Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/9Nc8fqO3ppxhW-Jct8GUNtvSV3Q.roa
File: 9Nc8fqO3ppxhW-Jct8GUNtvSV3Q.roa (raw, json)
Hash identifier: I/mhCT9o7KgK0oLXDIPxGztzZSgd0KUVRLKYVp1PO4s=
Subject key identifier: F4:D7:3C:7E:A3:B7:A6:9C:61:5B:E2:5C:B7:C1:94:36:DB:D2:57:74
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 019C1D3A47F8A3134E8831D3C6897576082D
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/9Nc8fqO3ppxhW-Jct8GUNtvSV3Q.roa
Signing time: Mon 02 Feb 2026 07:21:24 +0000
ROA not before: Mon 02 Feb 2026 07:21:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 185.231.113.0/24 maxlen: 24
194.36.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1d:3a:47:f8:a3:13:4e:88:31:d3:c6:89:75:76:08:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Feb 2 07:21:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4d73c7ea3b7a69c615be25cb7c19436dbd25774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:13:b1:a1:00:1b:a6:a2:cb:51:21:67:a0:
bb:6d:b0:fc:f2:60:c0:a2:84:48:f0:c9:b1:86:30:
de:89:a5:64:7d:10:c9:19:90:9f:0f:5b:3c:e5:67:
37:98:bf:c4:1a:00:9b:80:c2:c0:90:3f:b6:b1:56:
c8:4a:72:df:9f:d1:e2:1d:8c:fd:05:2c:91:fd:b8:
94:94:df:84:43:a1:6d:63:4a:af:1f:32:7a:e5:eb:
0f:94:93:9c:78:24:a4:a5:e7:1f:84:b3:d6:2f:c8:
fe:f4:ba:9b:c2:4b:8e:24:3c:78:d2:26:e0:9d:5e:
4b:9b:25:83:73:74:d8:d2:59:91:25:a3:9e:de:e3:
76:28:ee:05:97:e2:cf:87:ad:dc:e0:69:4d:ff:25:
0c:3c:d6:6f:3e:50:25:f4:b6:df:be:26:0b:65:0e:
2a:78:ed:7d:f5:4e:89:52:20:57:1f:f9:e3:82:40:
0a:e9:79:35:17:5d:17:33:86:bb:ab:63:c9:d0:40:
48:f7:c4:ed:b5:d0:19:16:cf:a7:4f:99:ab:cd:77:
19:bc:f1:71:05:dd:0a:68:95:19:4e:90:c0:68:85:
c4:6e:12:c6:10:2f:00:47:25:eb:a7:84:b3:d5:97:
50:1a:2d:d6:68:d4:c2:83:32:e7:63:87:b5:9a:28:
32:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D7:3C:7E:A3:B7:A6:9C:61:5B:E2:5C:B7:C1:94:36:DB:D2:57:74
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/9Nc8fqO3ppxhW-Jct8GUNtvSV3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.113.0/24
194.36.174.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a7:af:8c:5b:d6:0a:45:d1:81:22:73:d6:02:0a:2f:91:cf:
23:5d:2e:c9:a3:cc:71:e6:4b:2d:0c:16:cb:52:7c:7c:74:81:
9f:fd:a8:5d:56:99:ac:72:bd:e2:9c:9d:42:94:0f:35:18:a5:
77:94:60:84:e1:bb:c7:ea:34:ec:fc:a9:54:a9:a8:81:92:61:
90:19:8e:f3:51:d0:04:da:62:d3:c8:ff:0c:16:14:56:a8:4f:
6c:af:e0:7c:96:4f:98:cd:ad:18:e3:9d:05:ad:88:55:1d:a5:
fe:46:a6:78:e1:bc:c9:dd:e3:66:e3:62:73:d6:77:ee:61:47:
f4:32:84:3c:d1:68:8c:5c:c5:b8:30:a0:c2:8e:e9:f7:9e:e5:
50:ab:a2:a7:67:f8:96:64:c9:9a:69:bc:68:ef:ff:48:64:3e:
37:69:f6:d9:59:0f:92:7b:80:e9:a1:32:49:bd:eb:8f:1e:33:
f5:9e:58:1a:12:bd:00:7f:b5:27:95:55:7d:a8:52:90:05:71:
50:dc:36:3f:84:ad:99:b9:05:77:46:74:7f:31:05:43:37:a1:
1c:a0:c0:73:02:c6:c6:e0:c3:e4:e6:2a:23:29:aa:d6:20:cb:
a2:e3:f3:ae:be:72:c3:19:9d:5f:89:dc:5f:8c:9f:8b:0b:19:
cb:5d:ed:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:19 2026 by rpki-client