Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/c9iyPohCc2m-c1bnpPfSBn6yumE.roa
File: c9iyPohCc2m-c1bnpPfSBn6yumE.roa (raw, json)
Hash identifier: NmSWNNWNzaSfRowr5igkS9JLXscmTvVikOdKVv6WlXg=
Subject key identifier: 73:D8:B2:3E:88:42:73:69:BE:73:56:E7:A4:F7:D2:06:7E:B2:BA:61
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 019F6ED3DEC132E96E29671B53F72AB7EFC6
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/c9iyPohCc2m-c1bnpPfSBn6yumE.roa
Signing time: Fri 17 Jul 2026 06:46:46 +0000
ROA not before: Fri 17 Jul 2026 06:46:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 194.104.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:d3:de:c1:32:e9:6e:29:67:1b:53:f7:2a:b7:ef:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Jul 17 06:46:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73d8b23e88427369be7356e7a4f7d2067eb2ba61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6c:ff:c2:8c:24:6a:9e:d8:d0:6f:88:c1:01:
94:d6:fe:eb:f2:12:cc:a7:a8:7c:66:80:aa:40:02:
df:c8:29:99:41:12:85:f3:d9:5c:a4:93:9d:64:f9:
03:e0:44:e1:52:71:73:9f:07:3c:6e:b5:b5:dd:6e:
6a:51:9d:cd:f1:6f:e1:0c:5d:4f:f1:30:f0:64:96:
eb:01:6f:fd:f3:80:39:51:88:c4:a7:b5:02:3e:72:
26:9b:4c:ac:9a:ed:d9:6d:e2:98:59:f5:05:fa:2b:
7e:6b:c0:aa:bc:36:24:2e:14:11:2c:e8:67:b3:52:
a4:f9:97:5f:42:87:e5:1f:d5:03:86:d7:aa:0c:19:
34:86:93:e0:9c:dc:ce:80:a3:89:ae:e5:1f:cc:10:
5d:e9:38:24:d5:59:7e:a8:18:76:da:20:8d:0f:19:
33:67:d9:76:a6:6d:1b:92:9c:2b:76:a6:b4:44:cb:
6b:1b:bd:5d:44:b8:1c:10:ac:3e:fb:e9:fa:b1:f8:
3b:8a:5d:8e:fd:2e:1a:32:62:29:41:a9:bd:1a:b7:
d4:0a:52:24:a2:24:6f:51:0b:6d:08:17:27:8d:70:
3c:c4:ad:cd:a1:5a:9a:e2:7c:9b:32:f4:f3:54:77:
48:0a:0e:2b:97:fa:50:6a:7c:4f:aa:35:54:e0:af:
16:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D8:B2:3E:88:42:73:69:BE:73:56:E7:A4:F7:D2:06:7E:B2:BA:61
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/c9iyPohCc2m-c1bnpPfSBn6yumE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.138.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:b7:51:15:70:07:e4:06:cc:ff:b8:dc:57:cb:17:83:79:03:
7d:1e:6b:66:7a:cc:de:b2:57:4c:46:9d:74:7a:96:61:bf:d1:
fd:92:7b:41:ad:bd:55:78:a2:91:fd:e4:a2:18:f5:a0:54:5b:
d2:dd:f2:cd:82:b1:65:96:98:cf:82:f2:2e:1b:c6:01:3e:76:
6b:64:24:bf:fb:35:69:c9:de:6c:5b:72:3c:cc:3a:6f:34:b1:
68:20:c7:d5:c7:a7:93:1e:76:26:3b:1b:7b:7c:82:78:03:00:
02:6c:41:4f:a5:c9:25:e0:39:48:45:7f:a4:fd:65:f0:12:cd:
5c:a3:ca:d2:9d:0a:b9:e2:c7:10:07:c7:5e:9f:1f:1d:06:b8:
26:70:d9:4a:df:9d:87:01:f3:3d:98:08:43:e7:8d:af:a4:6e:
da:f9:18:a1:84:cf:c9:f1:27:80:df:32:fd:c5:93:36:db:cb:
91:b6:f8:87:98:26:5b:c6:4c:1d:bf:00:b7:18:d6:b5:86:ae:
32:70:46:4c:db:76:dd:1e:8b:52:57:5e:d9:33:b6:3b:f6:69:
a3:2b:38:80:d3:13:34:aa:cc:48:3e:39:62:f6:01:67:34:3d:
64:54:c6:55:31:c1:52:ed:e5:08:fd:49:21:6e:3a:35:5f:ff:
2e:44:3b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:56:57 2026 by rpki-client