Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/A9l3yW06MCRhC0vPEP_5L6oe6PU.roa
File: A9l3yW06MCRhC0vPEP_5L6oe6PU.roa (raw, json)
Hash identifier: QnT+4PmCf+dobjyw/dCsgXjulmPpCRJdE+AVb3L/yCw=
Subject key identifier: 03:D9:77:C9:6D:3A:30:24:61:0B:4B:CF:10:FF:F9:2F:AA:1E:E8:F5
Certificate issuer: /CN=3a0819039b66faef143f62627792776229317b62
Certificate serial: 019F23684C399A8A07CC58A23F68E2BD3621
Authority key identifier: 3A:08:19:03:9B:66:FA:EF:14:3F:62:62:77:92:77:62:29:31:7B:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OggZA5tm-u8UP2Jid5J3Yikxe2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/A9l3yW06MCRhC0vPEP_5L6oe6PU.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 185.223.96.0/22 maxlen: 22
195.128.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OggZA5tm-u8UP2Jid5J3Yikxe2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4c:39:9a:8a:07:cc:58:a2:3f:68:e2:bd:36:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0819039b66faef143f62627792776229317b62
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03d977c96d3a3024610b4bcf10fff92faa1ee8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:f1:8f:bc:c6:87:5a:94:a2:78:df:18:ac:
f1:d6:90:99:1e:ae:0a:ed:fa:57:24:da:ce:8b:54:
b3:36:fd:47:0a:7e:e9:bc:cc:65:8a:c4:60:08:0a:
1c:10:8a:6b:db:0a:68:05:23:2a:54:46:6e:ac:af:
7b:f9:9b:b0:23:97:26:41:ab:af:37:3c:e6:54:8c:
d9:9a:5f:67:91:c2:05:5e:53:7e:19:f8:a9:cb:5a:
c3:06:5a:21:6d:fe:b3:db:f8:4a:ad:e7:27:f8:d5:
e6:09:1a:a0:4f:66:f4:59:95:e7:57:d0:eb:1f:22:
75:43:4f:14:d5:fa:01:eb:48:44:8d:2c:c3:e3:bd:
92:64:a3:d5:f4:11:79:81:24:2b:a5:53:b3:91:9e:
87:71:b8:e7:4d:12:c5:77:7c:e8:2b:ce:a0:64:e9:
9b:a8:70:ee:ac:2b:17:00:57:66:7b:d7:c1:b6:c4:
86:aa:e1:6d:d1:28:4a:55:09:a8:9a:97:73:f8:ef:
03:b2:bf:0c:7e:18:da:61:86:a3:59:b8:91:fd:87:
95:9c:6f:bf:24:19:16:d7:f8:21:00:5d:30:4c:09:
da:ec:e8:c4:ad:cc:c5:22:0b:8b:30:8f:0e:93:3e:
fe:47:0c:66:03:2e:24:bb:41:f7:5a:6c:bf:d2:4c:
21:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D9:77:C9:6D:3A:30:24:61:0B:4B:CF:10:FF:F9:2F:AA:1E:E8:F5
X509v3 Authority Key Identifier:
keyid:3A:08:19:03:9B:66:FA:EF:14:3F:62:62:77:92:77:62:29:31:7B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OggZA5tm-u8UP2Jid5J3Yikxe2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/A9l3yW06MCRhC0vPEP_5L6oe6PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.96.0/22
195.128.12.0/22
Signature Algorithm: sha256WithRSAEncryption
95:5a:cc:b7:9e:a7:a8:b9:9c:ce:93:66:71:67:9f:7f:3b:4a:
5f:bf:2a:20:d3:e7:73:0d:fb:15:b4:13:bd:c9:d0:40:a2:3b:
f8:30:97:df:6c:a1:8e:db:15:08:1e:21:ae:f6:a3:d1:25:6c:
35:ba:a3:c2:fd:14:43:01:fc:59:e3:60:3f:97:a3:05:60:40:
1f:25:56:28:48:9d:3e:bb:c7:29:48:6c:42:42:47:ed:9d:c2:
e7:45:c0:77:f3:20:b3:09:50:a1:11:ee:32:a4:70:c4:03:ed:
aa:5d:f6:b9:bd:0f:fc:ac:9d:f1:5a:e9:59:65:79:f3:6a:9b:
5e:36:e1:b6:e4:cd:2b:a5:e7:c3:71:a3:28:8b:8d:e3:a5:5d:
f3:d4:71:ab:73:ae:40:ea:4c:22:55:d9:32:78:df:52:e0:81:
49:db:a4:ed:0b:1a:3b:8c:39:25:cb:4c:19:d0:76:5b:c5:9e:
cb:9a:a4:80:43:2c:f9:00:9b:a2:4b:11:f5:a3:4f:51:59:20:
fb:4a:a4:71:a1:c3:24:ed:65:0a:d0:80:e8:2b:2f:2d:4a:b9:
a3:36:49:e0:a7:2c:fa:57:c0:07:a6:46:f7:ed:97:9f:06:78:
a3:a2:96:e8:9a:4c:fc:a0:e6:c3:e5:47:56:82:8d:ce:9e:c1:
d8:dd:fe:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:29:45 2026 by rpki-client