Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/1-xDJz0e0_7YGYVGjppG3DfxLqZY.roa
File: 1-xDJz0e0_7YGYVGjppG3DfxLqZY.roa (raw, json)
Hash identifier: zO3O8OjkbPv61bTvqyfOoS0qfvqmSfyg/E3fdlXCnrs=
Subject key identifier: FB:10:C9:CF:47:B4:FF:B6:06:61:51:A3:A6:91:B7:0D:FC:4B:A9:96
Certificate issuer: /CN=3de4598e21736501a73944c107114c850c7d8b09
Certificate serial: 01A07FF3837BB71329EE464483AC95A9CFAE
Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/1-xDJz0e0_7YGYVGjppG3DfxLqZY.roa
Signing time: Tue 08 Sep 2026 07:37:40 +0000
ROA not before: Tue 08 Sep 2026 07:37:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43741
IP address blocks: 193.0.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:f3:83:7b:b7:13:29:ee:46:44:83:ac:95:a9:cf:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09
Validity
Not Before: Sep 8 07:37:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb10c9cf47b4ffb6066151a3a691b70dfc4ba996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:6a:9f:a1:a8:02:f2:1e:63:46:14:31:86:
c6:d0:db:27:c1:3b:f6:53:84:19:b9:d4:6f:16:03:
17:57:21:73:25:9e:7d:4b:7c:6c:95:49:5a:31:24:
ff:4c:1f:9a:49:a0:7b:d1:17:53:69:d3:e7:46:06:
69:0e:81:73:4c:28:a5:49:dd:43:34:14:3c:42:2e:
04:bf:18:ca:d7:d4:cf:37:34:49:da:e2:c7:e1:db:
63:ae:b3:1d:de:09:ba:5c:18:65:5e:e1:96:32:dc:
e3:bc:23:e6:68:c3:8a:db:62:8d:fe:c2:99:19:c9:
7c:a6:fe:d0:b9:d5:25:7c:06:6c:db:47:9e:1c:02:
80:be:dd:ea:ce:cb:e8:b8:ef:1a:c0:4a:de:67:59:
98:96:50:c1:49:b5:f1:16:fa:b2:08:1c:27:b7:88:
9f:c0:4b:92:b8:f5:8b:43:d5:9b:fb:d1:8b:5f:97:
e4:6d:8d:e2:9d:41:16:4c:a0:f5:a3:8d:2f:58:61:
41:30:09:55:74:ce:75:6d:14:d0:90:78:74:1f:1b:
78:4e:a1:20:51:ef:ae:ef:ff:d7:79:b8:bd:01:94:
12:7c:0d:b4:01:c6:6a:34:1a:b5:b1:7f:e1:c6:75:
51:c8:9f:bc:d6:70:f9:e5:7e:cb:0c:3b:07:d3:df:
e0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:10:C9:CF:47:B4:FF:B6:06:61:51:A3:A6:91:B7:0D:FC:4B:A9:96
X509v3 Authority Key Identifier:
keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/1-xDJz0e0_7YGYVGjppG3DfxLqZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.130.0/23
Signature Algorithm: sha256WithRSAEncryption
82:1b:7c:75:5a:d9:f7:42:7d:30:82:d7:ea:30:e6:77:2f:2e:
90:be:62:4d:26:17:ba:05:a7:1a:b5:fe:5b:52:b4:48:17:b4:
2a:09:e8:72:fc:a5:fd:79:6d:03:40:6c:ba:b7:2f:ad:2e:f4:
6b:bc:32:91:b6:be:b5:b0:71:0c:2b:74:eb:a7:f4:71:ef:cf:
74:0d:21:76:8a:1c:42:c3:b6:f3:5e:9e:0c:e4:67:f8:67:83:
06:93:11:31:24:2a:76:45:12:79:1d:0c:06:f9:f1:b4:69:bf:
64:e7:8f:f6:cd:0e:d3:55:1a:e8:cc:e8:9b:d7:0e:02:3b:26:
ae:0a:5b:36:89:89:42:79:d3:bd:0d:a8:05:a4:74:ef:dc:4e:
ee:0f:22:84:d3:ca:24:41:e2:41:64:5e:ae:a8:50:f4:d1:af:
f9:b1:0f:34:1e:87:20:3c:b8:49:28:ef:16:71:6a:10:68:aa:
52:46:43:f9:8d:e6:8a:ae:ac:6a:d5:75:e3:0b:ff:23:ef:22:
a0:62:f1:60:42:37:e0:3e:bf:73:92:e7:3d:b6:0a:8c:3c:be:
40:e3:cb:ad:38:a7:29:1f:71:cb:be:61:db:fa:df:7e:95:4b:
ff:15:90:6c:b1:ab:46:c1:4e:21:2d:27:c2:db:2f:e1:a3:17:
75:ad:37:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:40:56 2026 by rpki-client