Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/0049fe-3d24-44c3-a643-7168c71d8f77/1/1-axFWp8KGfcL3_OyH91HMQG3TGw.roa
File: 1-axFWp8KGfcL3_OyH91HMQG3TGw.roa (raw, json)
Hash identifier: Ta6buhKWaYA0m5Ph/cDECO8G8raMv2bqChhZJ0nRTYc=
Subject key identifier: F9:AC:45:5A:9F:0A:19:F7:0B:DF:F3:B2:1F:DD:47:31:01:B7:4C:6C
Certificate issuer: /CN=f36c115a7c0f2ec067c714dbd6628210e93fa311
Certificate serial: 01A0C8AC8044A330B3F104B1F80655DC1142
Authority key identifier: F3:6C:11:5A:7C:0F:2E:C0:67:C7:14:DB:D6:62:82:10:E9:3F:A3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82wRWnwPLsBnxxTb1mKCEOk_oxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0049fe-3d24-44c3-a643-7168c71d8f77/1/1-axFWp8KGfcL3_OyH91HMQG3TGw.roa
Signing time: Tue 22 Sep 2026 10:32:23 +0000
ROA not before: Tue 22 Sep 2026 10:32:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 194.35.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0049fe-3d24-44c3-a643-7168c71d8f77/1/82wRWnwPLsBnxxTb1mKCEOk_oxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/0049fe-3d24-44c3-a643-7168c71d8f77/1/82wRWnwPLsBnxxTb1mKCEOk_oxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/82wRWnwPLsBnxxTb1mKCEOk_oxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:ac:80:44:a3:30:b3:f1:04:b1:f8:06:55:dc:11:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f36c115a7c0f2ec067c714dbd6628210e93fa311
Validity
Not Before: Sep 22 10:32:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9ac455a9f0a19f70bdff3b21fdd473101b74c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:1d:ee:e7:85:d5:80:04:69:7b:14:55:f8:
14:07:13:f0:7e:ba:49:c1:ce:4b:9d:c5:a5:46:8c:
05:14:13:af:8e:77:5a:ef:c5:b6:a9:ff:59:e7:74:
4e:80:26:35:19:6e:d1:5c:81:6f:ce:d1:61:fa:1f:
74:eb:18:98:b6:2c:bf:b6:48:9c:cd:7c:ed:25:86:
9d:96:89:1a:92:b6:ee:1c:8c:6a:a8:e1:cd:53:5d:
4b:d0:28:93:75:32:10:b6:55:df:f4:24:1b:8b:ec:
57:f2:53:05:78:e4:f8:21:49:0a:a5:04:00:a5:1c:
39:56:d9:a8:2b:50:99:f4:20:e3:ee:b6:c5:58:99:
7e:11:d2:93:a7:f4:1c:cc:d4:c3:ca:7d:b3:70:1d:
25:fa:69:c3:1a:66:48:6e:ac:22:7b:06:68:07:83:
27:0b:9c:89:d4:8a:4b:2d:34:6a:83:8a:2b:38:50:
25:8f:83:65:c4:70:b5:21:bd:e4:d9:50:05:47:e8:
ca:c2:3e:3b:83:16:79:52:b0:0d:7e:3f:1f:7d:9a:
92:b4:a5:6a:01:a6:d4:67:f9:33:59:94:b6:c7:5e:
2a:42:1f:31:72:f0:40:b7:43:de:90:25:ca:12:40:
63:f4:2c:0b:66:87:7b:7d:57:23:ed:05:84:72:62:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AC:45:5A:9F:0A:19:F7:0B:DF:F3:B2:1F:DD:47:31:01:B7:4C:6C
X509v3 Authority Key Identifier:
keyid:F3:6C:11:5A:7C:0F:2E:C0:67:C7:14:DB:D6:62:82:10:E9:3F:A3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82wRWnwPLsBnxxTb1mKCEOk_oxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0049fe-3d24-44c3-a643-7168c71d8f77/1/1-axFWp8KGfcL3_OyH91HMQG3TGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0049fe-3d24-44c3-a643-7168c71d8f77/1/82wRWnwPLsBnxxTb1mKCEOk_oxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.93.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:00:f4:40:c9:ac:92:3e:28:0b:84:d1:57:f9:1c:6e:db:a8:
0a:70:ee:ff:71:a7:43:3a:49:ab:b5:36:6a:0c:c6:a1:09:d2:
00:1b:76:31:a8:57:3a:63:19:74:99:04:8f:c3:b4:90:fd:aa:
ec:60:4c:4c:64:e8:4b:a2:f7:3c:fe:e0:1c:c8:b1:6c:d9:14:
86:02:6b:8c:60:24:a6:c1:34:4a:62:6a:2d:a1:db:49:3a:47:
1c:8f:4a:09:fd:b0:74:8a:07:9a:57:5f:b7:66:05:6b:c7:93:
30:c9:96:af:82:b5:08:fc:4b:27:0c:80:bd:44:d2:10:9f:d6:
6d:c9:5e:8e:7e:09:2a:50:50:ec:42:30:6e:68:51:0a:a5:3d:
73:87:ae:3d:9e:8b:bf:66:2b:e2:39:9e:e3:31:b1:d1:9b:d8:
22:29:06:22:db:16:22:07:a9:9b:66:60:f8:26:ef:27:3b:46:
3e:40:40:8b:87:01:22:a1:ea:d4:74:2b:64:2e:b6:b2:39:f2:
f9:06:62:8e:fe:5b:f7:6c:70:f3:c8:97:1e:af:b8:d1:d5:ad:
87:e6:ec:33:db:8c:65:5f:53:19:b7:07:d0:ea:68:43:12:f5:
72:5a:5c:63:83:94:e0:f4:ac:3f:04:5c:e6:82:70:19:fd:d1:
9e:d1:55:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:29:22 2026 by rpki-client