Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/9OIUHm9Q3_MU-4wtq3AAtxG3G6I.roa
File: 9OIUHm9Q3_MU-4wtq3AAtxG3G6I.roa (raw, json)
Hash identifier: bxrigFDDiTvViSLcD2+MHp7/O7Bye6w+t63Ng3FAzqM=
Subject key identifier: F4:E2:14:1E:6F:50:DF:F3:14:FB:8C:2D:AB:70:00:B7:11:B7:1B:A2
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 019D0C216A63AB39887450231201AB97EC5A
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/9OIUHm9Q3_MU-4wtq3AAtxG3G6I.roa
Signing time: Fri 20 Mar 2026 16:43:29 +0000
ROA not before: Fri 20 Mar 2026 16:43:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216300
IP address blocks: 78.40.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:21:6a:63:ab:39:88:74:50:23:12:01:ab:97:ec:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Mar 20 16:43:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4e2141e6f50dff314fb8c2dab7000b711b71ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:11:fa:d9:46:04:0f:83:7f:51:d9:ba:b6:1f:
3d:b9:09:e8:f2:54:d4:ad:4e:f4:a1:0b:ad:38:26:
f3:be:5e:ef:e5:92:98:ea:75:99:24:8b:f8:c1:cb:
0c:8b:10:17:4d:32:56:d9:4f:c2:00:38:0a:de:ae:
72:4d:17:7c:65:16:94:b8:19:07:4d:5a:65:f6:fa:
aa:be:e3:6a:f5:93:16:67:dd:fd:b3:02:35:06:45:
bb:2c:8f:f0:ba:c9:fe:4b:60:cd:69:28:9b:6c:43:
2a:3a:28:0d:a0:33:45:0d:b4:22:b0:c0:40:dc:00:
c1:39:4f:aa:91:f1:11:ed:4b:6f:4a:cf:46:06:18:
b6:a1:fd:0e:07:09:e2:36:a3:33:89:4c:e0:12:74:
a8:4e:e4:cb:12:44:b2:a5:a2:20:f3:49:12:cd:45:
29:15:df:f7:d7:ea:93:01:17:34:46:74:48:d6:6b:
5e:ba:bd:78:2c:0f:6e:ca:da:14:0b:d2:ee:c1:ac:
4b:f3:76:38:52:00:3e:1d:79:94:8e:32:21:2c:91:
32:b7:77:e5:31:39:23:cb:60:a2:5c:45:f7:4b:41:
92:ce:7e:0f:5b:48:4b:50:c1:d8:da:e7:bd:11:94:
e0:05:2b:05:b4:62:b2:97:d1:13:78:4d:3c:50:04:
ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E2:14:1E:6F:50:DF:F3:14:FB:8C:2D:AB:70:00:B7:11:B7:1B:A2
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/9OIUHm9Q3_MU-4wtq3AAtxG3G6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.211.0/24
Signature Algorithm: sha256WithRSAEncryption
65:62:2e:3e:0c:62:45:10:f2:b6:80:23:5e:7e:b0:2d:ab:25:
52:c7:ca:87:0d:2d:4a:10:8a:e7:79:48:40:bf:e3:89:d9:b7:
ac:aa:e3:30:90:eb:25:f4:da:09:3a:2b:6b:62:38:00:34:d1:
bd:72:4d:0a:a6:53:85:d0:41:e7:92:f1:ce:63:08:52:0d:53:
12:89:f7:7d:d0:87:83:fb:e0:bd:ee:86:5d:4e:12:22:2b:c9:
fe:1c:9d:8e:bf:73:4c:76:e3:0c:db:ce:f4:e7:c9:58:70:7e:
95:e7:d9:6a:75:05:54:a5:1d:a8:b8:ab:42:3d:5b:42:ad:0e:
f3:13:b5:8f:95:2c:cd:fa:90:3e:1e:7f:11:84:43:cb:91:99:
d4:21:c8:73:47:ad:41:86:86:d8:41:f9:4d:75:65:c0:90:64:
d9:47:14:81:4c:be:7d:83:c1:e7:db:59:97:45:c7:39:d7:4a:
ba:34:eb:38:0a:0a:cd:6e:cf:86:29:98:4e:75:df:76:bb:3a:
2c:f8:18:36:af:97:de:24:dc:66:d5:99:a8:f7:73:77:30:19:
89:f0:b6:d3:61:ba:ca:d0:e5:82:46:a0:f9:f2:14:1d:86:94:
7b:96:98:e1:b8:3b:03:6a:b5:b0:67:bc:a0:05:0e:d8:93:13:
f8:e6:ca:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:06:41 2026 by rpki-client