Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7296b9-8dc2-4a7d-883b-54fc81b771b4/1/Vx2J0bpfWMzyjlL9mfNC2auizWI.roa
File: Vx2J0bpfWMzyjlL9mfNC2auizWI.roa (raw, json)
Hash identifier: cBDKv5xcPQSOxBecnJ9ffWD+3btW0rvxx/deQjtZpC8=
Subject key identifier: 57:1D:89:D1:BA:5F:58:CC:F2:8E:52:FD:99:F3:42:D9:AB:A2:CD:62
Certificate issuer: /CN=e9c9b92bb7833ac3932bfd60c05530f76f7e04b3
Certificate serial: 019F2368B6D4C3BE5F480B03E56CE41580D8
Authority key identifier: E9:C9:B9:2B:B7:83:3A:C3:93:2B:FD:60:C0:55:30:F7:6F:7E:04:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cm5K7eDOsOTK_1gwFUw929-BLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7296b9-8dc2-4a7d-883b-54fc81b771b4/1/Vx2J0bpfWMzyjlL9mfNC2auizWI.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 146.176.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7296b9-8dc2-4a7d-883b-54fc81b771b4/1/6cm5K7eDOsOTK_1gwFUw929-BLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/7296b9-8dc2-4a7d-883b-54fc81b771b4/1/6cm5K7eDOsOTK_1gwFUw929-BLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cm5K7eDOsOTK_1gwFUw929-BLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b6:d4:c3:be:5f:48:0b:03:e5:6c:e4:15:80:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c9b92bb7833ac3932bfd60c05530f76f7e04b3
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=571d89d1ba5f58ccf28e52fd99f342d9aba2cd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:93:58:dc:fd:99:94:63:de:1f:02:0f:12:
01:6e:fe:6f:06:6e:24:3b:98:0e:37:ef:f8:d5:9b:
e2:52:47:a8:c8:58:f9:fe:73:23:b0:63:50:a8:ec:
bf:37:77:fc:63:89:17:fc:92:a4:aa:78:37:1c:cd:
02:47:df:fb:28:1d:76:5a:4a:1d:4c:75:f0:56:5d:
30:73:e0:fe:40:97:98:8b:eb:9a:65:69:7e:a2:13:
67:07:14:bc:01:6a:1e:b8:4f:55:a8:df:92:46:e7:
60:46:4d:f0:98:cc:d8:c7:86:7e:95:7a:51:aa:a4:
f3:20:42:1b:06:d2:c3:c0:87:c0:8e:a6:b7:a3:f9:
d4:fc:7a:fa:b7:78:d5:c2:9e:5f:bc:eb:c7:92:04:
79:6e:7c:04:b5:f8:3f:ad:25:e6:71:8b:53:df:54:
ba:a3:29:81:5c:94:a3:63:83:60:61:9b:1e:13:1e:
66:df:8b:5b:78:a6:2a:01:60:fd:60:de:41:cc:34:
f4:46:8c:f5:c2:90:be:19:61:3b:47:7b:50:7a:ca:
b0:1e:cc:01:1e:3d:84:b2:88:0c:79:da:d8:d7:d5:
8f:2f:6d:66:a6:04:40:b5:ac:d3:ee:09:52:66:5e:
93:ae:68:21:14:f8:fd:fa:53:b5:df:26:63:03:0d:
0f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1D:89:D1:BA:5F:58:CC:F2:8E:52:FD:99:F3:42:D9:AB:A2:CD:62
X509v3 Authority Key Identifier:
keyid:E9:C9:B9:2B:B7:83:3A:C3:93:2B:FD:60:C0:55:30:F7:6F:7E:04:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cm5K7eDOsOTK_1gwFUw929-BLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7296b9-8dc2-4a7d-883b-54fc81b771b4/1/Vx2J0bpfWMzyjlL9mfNC2auizWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7296b9-8dc2-4a7d-883b-54fc81b771b4/1/6cm5K7eDOsOTK_1gwFUw929-BLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.176.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:c0:8c:83:c9:58:11:54:19:8e:a7:5f:20:48:6d:1b:b5:8a:
2c:19:9e:05:25:14:5a:94:09:c5:86:24:76:2a:9f:3d:3f:2f:
c6:cf:41:fb:39:18:6b:7e:90:20:bd:01:be:72:a8:d5:5f:34:
d7:f4:4c:17:4e:01:e6:b1:28:8a:b2:9a:95:d9:a8:1f:50:6e:
16:4f:e9:eb:4d:ba:34:ee:19:d3:2f:97:0b:16:a4:ac:44:8e:
fc:78:0c:cd:8a:65:81:09:9b:3d:1e:d4:e7:dd:08:19:ce:5c:
b4:ae:ab:5c:c5:9c:6b:ae:b4:58:35:03:41:5e:48:14:e6:c7:
51:73:41:c9:55:85:54:04:40:fe:ef:fc:39:1b:ef:f0:f0:e2:
3d:2b:f7:16:d9:37:88:18:7d:a7:9b:eb:42:4c:ac:7f:66:e9:
a1:e0:be:7d:ad:44:0b:41:d0:93:85:ea:9c:da:57:98:b0:ec:
03:42:f6:01:24:86:a1:ec:4f:2a:e8:d4:7f:e0:dd:62:e4:30:
d0:d6:dc:c7:f3:86:b4:73:3e:34:f0:28:6b:84:82:38:66:77:
b7:a0:d1:20:ce:ad:4a:fb:3a:bd:c8:ab:d5:3c:6a:5d:1d:f1:
0c:06:15:6d:27:2c:fa:d8:86:8d:e5:ad:e7:ea:bc:0d:2d:dc:
7c:bc:6d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:24 2026 by rpki-client