Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/V9X49EieL5muWb2FuiaJlUR-F0M.roa
File: V9X49EieL5muWb2FuiaJlUR-F0M.roa (raw, json)
Hash identifier: KCwcP0n4ZTZ4GNIBxxk+6aPghXeAJv53hQU1wGojBWk=
Subject key identifier: 57:D5:F8:F4:48:9E:2F:99:AE:59:BD:85:BA:26:89:95:44:7E:17:43
Certificate issuer: /CN=1ffa5580da7ed71e23dc6c36902e5c66b0e93f92
Certificate serial: 019F2368AFB3A168FA58B5DE02DC82F4352D
Authority key identifier: 1F:FA:55:80:DA:7E:D7:1E:23:DC:6C:36:90:2E:5C:66:B0:E9:3F:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/V9X49EieL5muWb2FuiaJlUR-F0M.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39522
IP address blocks: 193.36.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:af:b3:a1:68:fa:58:b5:de:02:dc:82:f4:35:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa5580da7ed71e23dc6c36902e5c66b0e93f92
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57d5f8f4489e2f99ae59bd85ba268995447e1743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:da:15:56:44:04:0b:1f:04:8c:2a:e3:ec:05:
86:73:99:a8:0b:5d:cb:29:b9:2f:86:02:40:1d:68:
d8:72:36:ba:68:87:ae:3e:05:0f:d6:6e:57:d4:38:
d5:0c:61:60:44:ad:56:7e:38:1e:bb:45:3e:d1:78:
ff:24:e1:76:54:51:de:41:71:84:d4:63:2d:47:23:
ad:9b:e7:ed:19:88:b2:97:fc:8a:62:81:9a:a4:d8:
bb:2d:d7:41:b1:53:39:a3:23:70:b5:70:b0:32:4b:
44:c0:58:d5:b9:c3:25:a5:9a:47:03:e8:80:8d:cf:
f2:46:cf:d2:ef:d8:25:09:d5:08:69:12:43:0c:e7:
19:1e:4f:16:cb:d1:98:79:8c:dd:a0:a9:c4:26:66:
c3:95:34:90:e3:af:af:06:99:f3:6c:13:af:68:ff:
49:a8:b7:c3:14:b5:22:97:2c:66:32:b2:81:2a:24:
2c:a3:37:5c:2c:3a:43:8a:0f:44:b0:d7:b0:61:12:
57:b9:a7:a2:ce:e9:28:6d:a6:73:83:38:79:95:d6:
78:51:63:03:86:66:66:26:de:3f:62:f6:b8:53:6c:
c0:a0:46:c4:3c:5e:fd:3a:e6:cb:e6:9d:c1:1f:9d:
47:11:e1:e7:b7:77:0d:2f:6d:77:22:34:a5:45:16:
3f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D5:F8:F4:48:9E:2F:99:AE:59:BD:85:BA:26:89:95:44:7E:17:43
X509v3 Authority Key Identifier:
keyid:1F:FA:55:80:DA:7E:D7:1E:23:DC:6C:36:90:2E:5C:66:B0:E9:3F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/V9X49EieL5muWb2FuiaJlUR-F0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.33.0/24
Signature Algorithm: sha256WithRSAEncryption
af:fd:cc:dd:63:c7:98:9a:c1:4f:4f:78:9f:8a:ab:14:c8:cd:
1f:16:ab:9a:8f:99:6c:c0:55:c1:f7:dd:12:46:fa:e7:32:68:
93:7e:70:fc:38:a7:5d:c4:47:2c:41:28:10:f4:57:50:8f:4d:
01:21:86:7c:99:d1:a0:99:bb:ef:6c:e2:e2:d1:cf:44:79:f7:
e4:aa:eb:d3:9f:c8:4a:16:ac:8d:e9:37:4a:d1:17:d2:6a:bb:
8e:f1:ad:e9:95:7e:bb:48:f0:03:f2:f3:e1:d1:49:d1:13:38:
9b:78:81:a1:6f:a7:0f:a7:42:31:98:e4:7c:98:31:35:fe:c1:
60:40:af:c6:6e:90:41:d4:d7:1a:75:d6:6e:c9:47:53:0e:22:
a8:00:ea:5c:c7:53:55:fd:6f:b4:dd:2b:c4:6c:e2:d8:36:48:
9e:94:31:08:e9:ee:37:59:07:69:fb:62:97:ba:4a:43:09:ce:
1d:04:b3:f9:61:9d:b9:7e:31:e2:28:52:f4:5c:6f:d4:4f:0c:
85:00:81:a2:2d:57:c8:61:85:61:7d:40:e3:97:62:b4:2e:56:
f9:1e:24:54:3d:0f:65:e4:25:5c:78:38:20:b7:33:97:79:5c:
05:3a:7c:25:f7:0a:da:c0:31:9a:f8:70:5e:e7:86:f1:b2:64:
0c:89:a1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:08 2026 by rpki-client