Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/C9xd6iKesEDVgTlmlwekSN6DoQo.roa
File: C9xd6iKesEDVgTlmlwekSN6DoQo.roa (raw, json)
Hash identifier: P3FeuL/uJMAhzVjAOEG4QYZyLSq+SYPmceGdgQHYOLA=
Subject key identifier: 0B:DC:5D:EA:22:9E:B0:40:D5:81:39:66:97:07:A4:48:DE:83:A1:0A
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019D979CCE5734BBFB8AE390CD8FB7409398
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/C9xd6iKesEDVgTlmlwekSN6DoQo.roa
Signing time: Thu 16 Apr 2026 18:45:29 +0000
ROA not before: Thu 16 Apr 2026 18:45:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212913
IP address blocks: 91.242.236.0/24 maxlen: 24
193.3.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:9c:ce:57:34:bb:fb:8a:e3:90:cd:8f:b7:40:93:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Apr 16 18:45:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bdc5dea229eb040d58139669707a448de83a10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e2:88:c1:b1:7d:34:5c:e5:b4:a1:61:e9:db:
4d:96:b1:00:85:62:c7:ad:43:39:f7:b0:e3:5f:28:
c3:82:e7:d8:f1:8d:e6:77:0b:02:cc:21:6f:82:0a:
7f:4f:8c:35:78:e1:53:58:13:11:e4:7a:82:12:7d:
2d:0f:86:06:fb:07:2c:ad:a3:8f:52:13:d7:1c:30:
e6:28:12:2b:99:03:fd:8c:d4:db:dd:d0:26:02:0a:
ef:ad:0f:97:80:b0:9b:d0:ed:81:50:22:a0:74:a0:
da:c0:15:95:e9:a1:92:d7:90:75:40:45:8f:76:b2:
45:fc:d3:e4:f8:f2:ac:f5:cf:5f:34:13:2c:e5:02:
47:1f:b9:a9:8c:05:c3:65:aa:c5:77:69:e9:b2:1a:
69:04:e0:77:57:5f:2c:44:11:20:f0:a3:cb:81:d3:
8b:03:5e:34:60:aa:2d:4a:b6:fe:2a:48:44:c5:29:
e2:c4:63:04:39:17:db:b2:fa:93:fb:7b:a0:29:25:
be:01:1d:20:f7:b9:11:c8:ab:ab:8b:f3:d2:d8:0b:
93:68:0c:75:e3:74:e5:da:7d:61:53:13:a1:11:47:
eb:aa:4b:6e:3b:1e:77:e1:f4:4f:5f:c4:dc:89:96:
f4:4e:6e:7c:51:8c:19:6b:1f:4c:db:0a:ae:77:c4:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DC:5D:EA:22:9E:B0:40:D5:81:39:66:97:07:A4:48:DE:83:A1:0A
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/C9xd6iKesEDVgTlmlwekSN6DoQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.236.0/24
193.3.23.0/24
Signature Algorithm: sha256WithRSAEncryption
57:9f:e6:31:c1:bd:a5:ae:30:8b:4f:ae:c9:16:0a:e9:ad:65:
c7:7f:35:72:66:23:89:0c:6c:4a:9a:d3:01:b0:1a:23:c5:71:
de:a7:22:dc:6e:d2:61:4b:5f:42:44:5c:3c:5e:2c:19:c4:a5:
cd:fb:03:ca:03:e2:f2:7a:2a:a7:48:9f:35:91:81:c6:78:f5:
5d:db:68:2f:44:97:eb:0b:9d:9f:fb:26:b2:2e:25:8d:a2:46:
06:b3:35:94:84:c2:32:df:bd:55:dd:57:11:71:18:07:83:46:
19:c2:4e:40:00:f6:b1:02:4a:c4:2f:42:77:50:12:01:78:a4:
29:76:ad:75:2a:4b:5b:a1:ba:94:40:8d:c7:a1:5f:8e:31:3b:
41:0a:be:1a:bf:da:7d:55:8d:07:0e:ef:08:7b:1c:21:6f:a5:
0c:19:d0:a1:e1:28:2d:1f:6e:65:62:b4:2a:ba:a9:29:ad:8d:
5d:d6:d6:ed:24:a4:c9:77:49:cd:e1:d2:b6:df:6a:ea:44:86:
24:77:24:00:14:d5:68:e6:dd:f0:21:dd:5a:af:8e:4a:3e:3c:
10:50:83:34:5f:95:7a:03:04:fd:ec:97:a9:09:ea:1c:5e:b3:
2d:92:fa:ad:65:3d:7d:de:f3:c3:aa:49:5d:84:f7:a1:3e:53:
33:1f:f3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:29:15 2026 by rpki-client