Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/9LY0Xdq5F7qeYG3cx5Z1n9pfLCA.roa
File: 9LY0Xdq5F7qeYG3cx5Z1n9pfLCA.roa (raw, json)
Hash identifier: pqcj2JOG2xfTR3RsbK+J8HIIiXJvpxb/HmSW6fspQ+s=
Subject key identifier: F4:B6:34:5D:DA:B9:17:BA:9E:60:6D:DC:C7:96:75:9F:DA:5F:2C:20
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 019CDE72FF50311B931E820AD38B595EB4D7
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/9LY0Xdq5F7qeYG3cx5Z1n9pfLCA.roa
Signing time: Wed 11 Mar 2026 19:50:04 +0000
ROA not before: Wed 11 Mar 2026 19:50:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399970
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:de:72:ff:50:31:1b:93:1e:82:0a:d3:8b:59:5e:b4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Mar 11 19:50:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4b6345ddab917ba9e606ddcc796759fda5f2c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:bd:1c:86:fe:4c:ac:57:7b:01:16:d6:7d:
ca:f2:00:1e:75:34:c7:10:16:d8:0f:ff:d7:5a:51:
64:9a:74:59:39:25:08:27:60:c0:44:7a:ce:06:d4:
33:5e:ce:d5:34:de:f7:2d:6e:5c:e7:9e:7c:a6:b4:
46:e1:cd:5e:f4:b5:4d:0d:30:f7:fe:39:10:c1:8f:
c2:a0:6c:3c:4d:ce:f1:6b:a2:5a:84:4f:00:97:ce:
6f:93:5e:a9:76:d7:29:01:b9:f6:cf:2f:4c:9c:b8:
20:a7:d9:dc:70:9b:04:ef:9f:87:7e:e0:9c:76:ac:
f7:d2:8e:23:05:a2:17:0f:54:5b:b8:94:8f:2d:3e:
d1:0f:04:85:ba:5c:2b:56:61:c4:a6:56:56:c9:17:
c9:df:3d:70:57:3f:47:88:6b:93:6d:f2:5e:e4:7a:
d5:67:1c:82:af:4a:21:8d:cd:8d:c6:62:aa:75:f2:
77:8c:c6:8d:bf:c3:f0:ee:ae:84:0c:63:c3:65:eb:
42:89:7e:4b:00:35:28:31:4e:ab:1b:e1:51:0d:96:
22:e1:59:a2:25:2e:24:ec:a1:09:8b:12:ad:b7:22:
b1:cf:5a:ca:2c:44:e4:83:38:fe:b3:1a:9d:1b:96:
1e:7e:6f:31:74:3c:bd:9f:09:77:1d:1a:68:a5:a1:
a2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B6:34:5D:DA:B9:17:BA:9E:60:6D:DC:C7:96:75:9F:DA:5F:2C:20
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/9LY0Xdq5F7qeYG3cx5Z1n9pfLCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:6f:f0:6e:0a:e1:9b:7c:63:a9:c2:66:7e:ee:9e:29:9c:d3:
9a:ab:2c:9c:80:3b:a8:9d:61:4c:43:b3:bd:ed:2e:b3:ee:cb:
1f:4c:8a:77:24:2c:d3:a9:5f:29:9f:7b:4e:34:67:c6:7d:91:
4d:a7:00:71:c0:42:7e:6e:af:28:ad:0c:d4:35:f9:9c:1f:4c:
6b:22:af:74:d8:5b:a6:10:7a:9b:41:68:31:2e:2d:a4:72:f2:
b2:c9:d4:bc:f9:3a:56:b4:38:8c:54:a3:b5:1f:64:0f:73:9c:
a7:b6:0d:a4:5a:cd:e5:05:8e:0b:1c:38:a6:be:db:85:10:d6:
f3:d3:70:f1:f4:d0:01:aa:57:d8:f5:66:f1:fa:fa:de:40:a8:
58:4c:b4:00:e4:3b:63:bc:06:48:35:88:d5:cf:87:47:5a:11:
90:65:e1:f0:d5:d7:ac:5d:99:51:b5:06:25:bb:d9:b7:bc:20:
5d:c6:62:68:41:61:a9:c3:df:81:1e:9c:ff:97:e2:53:0d:31:
a9:06:7a:65:e9:85:56:01:54:10:b8:96:5f:69:2b:aa:b3:ad:
4c:a5:39:d5:a7:a1:89:41:94:13:d9:ea:8e:31:f4:b2:f3:3f:
99:96:77:e6:ba:66:2e:f8:94:97:65:4d:37:02:45:42:17:be:
5d:bb:f0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:25:06 2026 by rpki-client