Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/4zUuJLxbytA58yz_8CPQ-fCeE_w.roa
File: 4zUuJLxbytA58yz_8CPQ-fCeE_w.roa (raw, json)
Hash identifier: Je10rxa6GNXBQyt5VGMNbKvaC26HJG8fWwTPdKlrmSc=
Subject key identifier: E3:35:2E:24:BC:5B:CA:D0:39:F3:2C:FF:F0:23:D0:F9:F0:9E:13:FC
Certificate issuer: /CN=c9987faf84068453bce7a085f7e2441593c44f61
Certificate serial: 019FD6440A532A99DF76F8B69B33B6E7CE88
Authority key identifier: C9:98:7F:AF:84:06:84:53:BC:E7:A0:85:F7:E2:44:15:93:C4:4F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZh_r4QGhFO856CF9-JEFZPET2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/4zUuJLxbytA58yz_8CPQ-fCeE_w.roa
Signing time: Thu 06 Aug 2026 08:50:11 +0000
ROA not before: Thu 06 Aug 2026 08:50:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8426
IP address blocks: 193.96.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/yZh_r4QGhFO856CF9-JEFZPET2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/yZh_r4QGhFO856CF9-JEFZPET2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZh_r4QGhFO856CF9-JEFZPET2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:44:0a:53:2a:99:df:76:f8:b6:9b:33:b6:e7:ce:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9987faf84068453bce7a085f7e2441593c44f61
Validity
Not Before: Aug 6 08:50:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3352e24bc5bcad039f32cfff023d0f9f09e13fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:f5:d6:09:a3:81:8d:0e:0b:d1:ed:77:0c:
e2:a8:c1:7b:0f:1b:cc:ae:18:8d:8c:78:77:fc:e8:
f1:4e:ac:e2:80:1b:80:d6:a6:e2:d0:af:e8:7f:d6:
8a:73:4e:51:50:e9:9d:16:ca:89:e5:eb:25:6a:d0:
c9:0f:db:6a:e5:9a:ca:f8:d3:3b:46:5b:93:30:97:
ad:6e:cb:1a:44:b7:d2:c0:0d:5c:a6:be:19:2d:5d:
45:dc:00:e2:04:15:4d:aa:31:ce:6d:0a:6c:9b:10:
af:ee:15:23:05:87:99:29:d7:d0:09:d3:f6:58:e3:
d8:33:25:ad:84:d3:23:de:4a:2e:6f:9c:6d:c8:9d:
36:13:76:69:6f:0d:d6:db:17:5e:e0:c8:db:2d:ca:
e5:72:13:bc:fd:a0:a0:c0:f6:96:dd:dd:3d:a7:39:
38:37:92:ba:23:06:74:08:2d:fb:b1:29:ea:22:1e:
12:95:57:7e:cf:2d:7e:3c:34:bd:b1:e1:40:67:ed:
bd:33:96:b9:5f:af:54:fc:3d:cb:e9:1a:ed:04:29:
a5:7e:67:aa:e3:96:54:08:4b:ea:8e:7c:5e:0e:4b:
23:0c:87:61:ef:37:a5:25:01:5b:9a:e5:99:58:c9:
fe:c5:53:56:5c:f8:14:a2:42:3b:86:ba:3a:cf:d7:
20:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:35:2E:24:BC:5B:CA:D0:39:F3:2C:FF:F0:23:D0:F9:F0:9E:13:FC
X509v3 Authority Key Identifier:
keyid:C9:98:7F:AF:84:06:84:53:BC:E7:A0:85:F7:E2:44:15:93:C4:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZh_r4QGhFO856CF9-JEFZPET2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/4zUuJLxbytA58yz_8CPQ-fCeE_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/yZh_r4QGhFO856CF9-JEFZPET2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.96.237.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c9:7e:31:5c:74:9c:4c:5e:c5:bd:c8:16:de:a0:80:02:92:
16:e1:80:bc:94:0d:53:a5:fa:99:3a:4a:87:2f:9f:7a:5e:72:
bb:2a:d1:10:7a:b2:83:8b:b0:b8:6a:07:65:a8:85:07:e0:db:
7c:91:2f:48:17:3b:9c:c0:5a:af:37:fa:65:79:6c:5f:66:04:
43:0c:08:86:54:33:e8:55:96:8f:40:82:8d:f9:c2:30:da:55:
2c:69:a5:1b:ae:55:20:8e:e0:f7:e9:60:dc:30:af:34:32:c7:
6b:9a:88:35:09:bb:80:0f:e2:04:0b:40:e1:9c:4c:c4:1e:13:
30:c2:9b:e2:72:34:c3:7f:ca:ae:cd:3c:46:9f:9e:2d:23:a6:
ba:df:1c:c8:e9:9f:be:91:7b:34:19:21:3c:cb:5c:24:8a:a5:
af:37:df:38:d0:f2:28:a5:84:03:6e:f0:45:88:52:24:b5:62:
b3:30:44:49:84:34:2f:37:12:c1:c6:09:7d:1b:c8:1b:3b:b3:
ea:fe:26:ac:03:b0:f5:49:aa:94:d3:ec:6b:e0:91:95:64:7e:
68:85:23:72:7d:1c:8f:9b:8c:0c:eb:cc:86:6e:66:de:76:d8:
f0:98:f0:32:6a:3a:69:8f:e5:4c:1b:80:fa:70:27:b9:ef:73:
d8:9b:e9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:27:40 2026 by rpki-client