Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/x9nNlfs0usqpB2CNLeFBhg8w00s.roa
File: x9nNlfs0usqpB2CNLeFBhg8w00s.roa (raw, json)
Hash identifier: QOAivhfYhLBa/7NTmG8pgN02rXOKaoOyTZQs87c3v4M=
Subject key identifier: C7:D9:CD:95:FB:34:BA:CA:A9:07:60:8D:2D:E1:41:86:0F:30:D3:4B
Certificate issuer: /CN=94ab339a1da3bd4f72c73026ef58d0b61ad27705
Certificate serial: 019F2369277949F65C9E1238C83C9556D57D
Authority key identifier: 94:AB:33:9A:1D:A3:BD:4F:72:C7:30:26:EF:58:D0:B6:1A:D2:77:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/x9nNlfs0usqpB2CNLeFBhg8w00s.roa
Signing time: Thu 02 Jul 2026 15:18:41 +0000
ROA not before: Thu 02 Jul 2026 15:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20572
IP address blocks: 193.108.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:27:79:49:f6:5c:9e:12:38:c8:3c:95:56:d5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ab339a1da3bd4f72c73026ef58d0b61ad27705
Validity
Not Before: Jul 2 15:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7d9cd95fb34bacaa907608d2de141860f30d34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:64:5c:0d:e2:af:f5:e8:b4:7a:c6:99:4f:
10:c6:c3:36:f3:fe:48:9c:6d:2f:c8:a8:f2:b6:66:
31:2d:32:87:d9:53:59:a8:a4:ae:51:03:e6:54:3a:
d5:c0:1b:51:0b:a4:4f:f0:62:64:05:a7:93:a5:38:
9b:de:d9:4a:b9:b8:e9:86:9f:9c:0d:c7:c7:c0:dd:
4f:68:5a:02:d9:0d:41:d9:c0:97:e4:57:4e:56:91:
c8:ed:0c:e2:00:af:fc:9f:10:dc:32:c1:fc:63:57:
42:50:80:02:6a:35:b1:dc:51:f9:c5:84:b2:71:0b:
16:d7:82:8e:82:d6:88:d5:3e:5e:42:15:56:c2:64:
4b:56:3e:e0:b6:e2:84:36:15:6e:97:a4:5d:9b:49:
ea:3c:90:e3:71:8b:aa:09:be:e1:2e:71:81:c3:98:
b3:a8:ab:77:59:f3:bf:09:30:88:15:cc:76:9b:78:
b0:84:16:0d:10:94:5b:af:34:f8:a7:db:42:d2:54:
8b:bf:a2:14:3a:0c:3e:67:53:46:dc:5d:7a:0e:d3:
d9:1c:a8:4f:53:79:e7:a6:f8:a0:7d:31:0b:48:8f:
e5:3a:41:1d:c5:c0:5c:c9:6a:7c:7c:eb:36:69:61:
f8:45:d5:a4:5d:a2:be:ea:29:e4:dd:52:1f:7e:4c:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D9:CD:95:FB:34:BA:CA:A9:07:60:8D:2D:E1:41:86:0F:30:D3:4B
X509v3 Authority Key Identifier:
keyid:94:AB:33:9A:1D:A3:BD:4F:72:C7:30:26:EF:58:D0:B6:1A:D2:77:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/x9nNlfs0usqpB2CNLeFBhg8w00s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.184.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:a8:5b:15:69:63:d6:5e:67:0d:e2:3e:d4:7c:0a:d9:98:cc:
a9:e5:e4:8c:46:1b:12:db:e1:6e:a6:9c:71:8e:c3:42:6f:84:
38:a8:34:fe:43:fb:69:37:ed:fc:50:9c:cc:e9:44:d8:3f:3e:
fa:d2:ac:f9:e6:f9:0e:83:41:98:e4:57:ae:9b:33:0f:a7:af:
0d:97:6b:f8:b6:af:70:ec:c5:4e:a8:9f:f2:dc:0f:1e:2d:c6:
46:d6:03:0a:1e:81:76:6f:44:5e:41:d1:d1:45:1d:73:31:b4:
a0:d9:20:a8:9b:2f:06:de:fb:87:0c:09:42:56:77:2b:f5:33:
5a:47:3c:5b:58:13:c8:09:8b:23:5d:9d:17:a4:56:80:5c:74:
37:dc:38:d5:d1:2c:6e:7f:98:3d:c0:27:cf:f5:49:16:4d:18:
e7:3e:5b:15:50:ff:7d:3d:3c:47:68:18:ef:5e:27:1e:54:fc:
ad:db:14:8a:e4:7e:6d:15:36:6a:10:92:a2:12:aa:03:af:19:
4e:9b:e8:0d:11:51:8b:bd:3a:2f:73:4e:6b:08:9b:a9:16:c1:
cd:b8:8f:25:d8:11:b2:bf:0c:59:ae:bc:47:8a:3a:73:08:1c:
6c:04:b1:6c:34:f1:5a:25:78:09:b6:be:5e:85:52:2e:8e:a8:
68:e7:d8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:08:56 2026 by rpki-client