Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/I9pDKOgKqZjUJBBvuH7As3ESMOg.roa
File: I9pDKOgKqZjUJBBvuH7As3ESMOg.roa (raw, json)
Hash identifier: zZuWYnaTlynNfV5lM9IUMlO2CERccSCjcAaK2gwEtys=
Subject key identifier: 23:DA:43:28:E8:0A:A9:98:D4:24:10:6F:B8:7E:C0:B3:71:12:30:E8
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019EB840BFF9E21EC6A9F91177A0D3511CB5
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/I9pDKOgKqZjUJBBvuH7As3ESMOg.roa
Signing time: Thu 11 Jun 2026 19:55:11 +0000
ROA not before: Thu 11 Jun 2026 19:55:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.226.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:40:bf:f9:e2:1e:c6:a9:f9:11:77:a0:d3:51:1c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 11 19:55:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23da4328e80aa998d424106fb87ec0b3711230e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:e4:96:a6:da:b1:c7:26:3c:0e:b7:1d:14:
7f:ed:45:f6:68:ce:25:96:bd:0d:07:8c:c6:9e:4a:
52:30:b7:dc:b6:49:aa:22:42:f8:ca:c7:75:7d:c0:
e6:5e:02:de:63:df:a0:59:02:cd:7a:96:17:c9:3b:
1e:04:b5:02:22:ee:91:22:54:bd:dc:04:57:f8:56:
a2:8b:8f:43:aa:16:5f:44:08:a5:b9:a0:0b:3f:aa:
9c:72:e8:52:5e:0f:f9:47:47:5d:07:f8:24:d6:70:
e5:11:32:72:00:10:7d:ca:32:25:3b:d2:72:24:96:
2a:14:0b:8b:12:71:e2:67:da:7c:51:1d:fe:33:98:
2d:70:dd:94:19:51:cc:cc:4b:89:9e:4c:56:57:bf:
d8:fc:f3:56:92:1f:33:b3:28:28:d6:fe:b6:91:bd:
1f:ea:ff:0d:59:92:d6:74:09:7c:cc:76:40:45:c1:
0f:c5:58:b9:ee:ee:de:03:f7:e7:54:a6:12:3f:e3:
02:79:a1:8f:69:1e:fd:42:64:89:81:32:5a:87:5f:
08:05:c8:77:da:f0:8a:91:14:0b:ab:f1:53:d5:d1:
10:ae:4c:32:1b:5b:d9:fa:fb:6e:e3:b3:1c:39:46:
98:fa:c2:3a:8f:74:b3:a1:09:fd:07:fd:4a:73:70:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DA:43:28:E8:0A:A9:98:D4:24:10:6F:B8:7E:C0:B3:71:12:30:E8
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/I9pDKOgKqZjUJBBvuH7As3ESMOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.56.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f1:e5:00:03:2d:a8:50:83:c0:c8:3d:3c:89:1a:35:d0:50:
1d:91:36:47:18:d1:fe:40:15:e6:44:d8:bc:76:f0:44:a8:61:
f9:43:41:fb:3f:eb:f8:23:04:cd:a1:8e:57:70:66:a5:e9:51:
39:f6:c2:bf:a1:f9:dd:b5:c5:5b:1f:bf:8f:d7:74:8b:bd:17:
5d:8e:b6:f7:c8:97:4a:38:47:c3:ab:74:2c:49:15:89:29:57:
78:06:ea:c6:5c:68:e4:bd:c6:1a:07:3e:15:1a:b6:80:70:c1:
0a:e1:37:25:ef:80:f6:30:63:32:3b:07:78:b4:7c:7c:06:80:
f5:6c:c5:40:48:ee:ea:1e:79:94:11:e1:30:67:f1:3d:cb:f2:
22:1f:31:25:5c:3e:94:65:79:7c:63:a1:7d:ed:3c:33:a3:92:
ad:39:12:30:31:3f:4a:92:31:cc:d4:1e:ff:5c:02:8a:2f:82:
d4:52:fd:e3:80:bc:d0:db:6a:3b:9b:0b:d4:46:40:53:25:13:
a4:11:e2:ba:db:27:f2:97:4f:56:aa:b7:d0:8f:52:f1:5b:05:
34:2e:a8:e7:e7:56:48:b9:66:15:1b:04:bf:23:74:cd:80:1c:
73:9a:26:34:60:7e:cd:64:23:98:54:d2:1b:56:4b:0e:68:b1:
da:96:bd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:48:50 2026 by rpki-client