Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/E_NI4YaLo-4vH-xHThiTFQYzNlk.roa
File: E_NI4YaLo-4vH-xHThiTFQYzNlk.roa (raw, json)
Hash identifier: OdfijIjYnSuLrPJOtapUMNeSS4iKerolBSNZPTXhiPA=
Subject key identifier: 13:F3:48:E1:86:8B:A3:EE:2F:1F:EC:47:4E:18:93:15:06:33:36:59
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 01A0911F851FB9027793482D05B2EFA5B32B
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/E_NI4YaLo-4vH-xHThiTFQYzNlk.roa
Signing time: Fri 11 Sep 2026 15:39:17 +0000
ROA not before: Fri 11 Sep 2026 15:39:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12637
IP address blocks: 185.228.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:1f:85:1f:b9:02:77:93:48:2d:05:b2:ef:a5:b3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Sep 11 15:39:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13f348e1868ba3ee2f1fec474e18931506333659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:f2:f3:c0:81:f8:90:a5:42:bc:80:8f:8a:
65:ff:e3:dd:f2:93:b3:7c:a1:a5:b8:c4:fd:63:7c:
9b:fb:27:91:f4:a4:9e:94:aa:46:b5:34:46:3a:6e:
e3:43:71:c0:e1:73:92:58:03:32:a5:ae:26:5f:3a:
ef:d6:3e:fa:69:51:4c:d3:80:89:c0:b2:25:28:1b:
f2:62:a3:54:a9:a8:80:41:3c:70:35:1f:35:92:df:
d4:ca:11:ff:7d:0b:42:75:fe:ce:fd:39:5a:de:d8:
02:de:a7:cd:34:0c:8f:a7:2d:dd:bd:3a:84:2c:ae:
e0:1c:0e:04:a0:42:0f:48:60:41:30:17:28:39:0a:
8d:b2:4c:97:bd:5e:20:18:bb:f9:27:43:6a:1c:3a:
69:cd:44:27:c1:1e:3a:63:45:70:83:0b:e0:84:8d:
b3:f8:2c:52:e0:58:fd:c7:8a:41:47:b0:c9:c0:fc:
0d:a5:be:0b:88:e2:36:43:02:90:49:56:f9:e8:af:
2b:64:d7:4f:09:9b:9a:69:1c:13:4c:f2:a3:a7:ca:
44:1b:17:b8:9d:b8:53:58:93:85:22:28:53:95:75:
e4:c3:23:45:8b:48:d4:44:49:35:b2:a6:2d:59:30:
7c:00:03:15:13:77:75:d6:91:5d:ef:02:ee:04:d7:
d7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F3:48:E1:86:8B:A3:EE:2F:1F:EC:47:4E:18:93:15:06:33:36:59
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/E_NI4YaLo-4vH-xHThiTFQYzNlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.250.0/24
Signature Algorithm: sha256WithRSAEncryption
17:df:3f:3e:b6:75:47:a1:3d:0b:06:f9:c2:5e:d3:8a:76:6a:
d6:83:3b:22:c2:5d:df:49:ba:8f:a5:89:14:e4:77:86:ae:4b:
04:4d:77:05:34:9e:e8:64:47:93:64:b1:69:39:a1:ed:02:52:
ab:6e:23:c6:fd:39:bf:be:94:c9:56:84:b6:50:61:5b:eb:e4:
37:30:94:10:c3:3d:90:6f:65:b4:59:7b:a6:f6:7a:a5:fe:04:
80:e9:74:27:38:f3:0d:b8:8e:27:b8:c2:6f:a7:19:84:44:8c:
bb:f8:76:26:c0:8a:4a:34:7d:00:bf:27:d7:89:4d:73:1c:ad:
c9:ef:6f:2b:d3:ba:d1:97:42:9d:78:bd:f8:77:79:1a:7f:e7:
e0:7f:cb:f8:9e:20:6f:9a:e7:ae:ff:ad:cc:d4:c3:5b:f0:f0:
4e:0e:2e:75:b7:53:44:6d:d1:dc:9e:db:25:f8:20:de:cb:0b:
3e:9b:a1:13:c7:60:51:b9:1c:9a:99:e0:0f:d4:dc:bb:1c:d1:
37:b0:d3:3f:7d:e3:3c:05:75:33:b9:2a:5c:01:60:e7:91:34:
55:7b:63:2c:e8:d1:3f:c8:d5:db:72:b4:fb:26:0a:b8:d7:2e:
f4:98:99:74:86:c0:26:8d:9f:3d:2b:7b:db:11:d2:e4:a0:c6:
28:54:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:22:23 2026 by rpki-client