Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/9YAXEYjhmhkxq2c5qhBIIlTvS2E.roa
File: 9YAXEYjhmhkxq2c5qhBIIlTvS2E.roa (raw, json)
Hash identifier: 55R+jdR0UJQmE1oLQNFzIpJd7w8rR1Qa8V5eWHVN66M=
Subject key identifier: F5:80:17:11:88:E1:9A:19:31:AB:67:39:AA:10:48:22:54:EF:4B:61
Certificate issuer: /CN=450cf1cc73826111ff975665b03a2648bb8c8d10
Certificate serial: 019D90A7F6B072B7F9D1E1CEB08A3E7CBFCC
Authority key identifier: 45:0C:F1:CC:73:82:61:11:FF:97:56:65:B0:3A:26:48:BB:8C:8D:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/9YAXEYjhmhkxq2c5qhBIIlTvS2E.roa
Signing time: Wed 15 Apr 2026 10:20:19 +0000
ROA not before: Wed 15 Apr 2026 10:20:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43320
IP address blocks: 195.93.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:a7:f6:b0:72:b7:f9:d1:e1:ce:b0:8a:3e:7c:bf:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450cf1cc73826111ff975665b03a2648bb8c8d10
Validity
Not Before: Apr 15 10:20:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f580171188e19a1931ab6739aa10482254ef4b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:12:40:d5:4c:c4:6f:2d:46:7c:36:79:6a:
f4:71:db:57:74:b1:09:9e:c7:8f:e4:a5:ec:ba:ae:
0d:23:49:2c:7c:a2:7d:11:cc:44:50:59:ee:2f:68:
d1:21:63:58:3a:97:cc:1a:03:48:20:69:a7:dd:3f:
84:be:c3:c7:72:da:50:74:0e:58:c1:c4:49:23:d0:
2d:70:49:e2:cb:c1:83:9f:ed:8b:60:de:8a:0e:ea:
61:7c:74:f7:8e:52:7b:f1:5d:73:05:16:2f:1f:6e:
f2:52:40:5f:44:41:dc:4a:1d:3d:74:e0:39:1c:35:
d3:d8:2c:9d:ad:01:f2:e0:ba:c3:ad:14:00:30:5f:
fd:11:07:bd:4a:1b:24:1a:ac:1e:8b:80:16:5b:e1:
87:98:96:ca:f4:df:ba:20:f5:a3:7b:87:c1:bd:3d:
a4:0c:17:b8:c3:c6:45:28:e6:e5:aa:a9:ab:b4:49:
c8:4c:02:ca:ce:e0:0a:36:ac:54:27:69:bb:c3:22:
9c:1b:e3:d7:8f:53:a7:db:a5:c0:2c:e1:4c:ae:b6:
bb:cc:e2:31:0f:e0:4d:33:c3:1a:96:74:3e:64:be:
8c:46:1e:da:11:9e:85:24:33:ab:a2:ea:63:3f:fb:
8d:93:34:20:f1:a3:51:45:28:27:69:3c:4e:3e:e3:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:80:17:11:88:E1:9A:19:31:AB:67:39:AA:10:48:22:54:EF:4B:61
X509v3 Authority Key Identifier:
keyid:45:0C:F1:CC:73:82:61:11:FF:97:56:65:B0:3A:26:48:BB:8C:8D:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/9YAXEYjhmhkxq2c5qhBIIlTvS2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.191.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:04:9d:6f:a0:38:e1:cf:13:3c:7f:b6:5c:6e:f9:2d:7b:8f:
88:c3:eb:be:76:3b:87:3e:29:31:fb:f0:cc:80:92:25:9d:e5:
91:a8:e7:b5:e5:68:ee:e5:a4:09:d2:e1:08:21:c6:3c:e7:cf:
ab:36:7d:f6:ad:0f:fc:4f:b6:53:f1:54:96:4a:95:89:36:a4:
ff:9f:c2:3d:67:72:45:6d:57:90:a1:b3:89:e1:68:f8:22:67:
d0:aa:f5:d5:cd:ac:b2:c5:da:37:d7:29:b9:ef:ff:74:35:81:
d0:f4:05:03:bb:99:ea:38:a5:35:2b:12:bb:54:d4:62:4d:be:
d4:17:25:0b:ad:5a:c1:76:20:df:95:b0:5a:0d:ce:a3:3e:ea:
58:5d:8a:a2:f4:7a:ae:70:a6:7b:5f:e1:b7:60:2a:8b:84:f3:
eb:50:db:61:2c:06:3c:40:cc:42:9e:a4:8c:37:43:4f:13:fa:
c4:7c:22:94:c1:ee:30:d3:17:c2:71:4a:97:92:0e:4c:9a:5f:
98:8c:de:81:01:21:a3:bb:3f:4f:4f:ab:18:e1:5a:ee:3e:a8:
f4:66:31:a0:da:4c:4c:67:d8:ca:a9:51:64:c9:ab:f5:a3:34:
36:f9:b7:61:1c:28:18:b5:ab:3e:6f:d5:44:33:3f:9b:36:dd:
ed:ad:41:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:02:22 2026 by rpki-client