Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/9eIznmkQ1i1wObSFJhgIo07kbEs.roa
File: 9eIznmkQ1i1wObSFJhgIo07kbEs.roa (raw, json)
Hash identifier: PRIHTF2R61srx/cf5f84GRd6EYSqTtmRTfxJne6LAdg=
Subject key identifier: F5:E2:33:9E:69:10:D6:2D:70:39:B4:85:26:18:08:A3:4E:E4:6C:4B
Certificate issuer: /CN=f2f40ac1e973a6eda95ae8f994f3a2a46c301a51
Certificate serial: 019F2325A5B4AAAA616AF717FC1F614546A6
Authority key identifier: F2:F4:0A:C1:E9:73:A6:ED:A9:5A:E8:F9:94:F3:A2:A4:6C:30:1A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vQKwelzpu2pWuj5lPOipGwwGlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/9eIznmkQ1i1wObSFJhgIo07kbEs.roa
Signing time: Thu 02 Jul 2026 14:04:57 +0000
ROA not before: Thu 02 Jul 2026 14:04:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31280
IP address blocks: 193.30.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vQKwelzpu2pWuj5lPOipGwwGlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:25:a5:b4:aa:aa:61:6a:f7:17:fc:1f:61:45:46:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f40ac1e973a6eda95ae8f994f3a2a46c301a51
Validity
Not Before: Jul 2 14:04:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5e2339e6910d62d7039b485261808a34ee46c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:cd:77:5b:53:28:8e:0d:ea:ed:6b:37:5e:
95:dd:c0:c2:53:cf:2c:e0:be:ee:71:b6:0e:99:4d:
c2:4f:05:f1:88:d5:00:a1:8a:19:ba:aa:57:21:05:
21:68:c0:03:e2:48:d4:83:c2:34:bd:ba:58:53:8d:
49:10:77:3c:4b:43:0f:2d:70:87:29:7b:22:00:c7:
d7:6a:b5:a2:81:d4:b1:8a:da:7d:7f:56:1d:a9:f8:
9f:7a:75:16:e8:7a:1e:09:53:41:8b:84:1d:3c:31:
83:b0:53:77:96:7b:e5:32:79:f1:15:b3:58:ac:53:
d8:1f:b8:33:a4:fb:ef:74:62:f1:59:1f:5d:b7:56:
7e:fb:ca:1c:27:63:b4:98:f8:9e:70:25:4b:94:52:
43:a5:f3:a1:50:3e:12:56:8b:da:c9:6b:b8:e9:05:
36:e6:e4:3a:01:f8:dd:63:eb:79:8d:b0:83:6d:f9:
ce:c8:49:13:8b:b9:3f:e2:ae:a7:59:9d:08:4e:66:
c4:07:5d:8a:94:48:d2:d8:52:67:6f:ea:57:04:7c:
4f:73:24:9d:08:a2:51:b4:a4:71:b6:6a:15:6f:f9:
9e:e3:49:66:9e:50:97:e7:cb:fd:7b:67:0a:28:e3:
09:1a:50:c1:fa:95:d0:82:a6:31:e5:77:c7:8f:76:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E2:33:9E:69:10:D6:2D:70:39:B4:85:26:18:08:A3:4E:E4:6C:4B
X509v3 Authority Key Identifier:
keyid:F2:F4:0A:C1:E9:73:A6:ED:A9:5A:E8:F9:94:F3:A2:A4:6C:30:1A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vQKwelzpu2pWuj5lPOipGwwGlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/9eIznmkQ1i1wObSFJhgIo07kbEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a2:59:7d:b1:87:75:d0:db:0e:07:54:02:80:30:72:96:0d:
93:ae:b4:24:fb:9b:0a:c5:bd:33:fa:71:a1:1b:48:b4:ae:77:
02:b3:a6:ad:83:a7:ea:e8:ca:da:74:71:3b:a3:6b:20:a7:fa:
2a:22:ea:4f:25:d1:57:38:23:15:58:1a:2b:c0:43:ac:6f:d5:
2f:b7:84:f3:9a:34:bb:65:53:68:94:b2:7d:7a:9e:c5:b6:b1:
dd:88:d0:d6:e5:22:fd:0a:56:ca:e0:76:13:a3:a5:0c:96:04:
b3:8e:13:e5:58:00:a9:f2:50:86:52:12:2e:2e:92:0e:0f:41:
d8:96:24:f0:57:31:ac:79:34:69:31:a5:2d:7f:02:81:9d:05:
6d:9e:cc:71:78:53:ab:ef:b8:63:b4:47:81:35:ba:3e:82:6d:
7c:e3:c2:37:a2:92:6e:6f:4f:0d:9f:9c:d2:70:45:41:4d:fc:
26:07:c0:62:02:78:52:1a:50:61:02:c0:13:fd:cb:b5:94:88:
c8:e5:f9:03:ef:92:06:9d:c7:91:25:14:e7:51:a6:0f:48:c8:
ab:53:78:df:2b:fd:84:de:79:d9:4c:e8:ca:99:13:93:83:90:
c6:d5:8b:04:54:5f:de:5e:f3:7d:81:41:f9:e9:d8:f9:d5:40:
74:63:4b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:16:34 2026 by rpki-client