Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/9sLDmQTb44x2P6jNT7T17OXTXjI.roa
File: 9sLDmQTb44x2P6jNT7T17OXTXjI.roa (raw, json)
Hash identifier: uuzOvG2FWpJjpkYka95lZljqVKWh3N33EEWS+wN45u0=
Subject key identifier: F6:C2:C3:99:04:DB:E3:8C:76:3F:A8:CD:4F:B4:F5:EC:E5:D3:5E:32
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0BCFF118832867C0A7B45BC4A0971A927
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/9sLDmQTb44x2P6jNT7T17OXTXjI.roa
Signing time: Sun 20 Sep 2026 04:07:07 +0000
ROA not before: Sun 20 Sep 2026 04:07:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 109.66.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:ff:11:88:32:86:7c:0a:7b:45:bc:4a:09:71:a9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 20 04:07:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6c2c39904dbe38c763fa8cd4fb4f5ece5d35e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:13:e5:27:d3:ef:60:c3:31:eb:fa:92:ca:
7a:c4:88:ba:ee:1b:84:1c:e2:bf:4e:71:8c:de:8d:
b6:cb:34:54:c8:0d:6e:f5:7a:8b:d5:cd:58:cc:1e:
eb:34:67:2b:9a:d5:ca:3d:65:ee:f2:3c:e0:43:5f:
94:f9:e8:8a:70:b6:40:cc:7f:c8:63:79:60:e5:5f:
88:7b:82:64:44:9c:8c:e0:5a:27:83:46:84:fb:35:
11:a8:76:44:53:28:55:55:f1:a2:c2:7b:10:98:8f:
ca:c0:85:99:15:01:77:99:1f:3d:15:d7:a0:de:dd:
52:09:89:85:3c:2e:c4:b7:6f:8a:ad:79:ca:95:75:
e5:2c:98:2e:ec:7c:76:28:27:18:74:04:01:48:eb:
87:d2:13:03:ee:bd:b8:c8:55:d1:b7:11:c4:c9:f8:
11:59:70:f5:97:7c:2f:07:5b:85:6d:17:3c:44:a4:
2a:2f:a6:7f:a3:4e:74:18:f3:8f:1f:f5:91:69:47:
bd:df:be:de:21:73:91:7f:1c:1c:70:c2:f4:d0:67:
08:3a:99:38:3d:ef:d2:8a:0d:f2:6d:46:61:05:2f:
08:75:b4:cd:2a:7a:c9:3d:4c:01:c4:e9:c5:9e:75:
ae:6c:50:8a:13:35:b6:18:0e:40:04:0a:08:19:22:
d3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C2:C3:99:04:DB:E3:8C:76:3F:A8:CD:4F:B4:F5:EC:E5:D3:5E:32
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/9sLDmQTb44x2P6jNT7T17OXTXjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.160.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:63:e6:bd:09:ae:dc:a8:fa:0b:08:94:ca:07:8b:68:6a:7e:
20:e2:e4:66:19:df:21:c2:48:e5:9c:c6:69:47:46:51:50:0e:
08:e2:1e:3b:a2:c9:96:3a:26:83:21:e8:97:69:25:61:e1:86:
5a:df:41:70:9f:ef:db:8e:87:b4:8b:da:ba:05:bc:12:1c:d9:
14:a1:bb:73:43:6e:7c:0c:0f:e6:48:61:e9:e2:ff:a7:4f:bf:
ba:7e:df:49:53:a8:ff:75:d0:13:e6:3e:64:5d:15:04:12:17:
ad:4b:b6:b8:ed:d6:5f:89:92:d4:5c:6a:41:7e:45:54:86:23:
b3:e3:07:f5:f5:ac:c7:a9:5a:c5:62:4e:78:98:2e:90:27:20:
df:1c:a4:0c:d8:2a:7f:20:9b:0b:9d:2d:d3:4a:07:90:8f:b1:
56:07:03:d2:31:f3:ae:ef:68:2a:c0:12:fc:0e:6e:52:92:74:
4b:c4:77:c5:98:4c:df:3e:cd:03:fe:39:8f:cf:79:58:76:aa:
34:cc:18:02:65:ca:a1:b6:2f:90:7b:26:79:b8:50:4d:3e:ad:
54:22:1c:2d:60:95:43:9a:62:93:0d:dd:79:14:e9:b7:4c:e8:
af:df:92:5f:fe:d0:51:66:5e:19:b1:77:67:00:87:e1:6c:8f:
a5:10:1b:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC8/xGIMoZ8CntFvEoJcaknMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTIwMDQwNzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmMyYzM5OTA0ZGJlMzhjNzYzZmE4Y2Q0ZmI0ZjVlY2U1ZDM1ZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3ET5SfT72DDMev6ksp6xIi67huE
HOK/TnGM3o22yzRUyA1u9XqL1c1YzB7rNGcrmtXKPWXu8jzgQ1+U+eiKcLZAzH/I
Y3lg5V+Ie4JkRJyM4Fong0aE+zURqHZEUyhVVfGiwnsQmI/KwIWZFQF3mR89Fdeg
3t1SCYmFPC7Et2+KrXnKlXXlLJgu7Hx2KCcYdAQBSOuH0hMD7r24yFXRtxHEyfgR
WXD1l3wvB1uFbRc8RKQqL6Z/o050GPOPH/WRaUe9377eIXORfxwccML00GcIOpk4
Pe/Sig3ybUZhBS8IdbTNKnrJPUwBxOnFnnWubFCKEzW2GA5ABAoIGSLTlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPbCw5kE2+OMdj+ozU+09ezl014yMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvOXNMRG1RVGI0NHgyUDZqTlQ3VDE3T1hUWGpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUKgMA0G
CSqGSIb3DQEBCwUAA4IBAQAOY+a9Ca7cqPoLCJTKB4toan4g4uRmGd8hwkjlnMZp
R0ZRUA4I4h47osmWOiaDIeiXaSVh4YZa30Fwn+/bjoe0i9q6BbwSHNkUobtzQ258
DA/mSGHp4v+nT7+6ft9JU6j/ddAT5j5kXRUEEhetS7a47dZfiZLUXGpBfkVUhiOz
4wf19azHqVrFYk54mC6QJyDfHKQM2Cp/IJsLnS3TSgeQj7FWBwPSMfOu72gqwBL8
Dm5SknRLxHfFmEzfPs0D/jmPz3lYdqo0zBgCZcqhti+QeyZ5uFBNPq1UIhwtYJVD
mmKTDd15FOm3TOiv35Jf/tBRZl4ZsXdnAIfhbI+lEBus
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:15:10 2026 by rpki-client