Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/9cvLi0lyFC3GgbJV2aEolV81JPs.roa
File: 9cvLi0lyFC3GgbJV2aEolV81JPs.roa (raw, json)
Hash identifier: Hj4vRerxqWMvmOPXcDNhhbOOf+kdFNecQC2GEwwRsjA=
Subject key identifier: F5:CB:CB:8B:49:72:14:2D:C6:81:B2:55:D9:A1:28:95:5F:35:24:FB
Certificate issuer: /CN=4e7965120f210816a6b1ba274d254cf698f76130
Certificate serial: 01A0C81918574E2F0E8DDA2A23FA634BC048
Authority key identifier: 4E:79:65:12:0F:21:08:16:A6:B1:BA:27:4D:25:4C:F6:98:F7:61:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnllEg8hCBamsbonTSVM9pj3YTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/9cvLi0lyFC3GgbJV2aEolV81JPs.roa
Signing time: Tue 22 Sep 2026 07:51:22 +0000
ROA not before: Tue 22 Sep 2026 07:51:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 134.83.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnllEg8hCBamsbonTSVM9pj3YTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:19:18:57:4e:2f:0e:8d:da:2a:23:fa:63:4b:c0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7965120f210816a6b1ba274d254cf698f76130
Validity
Not Before: Sep 22 07:51:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5cbcb8b4972142dc681b255d9a128955f3524fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0a:46:41:55:0b:83:b3:29:c0:d0:f0:9d:1d:
ce:97:2b:4b:f6:65:eb:c8:2c:e1:f2:2c:b7:a7:54:
fb:e0:76:3e:b5:c3:8d:7f:80:3c:99:b1:cd:db:18:
27:70:f5:8c:28:20:7a:cd:52:0c:02:ed:6f:b2:ca:
ac:2b:4a:6f:65:45:ac:a4:4b:f2:44:aa:65:d7:54:
8e:97:dd:99:6b:8c:99:35:ec:27:e2:09:1e:c5:55:
44:d4:71:6f:ec:56:ce:90:32:4d:e4:b6:82:83:8c:
8e:52:10:89:94:c5:f9:3d:55:a8:a4:cc:cb:33:86:
97:d4:e2:3b:5c:1d:ca:1e:78:66:46:d7:6e:ff:dc:
ae:15:8c:f1:4a:9c:e4:f3:c9:5f:ee:6c:db:8d:d7:
10:d2:e6:77:bb:13:6f:05:60:6f:7d:bc:b1:84:5c:
74:f2:82:69:a3:0c:54:34:38:38:af:2e:63:d4:32:
3d:01:54:dd:2f:40:0d:fb:77:9f:b3:25:c7:99:e8:
27:62:94:fa:e2:79:01:74:84:04:6b:05:32:fd:f6:
29:e3:10:4e:7a:5b:37:07:f1:1f:ae:d1:28:31:9e:
e7:92:37:e3:ee:86:78:cf:30:61:0f:3d:c0:f6:dd:
61:0f:89:f0:4e:c7:8d:bf:fc:b6:3c:41:cb:cd:eb:
4f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CB:CB:8B:49:72:14:2D:C6:81:B2:55:D9:A1:28:95:5F:35:24:FB
X509v3 Authority Key Identifier:
keyid:4E:79:65:12:0F:21:08:16:A6:B1:BA:27:4D:25:4C:F6:98:F7:61:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnllEg8hCBamsbonTSVM9pj3YTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/9cvLi0lyFC3GgbJV2aEolV81JPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.83.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:0b:2b:47:5d:67:46:0b:bb:e6:a5:fd:a8:60:17:2f:4a:fe:
c5:82:f1:1f:07:eb:d4:80:6f:47:aa:b4:f7:c2:ac:ea:24:5c:
78:c0:7c:82:7e:01:44:a9:cf:01:ca:bb:59:d1:ff:37:67:aa:
de:21:14:57:6f:d4:af:3a:da:7e:f6:13:2d:9f:b9:4b:cc:26:
ac:16:0f:00:e8:6a:3f:a8:98:31:95:d0:d4:ff:42:f8:f4:23:
cf:9d:5e:9d:64:22:c7:a2:25:ad:13:9e:3c:73:01:91:55:f3:
3a:7d:5e:f4:81:94:46:9d:ac:87:67:9a:86:05:44:b9:12:a9:
dc:33:ac:8c:d1:e4:eb:51:d6:37:e6:ee:ac:83:eb:d8:10:1b:
f7:ff:14:bc:58:3c:03:5b:fc:32:d7:2e:5f:ac:81:23:be:35:
8c:f4:2e:8f:d0:40:ac:67:ab:ca:6b:72:18:3e:77:e9:87:4c:
d9:80:b0:60:46:7e:af:36:50:a8:5e:73:53:85:8d:9e:4e:27:
92:8d:fd:58:3f:2d:b8:a4:c7:a3:a8:bb:91:8d:cb:d9:82:b4:
ba:e3:c8:8b:98:9b:fe:d6:16:99:0d:71:7d:5d:1b:3a:05:a2:
88:ff:2e:1c:e9:69:65:09:bd:07:d2:7f:26:a7:04:da:1d:40:
af:39:d3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:01:41 2026 by rpki-client