Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/9sZzRL3aysmgLZzoD2xD_gDptBQ.roa
File: 9sZzRL3aysmgLZzoD2xD_gDptBQ.roa (raw, json)
Hash identifier: zN+IwwS3daYZ4qhksXK1kZ18IepjoB72ZOigrVzjKtg=
Subject key identifier: F6:C6:73:44:BD:DA:CA:C9:A0:2D:9C:E8:0F:6C:43:FE:00:E9:B4:14
Certificate issuer: /CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Certificate serial: 019DF70B5D5B39960E6FB1473C2B8ABCCFE8
Authority key identifier: 14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/9sZzRL3aysmgLZzoD2xD_gDptBQ.roa
Signing time: Tue 05 May 2026 07:30:10 +0000
ROA not before: Tue 05 May 2026 07:30:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 193.108.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:0b:5d:5b:39:96:0e:6f:b1:47:3c:2b:8a:bc:cf:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Validity
Not Before: May 5 07:30:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6c67344bddacac9a02d9ce80f6c43fe00e9b414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:1a:19:35:9a:83:9a:60:ba:28:13:c6:b0:
ea:cf:16:ed:12:06:70:19:65:06:da:11:18:1f:41:
4c:f9:71:1a:a7:70:0c:0d:d3:0f:f1:55:71:db:8d:
4e:c3:53:f8:de:d3:a3:13:85:39:8b:7b:ab:27:77:
25:24:b4:2a:b8:bb:d0:9c:81:89:2a:ce:80:15:bc:
e0:6a:92:9e:f5:30:64:de:f9:3a:7d:09:6e:39:da:
45:45:44:3f:c8:d4:b3:99:70:57:ad:f5:22:a9:58:
7e:79:37:c7:49:25:bc:76:ec:65:62:4c:85:ed:94:
b9:63:8d:00:3f:d1:34:f5:01:30:70:14:78:8f:b3:
6e:5c:bb:11:da:e7:aa:d6:63:7f:90:5b:8f:8a:3d:
df:25:81:bb:ef:12:14:5e:57:96:f7:41:f7:b7:a7:
1b:b7:b6:14:26:26:44:13:25:90:53:d8:56:df:08:
fb:84:83:aa:21:db:4a:28:50:8d:7f:b4:c9:80:1f:
0c:90:ac:de:8c:44:db:94:00:2e:e1:b7:0e:08:a2:
1e:b9:1c:45:46:60:b1:74:c6:d1:01:ba:86:06:1d:
f6:b9:b7:9a:ca:09:aa:bd:2a:c7:bf:d0:f1:d4:6e:
ac:0f:1d:0d:0d:19:c7:d3:fd:e5:38:ed:c4:d6:25:
b8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C6:73:44:BD:DA:CA:C9:A0:2D:9C:E8:0F:6C:43:FE:00:E9:B4:14
X509v3 Authority Key Identifier:
keyid:14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/9sZzRL3aysmgLZzoD2xD_gDptBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.195.0/24
Signature Algorithm: sha256WithRSAEncryption
62:02:b7:e5:a8:41:64:21:82:79:cd:18:0a:d4:82:57:66:18:
35:a7:c1:52:91:3a:24:a1:90:41:5d:a7:ee:12:5a:20:ac:8a:
f4:bb:09:2d:b4:5d:28:f3:61:96:53:7b:7d:f1:65:e8:30:17:
6d:64:6f:c1:60:d8:c8:67:aa:ca:0c:cb:93:03:86:ab:e4:45:
79:ce:bb:82:7e:42:b3:df:b7:44:f7:a3:2c:36:06:10:33:33:
c6:cf:3a:28:58:71:c6:28:24:9a:f8:86:6e:c1:85:36:96:bf:
fb:4d:ba:fb:8e:1c:bb:61:b7:4e:6d:21:cb:01:10:94:1a:56:
88:d5:8e:b2:ec:21:d2:9a:17:74:55:ad:2d:42:a7:57:9e:46:
eb:81:01:fa:5d:fe:52:2c:c2:4e:40:f0:44:40:89:45:c2:9f:
fb:1e:09:8e:27:cd:c5:93:e8:2c:30:de:39:36:5b:97:1f:0d:
e2:74:ba:e3:b5:13:5a:ee:d6:e8:80:04:20:b1:a3:d1:aa:6a:
de:38:2e:ed:e1:8c:46:17:75:3a:68:d4:55:7c:78:fb:b0:3d:
51:df:94:dc:83:c3:d3:50:37:ca:7d:f8:7d:7c:e9:ba:a0:c3:
d6:7b:ea:11:b0:a1:2b:d2:30:40:9b:7a:d8:94:12:62:ca:ef:
69:3b:43:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:37:55 2026 by rpki-client