:ca:c6:07:77:
3f:d0:dd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:46 2026 by rpki-client