Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f9725f-2255-4991-a530-05da79981472/1/9oFy5MWnDJgvTu1V_C5QchqZ9yo.roa
File: 9oFy5MWnDJgvTu1V_C5QchqZ9yo.roa (raw, json)
Hash identifier: 5AX6MRnHuWcXdrtdnzJjZhgd4c756gQGGy0Ky+HY9n0=
Subject key identifier: F6:81:72:E4:C5:A7:0C:98:2F:4E:ED:55:FC:2E:50:72:1A:99:F7:2A
Certificate issuer: /CN=e393b920df01249c985b9f34ad0133e8fcb82442
Certificate serial: 019F828F7CA6493F3B6E026A3A8A85C3FCEE
Authority key identifier: E3:93:B9:20:DF:01:24:9C:98:5B:9F:34:AD:01:33:E8:FC:B8:24:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45O5IN8BJJyYW580rQEz6Py4JEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f9725f-2255-4991-a530-05da79981472/1/9oFy5MWnDJgvTu1V_C5QchqZ9yo.roa
Signing time: Tue 21 Jul 2026 02:44:29 +0000
ROA not before: Tue 21 Jul 2026 02:44:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208535
IP address blocks: 193.23.141.0/24 maxlen: 24
2a12:7140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f9725f-2255-4991-a530-05da79981472/1/45O5IN8BJJyYW580rQEz6Py4JEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f9725f-2255-4991-a530-05da79981472/1/45O5IN8BJJyYW580rQEz6Py4JEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/45O5IN8BJJyYW580rQEz6Py4JEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:8f:7c:a6:49:3f:3b:6e:02:6a:3a:8a:85:c3:fc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e393b920df01249c985b9f34ad0133e8fcb82442
Validity
Not Before: Jul 21 02:44:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f68172e4c5a70c982f4eed55fc2e50721a99f72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bf:fd:76:06:6b:0f:67:c6:ec:77:3d:e5:ed:
f1:3d:36:30:3f:b4:15:7e:c5:6b:9d:2a:a0:a9:e1:
3e:62:09:2c:95:d5:bd:0e:ef:86:1a:58:6b:81:2d:
2a:82:f1:60:8d:6a:e1:50:ee:ef:e5:19:3b:b8:6a:
ae:ca:a1:10:2a:f1:b5:16:83:9e:9d:84:c4:7e:e0:
08:fe:8d:de:aa:4d:47:0b:c8:9e:33:b5:52:2e:12:
08:97:ed:a1:19:07:9c:2b:cb:78:62:9d:96:d5:96:
4b:d9:9d:c9:bb:62:8b:6d:80:da:6c:00:82:9c:02:
77:df:ae:68:5d:0b:3a:fd:97:f0:c5:de:b0:75:02:
fc:70:53:f4:25:25:59:6b:d0:33:0d:e8:ed:bc:2c:
67:c0:d6:ba:1a:7f:17:86:98:e4:80:83:48:97:9b:
f2:5e:39:ed:fd:9b:81:8b:7e:1d:65:cc:84:8b:44:
33:d1:39:5e:4d:52:ed:33:df:3d:7e:31:bd:20:12:
9d:87:a9:f1:ac:a9:2c:4a:cf:d8:4f:dd:26:bc:ec:
eb:6a:b1:0e:5b:7c:10:5d:44:ad:2f:95:34:2c:47:
86:45:96:72:be:2d:7c:8c:28:46:18:fb:4f:27:75:
6c:51:9c:a3:5d:e0:29:5d:85:85:66:dc:1c:72:19:
b9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:81:72:E4:C5:A7:0C:98:2F:4E:ED:55:FC:2E:50:72:1A:99:F7:2A
X509v3 Authority Key Identifier:
keyid:E3:93:B9:20:DF:01:24:9C:98:5B:9F:34:AD:01:33:E8:FC:B8:24:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45O5IN8BJJyYW580rQEz6Py4JEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f9725f-2255-4991-a530-05da79981472/1/9oFy5MWnDJgvTu1V_C5QchqZ9yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f9725f-2255-4991-a530-05da79981472/1/45O5IN8BJJyYW580rQEz6Py4JEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.141.0/24
IPv6:
2a12:7140::/32
Signature Algorithm: sha256WithRSAEncryption
75:77:33:63:f0:fa:7e:2f:29:02:97:9c:8d:ff:44:85:39:13:
13:21:74:cf:f2:35:84:f2:af:02:a4:94:43:f0:70:fa:f3:93:
47:42:d7:dc:e2:96:21:22:4b:d1:03:52:4f:a0:2b:ee:39:ce:
3e:81:db:e1:95:ab:b8:29:82:e0:d5:ce:90:2d:3a:9e:35:6a:
1d:6a:d4:5b:05:b3:34:b8:af:38:4b:66:e9:dd:c7:8a:97:c0:
5c:82:af:0d:fa:dd:98:16:14:4b:5b:24:4b:40:92:1d:39:f4:
81:a6:3b:01:12:ba:db:90:ff:71:d7:9d:c0:9e:81:b5:8f:fc:
fa:b3:98:8f:1c:d0:53:3a:a3:4d:12:16:4b:76:a9:1e:3e:fc:
6f:fc:56:d0:c7:b2:db:62:bb:60:70:fa:fa:75:4c:a9:0d:b6:
a7:17:19:da:4d:97:7b:f7:f8:78:c8:61:3b:1e:82:ea:a1:bd:
4d:4c:59:f8:0e:2c:28:76:84:40:9d:2b:93:df:5d:8e:17:04:
23:c6:d8:05:1c:ef:db:ce:d5:39:00:0a:d6:4a:38:4e:71:c7:
97:5f:46:20:60:cc:b5:ce:37:76:65:85:7d:94:b5:3c:1a:e3:
a2:0d:5a:c2:77:91:6a:1d:13:06:a1:89:cd:bd:a3:d1:16:e7:
dc:22:4f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:42:02 2026 by rpki-client