Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9p87a8CRRpmQgW4c910w_D-kYiw.roa
File: 9p87a8CRRpmQgW4c910w_D-kYiw.roa (raw, json)
Hash identifier: H1uSkSq85z9gZq4jFGVUApMyFxi1Jvoje9sU8Y09xf0=
Subject key identifier: F6:9F:3B:6B:C0:91:46:99:90:81:6E:1C:F7:5D:30:FC:3F:A4:62:2C
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019C4143E03907852F00CF234CAE3F485506
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9p87a8CRRpmQgW4c910w_D-kYiw.roa
Signing time: Mon 09 Feb 2026 07:18:13 +0000
ROA not before: Mon 09 Feb 2026 07:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 194.61.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:43:e0:39:07:85:2f:00:cf:23:4c:ae:3f:48:55:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Feb 9 07:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f69f3b6bc091469990816e1cf75d30fc3fa4622c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:c7:16:9d:c8:03:fb:46:2a:2d:d1:26:8e:
1a:c5:cd:5e:a4:a3:fe:d9:ca:11:c7:35:1d:56:fa:
17:a1:8c:3a:ed:21:3d:32:27:9c:c1:c7:f4:e4:d2:
15:ac:4c:14:af:65:c9:1e:c6:f0:f3:04:ef:f5:b5:
67:52:d5:62:51:c8:ea:e3:02:41:fb:f8:e2:5b:db:
96:6e:55:3a:aa:40:56:cc:dd:a9:00:8b:a8:76:d3:
0f:0b:90:01:6b:a8:40:1d:0a:c3:52:ea:2b:1c:f7:
db:95:19:96:da:51:fe:e8:99:5c:2d:7a:a6:20:d4:
c0:6b:dd:bc:d8:3e:0e:a8:fa:fa:52:86:11:9d:5f:
11:7e:08:c2:ff:6f:6c:75:11:70:f0:15:5c:63:e8:
ac:a6:d9:6f:94:e5:2d:4b:d5:32:31:22:d7:22:f7:
11:c1:de:9a:e8:05:ac:1c:b4:d0:07:56:6f:68:56:
f5:80:b6:d5:4f:ba:7f:c4:b9:1b:9e:c1:c7:50:4d:
ee:8a:a8:49:65:ff:e3:e8:cd:f9:04:fa:93:ef:48:
f8:c9:a7:8d:fe:22:63:3e:44:48:0d:9a:a4:bd:67:
c9:ee:e4:c5:67:ce:70:ad:4b:0b:73:3e:ae:1a:4c:
64:8e:1c:7d:1d:b7:a0:df:76:3b:62:74:95:9b:1a:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9F:3B:6B:C0:91:46:99:90:81:6E:1C:F7:5D:30:FC:3F:A4:62:2C
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9p87a8CRRpmQgW4c910w_D-kYiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.73.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d7:3b:21:0a:aa:7a:77:ae:1d:a5:d8:6d:74:ef:25:ad:66:
93:22:7c:72:82:50:0b:b5:27:f7:7a:b3:7b:73:71:a1:43:1b:
00:9f:b6:ef:b8:7e:f2:84:40:46:c4:63:4b:1e:5c:5a:83:3b:
f0:f1:87:95:2f:4d:55:ba:10:f0:a7:a2:0c:4f:76:41:dc:76:
21:ee:94:0a:5d:73:21:f7:a3:f3:55:ed:b3:d3:ed:56:ae:64:
30:22:7c:e1:09:f3:f7:89:2c:2b:f0:45:79:57:17:f7:95:b7:
68:11:73:0d:b5:9d:8a:91:2c:a9:d4:6f:34:64:f5:c7:b6:fe:
4d:e1:a3:0f:0f:33:8a:df:17:d0:18:74:e7:7a:51:6f:d4:e6:
dd:e9:6d:c9:2b:ff:a4:39:70:18:a3:e7:0b:ee:74:11:35:46:
02:7c:0f:45:32:e4:00:7f:06:1c:a6:cf:76:4b:30:d8:a9:ec:
e2:8d:7e:b0:de:e0:36:0a:ea:03:06:e0:44:b3:b4:0d:78:7c:
34:cb:b8:26:88:6a:b0:47:17:93:dd:b4:cb:f8:07:ef:4d:53:
a2:98:23:e6:3c:18:57:f3:9a:72:01:f4:de:59:2f:f9:a6:7b:
8a:91:6d:63:8c:1f:91:96:70:58:69:49:f4:55:e1:7f:c8:c3:
aa:fc:2e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:43:14 2026 by rpki-client