Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/C9aXP0xnVks0GG--bUI7lSn9Og4.roa
File: C9aXP0xnVks0GG--bUI7lSn9Og4.roa (raw, json)
Hash identifier: 7iquRG4sj7MdDkAUl6cu4d537zzGxzoS3U6EkDKWErY=
Subject key identifier: 0B:D6:97:3F:4C:67:56:4B:34:18:6F:BE:6D:42:3B:95:29:FD:3A:0E
Certificate issuer: /CN=e229b37eb630686b1328338471b52da95d204911
Certificate serial: 019C4C2E622ED0D963C3FB92C3D73DC200ED
Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/C9aXP0xnVks0GG--bUI7lSn9Og4.roa
Signing time: Wed 11 Feb 2026 10:10:34 +0000
ROA not before: Wed 11 Feb 2026 10:10:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42195
IP address blocks: 193.16.247.0/24 maxlen: 24
194.110.219.0/24 maxlen: 24
2001:67c:290::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:2e:62:2e:d0:d9:63:c3:fb:92:c3:d7:3d:c2:00:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e229b37eb630686b1328338471b52da95d204911
Validity
Not Before: Feb 11 10:10:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bd6973f4c67564b34186fbe6d423b9529fd3a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:15:87:02:78:61:ac:75:89:b1:58:b5:0e:
cf:c3:b5:99:a8:7c:e3:23:3e:08:cb:62:bc:9f:c5:
9b:03:b0:d6:8f:26:22:9e:78:f4:c5:05:8e:53:f8:
34:dd:66:d2:c3:22:46:cf:38:76:95:b4:c5:3f:84:
68:7a:a8:13:b8:b6:17:95:f1:58:5c:b5:ba:ef:ee:
40:c7:af:21:3d:d8:b8:c5:20:2e:be:16:fc:21:2f:
4c:74:09:0c:79:13:09:a4:c1:86:3e:de:34:5b:af:
7b:1c:7a:22:c3:67:92:2c:60:7e:da:20:22:d1:1b:
82:73:87:86:b5:55:88:42:61:ae:0c:85:78:49:ac:
8a:a2:de:72:9c:e2:40:80:38:26:a5:a8:75:18:de:
f7:c5:91:5e:ce:ad:a0:8a:bf:b1:c5:f3:d9:12:f2:
ec:ce:f6:5a:6e:70:68:67:12:37:37:2d:79:d0:72:
4e:2f:14:de:72:51:0e:ec:ff:b5:80:65:94:4e:20:
9b:64:20:36:20:6e:b3:d8:2f:e7:02:36:6a:bb:e1:
8a:3e:34:47:d9:48:a6:55:7d:37:6a:ce:3d:87:e1:
96:e0:07:53:3f:06:7e:9e:cf:04:8c:59:4d:f6:79:
43:9e:b7:c5:91:bc:b1:bb:b4:7c:1a:51:7c:52:fa:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D6:97:3F:4C:67:56:4B:34:18:6F:BE:6D:42:3B:95:29:FD:3A:0E
X509v3 Authority Key Identifier:
keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/C9aXP0xnVks0GG--bUI7lSn9Og4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.247.0/24
194.110.219.0/24
IPv6:
2001:67c:290::/48
Signature Algorithm: sha256WithRSAEncryption
20:dd:29:3d:cc:31:8a:c8:4f:39:00:a7:a3:3f:c5:af:f0:69:
35:2a:df:ba:c6:47:df:61:2f:b8:45:e2:f8:86:a6:ea:a3:ad:
e6:13:3f:03:87:aa:e0:1f:ea:80:97:7b:ff:a5:4b:0d:03:d1:
f9:00:ad:ed:6b:5c:28:30:8d:b7:b7:67:83:f5:fd:de:9d:8b:
7c:1a:9d:34:72:2b:e9:60:04:87:05:ee:1d:1f:4d:85:8d:83:
d1:df:58:1c:fa:a5:01:32:aa:e9:f9:38:33:7f:49:6e:51:ff:
e7:da:c0:f5:4c:d7:cb:1e:3a:97:3b:b7:7e:7d:c8:78:52:cb:
78:b8:b4:55:9a:ad:76:f3:71:dd:58:67:fc:a7:8a:1e:06:8f:
f1:74:51:92:b1:97:4d:16:e8:0e:34:f1:3c:7a:1c:45:dd:5a:
87:cc:91:6b:2e:ce:9a:96:b2:e6:43:f0:9b:f3:87:13:13:7b:
9b:34:7c:10:ae:5b:0f:63:de:dc:0c:ac:97:3c:e4:85:81:ae:
65:9a:92:27:f8:97:a0:66:e8:4a:5a:2f:4c:01:1a:bc:a6:60:
86:bc:e9:20:4e:f5:6b:81:e6:11:12:f1:68:fb:17:d6:79:94:
8e:50:89:19:9d:dd:98:6e:44:6f:e1:76:7c:99:00:c4:16:04:
47:16:c4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:15 2026 by rpki-client