Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/9bN9Xf5v9NGXeDdEgSvks6VU6HQ.roa
File: 9bN9Xf5v9NGXeDdEgSvks6VU6HQ.roa (raw, json)
Hash identifier: F/XAmG9fU6nkiRcvYMRCj4z5JIDzXydyM9pZP650gJs=
Subject key identifier: F5:B3:7D:5D:FE:6F:F4:D1:97:78:37:44:81:2B:E4:B3:A5:54:E8:74
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019D8613E9F4C60B172BDF62B8C31B318DC7
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/9bN9Xf5v9NGXeDdEgSvks6VU6HQ.roa
Signing time: Mon 13 Apr 2026 09:02:25 +0000
ROA not before: Mon 13 Apr 2026 09:02:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395470
IP address blocks: 194.231.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:13:e9:f4:c6:0b:17:2b:df:62:b8:c3:1b:31:8d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 13 09:02:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5b37d5dfe6ff4d197783744812be4b3a554e874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:1a:0a:01:4f:1b:2d:7b:ff:42:b4:09:5a:
da:da:38:d8:fe:c8:39:d7:6c:b1:e5:4b:b8:1a:45:
12:1c:55:83:63:5f:d0:0e:19:1a:13:ed:2b:22:86:
90:4d:1c:0d:3b:5d:b1:6a:cf:8a:f3:c1:fe:4a:c4:
60:98:75:41:59:87:e3:2d:b9:fd:56:01:9c:99:0a:
02:6f:dd:fb:56:11:59:0e:47:43:86:ca:13:aa:15:
0a:9c:03:74:d4:34:24:f2:ba:00:60:9c:16:00:bd:
75:d1:73:89:16:33:e1:cb:5e:46:5c:b1:96:13:31:
6c:0c:4c:7e:69:af:1a:6e:03:ef:a7:a9:2d:11:05:
4d:5a:0a:bc:c8:e0:b8:93:9e:4b:95:26:41:6f:c0:
bc:a1:9e:a9:d2:b9:14:6e:3e:f7:7b:bb:86:68:54:
82:8d:c0:2e:f3:13:03:81:11:10:96:68:07:f5:97:
c9:2a:a6:c0:91:63:c6:eb:85:ac:17:43:fc:2c:52:
61:f7:9d:bf:aa:ee:2e:ab:24:9b:fd:68:0c:41:c2:
7a:92:92:ca:f7:1b:88:75:10:1e:04:c2:df:0b:8e:
4f:c8:6a:94:a4:8c:ca:a8:48:5c:2c:50:cd:59:8d:
eb:51:f3:35:dd:33:24:1e:ba:88:5b:1b:8e:61:25:
9f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B3:7D:5D:FE:6F:F4:D1:97:78:37:44:81:2B:E4:B3:A5:54:E8:74
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/9bN9Xf5v9NGXeDdEgSvks6VU6HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.130.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:a0:07:e1:81:91:fc:33:e7:ba:e6:8f:54:a1:14:86:cc:b4:
c8:03:dd:5f:e9:dc:f2:d8:43:a8:f3:31:6c:10:9f:77:aa:2e:
04:be:92:b1:d2:55:8a:dd:f6:e3:6b:27:f9:c1:62:d3:28:90:
ea:78:c8:9e:c8:1a:59:a8:78:7b:09:b1:55:cc:a5:4e:93:7b:
f7:c2:74:6e:cf:31:83:df:f3:66:1e:fd:c6:a2:44:7e:5b:8c:
ee:37:f5:42:db:79:de:d4:b6:3e:e7:83:2c:1c:9c:e3:90:e2:
ec:05:00:2c:1a:1c:bd:b1:0b:69:ac:dc:b7:eb:69:c9:c3:fb:
43:e1:a1:a6:1d:94:db:89:89:e4:6f:60:72:74:44:73:92:cb:
46:97:e3:02:ad:83:b9:a4:66:31:32:db:58:6c:27:cd:54:be:
39:3d:b1:00:bf:ae:03:ee:94:6a:b6:6c:53:78:51:9b:e9:86:
50:61:66:71:64:37:40:d9:6c:86:ce:0d:c7:15:9f:e4:c8:0c:
aa:19:91:3b:bb:5a:cd:31:82:a6:95:d6:e0:30:ac:83:a3:f3:
aa:00:61:1b:d9:2a:de:56:f6:e5:57:41:cf:2d:9f:05:40:64:
0e:09:23:72:31:b6:b5:65:fe:32:72:0c:3c:6d:26:c0:e9:c0:
b6:57:0e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:58 2026 by rpki-client