Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/9pC-ibevAKS-26VHnfb369UjvOo.roa
File: 9pC-ibevAKS-26VHnfb369UjvOo.roa (raw, json)
Hash identifier: 4g/AIjuZ+wenceNroAaqj5Lh9HfADzpHeXflVuUhXzA=
Subject key identifier: F6:90:BE:89:B7:AF:00:A4:BE:DB:A5:47:9D:F6:F7:EB:D5:23:BC:EA
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 019C6084AB7AAE6D42F0D0A55DB8C6056DAA
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/9pC-ibevAKS-26VHnfb369UjvOo.roa
Signing time: Sun 15 Feb 2026 08:57:13 +0000
ROA not before: Sun 15 Feb 2026 08:57:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 192.94.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:60:84:ab:7a:ae:6d:42:f0:d0:a5:5d:b8:c6:05:6d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Feb 15 08:57:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f690be89b7af00a4bedba5479df6f7ebd523bcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:e9:be:0f:68:9a:29:6c:1f:10:18:df:c7:
51:40:94:a2:34:1b:42:d1:bc:0f:66:3d:ac:17:c7:
30:28:13:04:af:b1:e5:37:85:5a:de:05:fe:63:5f:
a2:56:ab:59:a5:c9:4e:cb:01:ab:3d:d1:7a:78:f9:
08:54:2e:54:3f:06:29:1e:47:51:9e:88:07:1b:a0:
38:d2:35:4b:b9:43:52:b7:3f:10:f6:63:5b:dc:b5:
02:f6:25:ae:47:9c:d5:70:6b:4f:cf:9d:43:5c:e3:
b3:86:91:39:8d:8a:63:05:08:d0:e5:db:b0:10:24:
ff:44:af:88:cc:95:f3:fa:4e:cd:13:de:52:33:93:
35:02:82:20:da:a1:10:38:aa:7e:d8:54:c6:55:e6:
a2:a9:1d:06:1a:df:76:fe:3f:6a:29:1f:69:ad:f2:
4f:d0:d4:64:5c:6a:f2:38:87:84:0b:51:67:26:3e:
e4:59:20:8c:79:1a:35:43:9c:5f:f8:68:a1:5a:81:
ef:d5:11:cf:dd:72:f5:c7:5e:bb:a1:05:f9:88:34:
da:07:15:dd:cc:a4:36:5b:e5:be:88:f9:74:b7:ad:
87:bd:a5:57:d6:8b:bd:a5:97:74:a4:e1:1c:b7:b5:
a8:6a:7e:b6:e9:b0:43:41:b5:58:27:ea:94:c1:20:
96:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:90:BE:89:B7:AF:00:A4:BE:DB:A5:47:9D:F6:F7:EB:D5:23:BC:EA
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/9pC-ibevAKS-26VHnfb369UjvOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.94.58.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:88:62:eb:68:04:b8:3c:1e:c8:74:68:c0:18:24:50:cc:74:
45:ba:71:a9:ed:0d:4a:b6:6e:e3:4e:6b:48:93:7b:3f:f4:d5:
a6:2e:e7:12:39:85:b5:d5:b1:8b:32:3c:d8:01:4e:92:74:21:
0d:1d:dd:17:b6:4d:45:a3:60:cf:89:17:8b:a9:f7:b5:06:5f:
03:8f:ce:e8:1a:19:cd:a6:7f:a9:40:7e:92:c6:e4:ba:a5:6f:
f6:f6:f9:e2:aa:06:e8:70:8a:d7:da:83:e0:62:1a:d1:22:29:
f0:7f:42:72:f7:1c:e4:c5:7b:4d:43:43:cc:c7:77:62:d4:25:
76:fe:a6:1a:d2:75:de:22:9d:88:b2:7f:83:27:f6:07:e6:4c:
84:80:6e:c6:ae:48:78:e5:50:bf:d3:dc:12:3d:15:81:e7:9f:
04:c0:de:f5:71:34:36:e5:3b:ef:6a:96:b5:4f:78:fe:ea:de:
d7:be:5b:5f:60:77:2a:f4:5c:9b:3a:f4:a4:a3:5d:12:50:0f:
25:db:96:e1:47:03:d5:0f:f0:62:2d:8b:3c:08:b2:03:f3:a8:
9b:40:a8:fa:68:d7:e6:ea:6e:f7:1e:2b:4d:1e:cc:23:28:1f:
3c:eb:ea:97:81:dc:10:26:bc:4b:d3:bd:89:5a:15:2a:ce:17:
fa:aa:66:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:02:10 2026 by rpki-client