Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/m9c46eni9yZMngOFFo19sH6DwbM.roa
File: m9c46eni9yZMngOFFo19sH6DwbM.roa (raw, json)
Hash identifier: ZUjTwPyUn4Vyebeha6QqOs7+cWCLWPu9Lx1jvOq5UGQ=
Subject key identifier: 9B:D7:38:E9:E9:E2:F7:26:4C:9E:03:85:16:8D:7D:B0:7E:83:C1:B3
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019E1BD7A2C622A4B6E59D63AA9463CA8A2C
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/m9c46eni9yZMngOFFo19sH6DwbM.roa
Signing time: Tue 12 May 2026 10:59:37 +0000
ROA not before: Tue 12 May 2026 10:59:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64160
IP address blocks: 194.143.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d7:a2:c6:22:a4:b6:e5:9d:63:aa:94:63:ca:8a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: May 12 10:59:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bd738e9e9e2f7264c9e0385168d7db07e83c1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:1e:2b:a7:3c:6f:24:a8:0e:14:e4:74:72:
8e:aa:43:7a:31:9b:88:74:36:8f:9f:13:84:3f:b7:
8f:8a:bf:0c:76:d6:ae:3e:00:ca:9f:dd:5d:db:97:
7e:64:dd:81:17:8f:a9:00:82:b0:69:54:83:d5:1e:
06:cc:d1:c5:dc:99:35:4c:e5:62:c2:38:33:dd:3e:
0e:0b:5f:47:36:0c:32:39:1e:26:19:a0:d9:11:4e:
23:e2:85:10:7e:45:09:20:30:34:8e:6a:35:d5:92:
43:71:e9:af:63:f4:67:e7:56:1c:73:1e:ca:89:b8:
ec:80:fd:67:cf:c7:14:29:27:a3:94:ea:cf:21:5e:
a2:d6:48:b8:cf:d6:3e:54:01:ea:61:03:37:59:db:
33:f3:02:77:ac:2e:5c:26:af:cd:12:bd:06:36:f7:
4d:24:87:df:27:04:28:7b:16:2f:c9:d7:71:0f:80:
81:44:b8:d5:9b:f4:4e:42:98:fa:09:9a:85:75:be:
99:32:8c:6b:04:df:7e:dd:2f:d0:28:bf:89:79:a6:
17:d5:96:d1:7f:8a:66:a5:da:79:9e:c3:30:25:d6:
a3:5f:a0:eb:48:d0:70:ac:4b:f9:25:3b:da:67:b3:
4c:a7:de:6a:96:d3:b3:56:27:71:24:93:d1:64:32:
d4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D7:38:E9:E9:E2:F7:26:4C:9E:03:85:16:8D:7D:B0:7E:83:C1:B3
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/m9c46eni9yZMngOFFo19sH6DwbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.209.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b5:ce:bf:7c:8c:8c:75:dd:ae:30:69:cc:85:db:e6:3b:e2:
2e:19:8b:a1:ec:2f:b8:bf:a6:f1:9a:9c:ff:d3:c8:d4:fd:c8:
58:b0:2d:15:87:89:95:a5:89:1b:2c:41:77:25:cf:84:5d:90:
4a:02:65:55:c8:39:4a:cb:4b:29:04:33:e0:3c:4f:c2:cb:ba:
95:73:41:8f:75:04:44:e3:7d:8e:06:7e:99:f1:00:b6:08:d5:
59:34:1a:b4:11:76:5a:1c:cc:25:84:d6:a1:39:d0:8c:10:ce:
52:9a:5d:ba:4d:44:d9:35:e5:30:1d:88:28:a4:44:7a:8d:1c:
a2:f4:b4:25:65:f1:d9:e1:c0:f5:fd:b0:1f:ca:ad:76:bc:40:
96:d7:85:a9:90:f8:3f:07:0e:f3:d9:48:3a:74:2a:a2:a7:fe:
18:fc:ce:08:7a:a3:b6:91:6b:7c:7b:75:ff:4c:50:00:a4:69:
e0:ee:c0:8e:5b:66:93:77:79:e7:72:cd:ca:c1:12:4b:b0:26:
42:d1:b5:ad:00:e2:92:0f:a5:b0:5d:fc:53:c9:99:90:f0:ba:
87:0d:18:d3:81:24:b0:0a:a1:d1:f1:cf:d2:98:34:9b:75:d5:
5f:de:e1:b8:72:67:72:79:77:5b:8a:dd:84:ac:4a:59:f1:24:
ad:1d:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:55 2026 by rpki-client