Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/i9y06XpGQ7gr-mdfp0S7uUFwlS4.roa
File: i9y06XpGQ7gr-mdfp0S7uUFwlS4.roa (raw, json)
Hash identifier: /g2Zo7QZ+s2u4dfNouu8ACPFZIuHW58Outw73PTsBo0=
Subject key identifier: 8B:DC:B4:E9:7A:46:43:B8:2B:FA:67:5F:A7:44:BB:B9:41:70:95:2E
Certificate issuer: /CN=ce10101388b7ce378707993a0576aa3ddd95a979
Certificate serial: 019D0517A885D94B65616820D66131111724
Authority key identifier: CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/i9y06XpGQ7gr-mdfp0S7uUFwlS4.roa
Signing time: Thu 19 Mar 2026 07:55:29 +0000
ROA not before: Thu 19 Mar 2026 07:55:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209163
IP address blocks: 193.109.250.0/24 maxlen: 24
193.109.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:17:a8:85:d9:4b:65:61:68:20:d6:61:31:11:17:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10101388b7ce378707993a0576aa3ddd95a979
Validity
Not Before: Mar 19 07:55:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bdcb4e97a4643b82bfa675fa744bbb94170952e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:2e:be:30:bf:fe:c6:97:a5:0d:94:ff:df:
bc:fa:6e:4c:63:a8:7d:5e:7f:93:4d:9b:96:1a:0c:
aa:b8:05:30:15:67:b2:99:fd:b3:1f:ca:42:96:7c:
32:71:21:39:ef:bd:3a:d4:51:92:78:a5:59:d3:ef:
cd:bc:01:93:aa:c6:d5:41:0d:1f:9a:b9:ed:7f:35:
ee:ea:63:db:c6:1b:67:7b:c3:3e:bf:0a:b2:7a:73:
c1:fb:77:ae:eb:c9:47:29:b4:c0:b5:65:12:df:69:
20:35:bf:94:cf:0b:4a:ab:d6:08:23:51:e5:99:bd:
f5:e2:b4:45:98:b0:13:b3:3a:23:5f:41:65:f0:e8:
37:80:f8:6f:e7:39:a5:32:b7:ff:59:5e:89:fa:7f:
95:ba:99:5d:06:1e:bb:b0:af:fa:e3:d4:cb:9d:89:
d1:3b:e7:fb:68:52:2e:a5:2a:c0:6c:e2:1d:88:3b:
cc:85:d6:37:fc:b5:78:04:84:e1:e5:2e:a6:2a:9d:
c0:80:69:1d:ed:c8:44:19:a5:2e:8a:d3:33:b3:33:
c7:52:62:f4:93:59:d5:a2:73:89:b1:23:7c:37:94:
79:08:e2:f1:66:d6:a4:fc:04:c2:7b:3b:c2:1e:d3:
69:d4:43:3e:98:a5:33:36:a9:89:4a:73:9e:b4:5b:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DC:B4:E9:7A:46:43:B8:2B:FA:67:5F:A7:44:BB:B9:41:70:95:2E
X509v3 Authority Key Identifier:
keyid:CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/i9y06XpGQ7gr-mdfp0S7uUFwlS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.250.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:7d:18:da:8e:6b:b3:16:8f:3c:4d:e7:60:ff:d9:22:38:58:
73:db:c1:5c:f5:64:b0:1b:33:62:e6:b0:f3:f8:7c:ef:ee:25:
fd:a8:a4:4e:65:70:42:e5:43:b3:6e:4d:d3:6f:6e:7d:ab:05:
86:b1:68:41:42:47:05:b4:10:cd:9e:8b:ac:28:5f:e0:23:23:
b4:40:8b:0f:79:74:ab:5f:bc:b7:c7:16:c4:2d:cc:da:6e:b2:
01:c3:a2:44:85:b6:b4:42:1d:90:d3:6e:b2:19:b1:ab:29:37:
d8:c5:5f:eb:2d:bd:5a:6d:4f:26:f1:f5:39:34:29:8c:ce:bf:
7b:bb:f8:7d:84:b6:8d:e9:9b:d2:7e:e8:d2:f3:61:43:64:d7:
62:8e:3c:05:71:f8:de:c0:e3:1b:01:76:1c:49:f6:62:23:4f:
ab:b1:c3:51:86:5f:9d:a3:8a:ef:2f:8e:95:5e:49:12:b6:6d:
ac:7f:83:18:16:bb:07:be:67:5a:18:d9:49:b5:72:9b:88:e8:
1f:ad:28:75:42:f8:63:52:69:cd:6e:61:ef:39:5c:cf:ca:69:
38:fb:02:b0:b0:39:ad:34:f3:b6:35:d5:58:17:c7:14:cb:fc:
be:35:01:65:23:2c:3f:86:ef:ba:ad:3d:34:b4:53:71:2d:86:
1e:dc:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:14:39 2026 by rpki-client