Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/P9PKZAt5djm7FdGsrSvgtxYkacg.roa
File: P9PKZAt5djm7FdGsrSvgtxYkacg.roa (raw, json)
Hash identifier: ugWkvKLaNhrHSnXEVwNyBj9pWu4yB48C3daCoDS8DQk=
Subject key identifier: 3F:D3:CA:64:0B:79:76:39:BB:15:D1:AC:AD:2B:E0:B7:16:24:69:C8
Certificate issuer: /CN=983750f247069679b83eedfd7bd565ea46789a60
Certificate serial: 019F23686DA2938AEF21B112481F569F0415
Authority key identifier: 98:37:50:F2:47:06:96:79:B8:3E:ED:FD:7B:D5:65:EA:46:78:9A:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/P9PKZAt5djm7FdGsrSvgtxYkacg.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1930
IP address blocks: 192.135.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6d:a2:93:8a:ef:21:b1:12:48:1f:56:9f:04:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983750f247069679b83eedfd7bd565ea46789a60
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fd3ca640b797639bb15d1acad2be0b7162469c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:49:23:9f:d7:c0:b5:b8:e4:51:57:84:30:
db:18:c9:ce:ee:f1:cb:2d:1f:47:73:89:4c:35:f2:
c5:a8:19:1b:bc:bd:cc:e5:58:b3:da:2e:10:78:5d:
10:12:e2:4f:cb:9d:14:2e:78:fc:a5:c4:b9:b0:e8:
83:1d:3e:90:11:f9:5b:c9:77:9f:f1:a0:3e:02:c0:
49:21:42:5f:14:c6:eb:a5:f3:b1:06:94:24:e8:fb:
71:a2:46:3e:1e:d1:0c:b2:7e:20:5a:ed:29:fd:6a:
3a:7b:d0:28:65:80:01:4b:54:4b:2c:59:ac:c0:53:
76:a5:5d:a7:5c:6e:40:b2:71:fa:b0:60:c1:ac:00:
e3:03:62:86:01:d0:7b:05:8b:50:39:0e:2a:40:bf:
43:f2:67:70:9b:3d:bb:bf:71:16:cd:a9:d6:2c:b4:
39:86:42:27:75:8a:05:dc:9a:2c:42:9c:f1:16:60:
e1:df:a7:ca:98:d6:ec:bd:fb:0b:0c:85:82:10:d7:
69:17:77:35:ae:a5:e7:d1:a2:0b:d5:af:e9:5d:34:
24:f9:59:90:c3:ea:75:88:e9:55:c2:9b:49:32:b1:
96:68:6b:86:d9:47:2d:81:7b:c7:2c:03:a6:0e:95:
be:36:a8:e3:27:c7:48:d9:e2:aa:34:3f:78:92:62:
af:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D3:CA:64:0B:79:76:39:BB:15:D1:AC:AD:2B:E0:B7:16:24:69:C8
X509v3 Authority Key Identifier:
keyid:98:37:50:F2:47:06:96:79:B8:3E:ED:FD:7B:D5:65:EA:46:78:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/P9PKZAt5djm7FdGsrSvgtxYkacg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.135.219.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e0:0e:71:a5:80:43:ce:9f:8a:1f:4d:72:5a:29:ec:47:dd:
90:bd:01:2d:ca:4c:20:5f:80:29:19:29:86:9f:1b:04:df:c5:
10:df:fa:c1:db:f1:dc:1d:64:69:f4:7e:92:bd:97:96:91:98:
73:70:e8:d8:79:51:0f:44:3b:79:6f:85:19:58:b6:70:d2:41:
b8:de:c8:6f:2d:42:66:b7:b8:c9:27:90:4f:7c:86:33:c5:9d:
ca:51:e0:41:7a:c6:28:54:12:01:29:6f:52:7b:50:fb:c4:ac:
c7:91:d4:14:46:a7:08:92:6c:92:5b:d6:60:c0:48:80:a4:78:
6b:b0:6c:c6:2a:1f:0a:e6:4e:2a:b1:d3:88:1e:68:74:39:26:
38:bc:a4:77:2e:48:8c:d3:d5:32:fc:98:48:51:87:de:ab:0d:
cc:19:7a:7a:00:3d:a0:fb:35:e1:f6:2b:83:cf:b9:4e:a3:68:
c4:19:16:c3:1e:3d:41:f0:97:3c:d4:a1:fc:e6:e5:ba:87:c9:
9c:25:58:71:16:fb:88:9d:8c:67:0e:97:ba:74:ac:be:9e:ef:
4b:b4:cb:65:cf:5d:69:fd:87:c3:40:49:68:fd:c5:fc:39:78:
f3:c6:7e:48:49:5f:80:fa:a1:2b:2a:68:a8:4e:e8:6b:10:39:
52:63:93:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:17 2026 by rpki-client