Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/lJniCgGjnHhA3GFJIDLVCbo779I.roa
File: lJniCgGjnHhA3GFJIDLVCbo779I.roa (raw, json)
Hash identifier: s3LKRJRQrEw379uGqLITs83SrE+PiQQzjtSJn9iT9jg=
Subject key identifier: 94:99:E2:0A:01:A3:9C:78:40:DC:61:49:20:32:D5:09:BA:3B:EF:D2
Certificate issuer: /CN=227994b66f9fd67c175e343c62aee6077cd4245f
Certificate serial: 01A0CE3B09B7E8FE512D16C4B19AE76694B9
Authority key identifier: 22:79:94:B6:6F:9F:D6:7C:17:5E:34:3C:62:AE:E6:07:7C:D4:24:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/lJniCgGjnHhA3GFJIDLVCbo779I.roa
Signing time: Wed 23 Sep 2026 12:26:10 +0000
ROA not before: Wed 23 Sep 2026 12:26:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210976
IP address blocks: 129.101.120.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:3b:09:b7:e8:fe:51:2d:16:c4:b1:9a:e7:66:94:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=227994b66f9fd67c175e343c62aee6077cd4245f
Validity
Not Before: Sep 23 12:26:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9499e20a01a39c7840dc61492032d509ba3befd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:67:2a:3c:3f:c0:bb:ce:f2:d9:b3:dc:29:5a:
ca:3b:5d:87:f9:6c:b4:bf:44:4d:36:2b:9d:35:1e:
a2:9a:aa:00:88:ab:e7:e8:d5:f3:87:31:32:a3:9e:
33:de:fc:a7:e8:33:93:20:89:a2:fa:50:65:c6:2c:
4e:43:8f:d9:59:a3:7e:85:51:eb:d1:b8:f5:20:c4:
02:2e:8c:ba:1c:60:d3:09:75:87:4d:5f:50:df:1a:
0c:0e:f1:a4:e8:d6:75:83:90:57:50:a7:cb:59:6e:
d0:62:19:56:04:b3:85:b1:73:85:4f:fa:dd:cd:c2:
5f:3c:63:09:7b:74:92:ce:40:98:0a:e1:ed:eb:5d:
f9:9a:91:2b:25:96:92:24:ed:a0:d9:8c:9e:cb:53:
4d:b2:84:b6:27:22:5d:54:6b:4d:c1:5a:d5:67:4f:
89:2d:42:47:33:c0:cc:23:75:a4:07:d7:8e:18:d2:
12:10:80:7d:18:00:e4:8e:a8:b6:76:67:60:b7:4f:
eb:e7:b5:4a:3c:04:cc:e6:c8:74:93:0b:f7:83:1e:
e3:8c:3b:99:6b:c4:ce:f5:a0:44:a7:2c:d9:8c:a3:
8e:d7:0e:fd:ad:f6:3d:d2:23:6e:60:3e:f3:19:e0:
bd:30:ea:57:b2:a4:00:43:cc:5b:62:ad:a0:63:2f:
8e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:99:E2:0A:01:A3:9C:78:40:DC:61:49:20:32:D5:09:BA:3B:EF:D2
X509v3 Authority Key Identifier:
keyid:22:79:94:B6:6F:9F:D6:7C:17:5E:34:3C:62:AE:E6:07:7C:D4:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/lJniCgGjnHhA3GFJIDLVCbo779I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.101.120.0/21
Signature Algorithm: sha256WithRSAEncryption
29:86:97:3c:eb:2f:c1:30:00:8d:23:5d:73:95:d2:9a:1e:47:
93:53:c2:4a:74:27:4e:cb:54:ea:f4:e6:19:f5:fa:9c:91:1c:
16:c8:60:6b:5f:9e:ef:c0:52:5b:91:48:1b:27:f2:32:9c:33:
a1:e0:6f:3c:62:6b:f7:71:a0:9a:b2:c1:a6:6e:2a:20:d8:8e:
00:84:c6:1e:31:14:b1:05:1f:94:07:3b:09:63:a3:3c:da:f1:
6e:bf:6f:09:4d:4c:e2:e1:38:26:20:ef:1b:d1:53:3f:76:80:
c6:a2:eb:31:79:e2:92:e6:c3:8e:fa:6d:15:a8:9f:6e:f2:04:
b1:48:6c:57:65:1d:b1:2d:ca:0d:ae:78:60:cf:81:d3:2d:a9:
13:77:42:5e:e2:65:7f:cb:7d:be:d2:92:b7:ca:80:1c:75:bd:
f5:9a:1f:99:62:26:39:03:1b:41:83:18:ac:9e:8a:0f:2e:2a:
96:4a:4a:5b:1b:86:63:40:25:e8:f3:d4:fd:34:a6:70:6b:44:
ef:09:07:cd:f9:8a:0a:59:0d:f1:bc:15:89:12:6e:3e:5a:6f:
76:47:7b:48:82:c8:f5:28:23:e6:99:af:4a:18:dc:90:63:31:
d5:a1:3d:1a:46:0f:91:ba:9e:35:16:93:65:ef:27:52:65:08:
53:30:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:21:16 2026 by rpki-client