Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/1-WJ7X3VtFf2F_SKJ8JN5dL6LQPQ.roa
File: 1-WJ7X3VtFf2F_SKJ8JN5dL6LQPQ.roa (raw, json)
Hash identifier: 8KtKxWLd7ILPUk5kKO1qDBFHYT3DcmruhjUNtg5TxvY=
Subject key identifier: F9:62:7B:5F:75:6D:15:FD:85:FD:22:89:F0:93:79:74:BE:8B:40:F4
Certificate issuer: /CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Certificate serial: 019B76EB06E707AE88F16DF8AAF2B2F69381
Authority key identifier: B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/1-WJ7X3VtFf2F_SKJ8JN5dL6LQPQ.roa
Signing time: Thu 01 Jan 2026 00:17:52 +0000
ROA not before: Thu 01 Jan 2026 00:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204560
IP address blocks: 185.246.140.0/22 maxlen: 22
193.194.102.0/23 maxlen: 23
193.194.104.0/24 maxlen: 24
2a0d:8380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:06:e7:07:ae:88:f1:6d:f8:aa:f2:b2:f6:93:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Validity
Not Before: Jan 1 00:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9627b5f756d15fd85fd2289f0937974be8b40f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:cc:6e:a3:69:29:89:cd:71:7a:d7:06:7b:
a3:f9:3a:67:bb:d4:ea:e8:b1:e1:75:89:46:5f:01:
a7:36:ba:d7:66:cf:17:11:cb:5d:e4:93:76:3c:c3:
1d:7d:73:dc:6e:41:d3:bf:b9:f1:aa:9a:5f:aa:69:
e5:6b:1a:9b:95:bc:aa:44:a6:88:87:31:9d:3a:6b:
90:98:da:97:dc:e3:77:a8:39:2e:1c:d9:5d:e1:22:
5a:32:53:42:4c:f6:c2:f7:39:d8:17:23:e4:4a:5a:
ca:0c:f3:a0:d3:84:ae:b3:ba:81:02:6d:41:0b:0b:
bf:41:37:18:8c:7d:2e:aa:4d:b4:b4:f5:f6:2e:f9:
39:6d:a2:b6:be:ad:ec:15:a0:6d:c8:d6:09:91:27:
b9:a5:ec:3a:b5:55:99:06:21:c2:1b:ff:d8:97:21:
4d:9b:c0:a8:33:a2:c3:5d:fc:35:ae:99:60:5f:cd:
9f:d4:31:0f:6b:27:14:7f:15:f3:9f:23:99:95:9d:
69:24:d1:4c:d0:a7:88:fd:91:77:65:e2:b3:95:f7:
df:45:f0:44:5c:c2:c0:1b:0b:f3:83:13:fe:0e:96:
7a:04:34:a0:da:1b:a7:e4:c7:a8:90:11:e3:56:e9:
66:28:c9:15:ee:6a:fa:5c:da:78:d4:d8:1f:88:f0:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:62:7B:5F:75:6D:15:FD:85:FD:22:89:F0:93:79:74:BE:8B:40:F4
X509v3 Authority Key Identifier:
keyid:B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/1-WJ7X3VtFf2F_SKJ8JN5dL6LQPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.140.0/22
193.194.102.0-193.194.104.255
IPv6:
2a0d:8380::/29
Signature Algorithm: sha256WithRSAEncryption
43:d0:99:09:1a:9e:64:9c:d8:e5:1f:37:e9:b8:cf:1c:52:bc:
c2:8d:d1:33:92:e6:13:90:a7:a2:e5:31:7b:f8:58:77:3d:71:
6d:f0:6f:d9:74:ed:35:d0:e7:41:3e:39:81:d3:71:33:f8:13:
d7:3e:ef:92:70:da:94:8a:ba:6f:b2:6a:be:cb:fc:67:b6:42:
55:2b:c8:7c:51:7c:21:6b:bd:b2:a4:d7:60:10:0d:e5:2b:33:
04:d5:bf:9e:2c:3d:8a:c6:b8:2b:04:70:9c:45:2c:26:e8:8a:
3e:88:53:fe:fe:c0:b3:7d:ed:fb:51:50:86:70:c2:11:bb:2b:
a4:66:e6:86:b5:60:80:fc:40:d8:0d:db:b6:e2:20:93:22:24:
a3:0b:14:9d:81:bd:1f:b7:3a:ff:6f:60:16:76:ca:f3:bb:e7:
55:3e:5e:d0:3d:20:7c:cf:de:28:2e:74:06:f1:0e:37:17:cd:
d7:b8:93:35:cf:7a:0c:97:f6:d1:0f:cc:e5:bd:1f:94:bc:96:
f8:f8:5a:0a:e0:d0:1d:cc:ab:a3:61:93:ad:fa:c8:f3:40:d8:
71:cc:d1:ad:d7:13:76:b5:7f:e4:27:ea:16:c0:9e:97:51:ba:
aa:4b:37:13:04:7d:ec:65:a1:5a:1f:1f:cd:13:0b:e2:83:0f:
1e:27:ba:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:29:28 2026 by rpki-client