Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/j9edvCOgCpRUHjoOk20-cN9wmxg.roa
File: j9edvCOgCpRUHjoOk20-cN9wmxg.roa (raw, json)
Hash identifier: 6DgXQwbEU+KDyumiNCNLUw/9Wxv+6tWPT8AusYvqDwo=
Subject key identifier: 8F:D7:9D:BC:23:A0:0A:94:54:1E:3A:0E:93:6D:3E:70:DF:70:9B:18
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 019F9404DCA1DF533218C9AE9398D8010AA1
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/j9edvCOgCpRUHjoOk20-cN9wmxg.roa
Signing time: Fri 24 Jul 2026 12:06:14 +0000
ROA not before: Fri 24 Jul 2026 12:06:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219138
IP address blocks: 194.31.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:04:dc:a1:df:53:32:18:c9:ae:93:98:d8:01:0a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Jul 24 12:06:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fd79dbc23a00a94541e3a0e936d3e70df709b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:07:14:6f:22:17:2a:f2:15:02:4f:40:0f:89:
01:5d:ce:c0:f2:4a:40:cf:68:cf:ba:99:20:08:ea:
a0:bd:4e:ea:50:c2:3c:a5:95:4d:34:67:d9:a4:a2:
8a:49:da:95:4b:1b:f8:87:a2:a9:17:70:e2:1e:f7:
a6:ef:c4:e0:cf:ed:29:ca:42:11:a8:7c:94:2e:d0:
8f:2e:ee:ea:a5:53:48:d3:43:a0:b2:3b:c0:9f:40:
81:3b:24:ff:0c:0b:74:7c:8c:4f:be:e9:91:61:86:
d5:f2:bb:b8:0d:48:97:cf:3a:6f:1c:e3:5d:fb:ee:
79:19:a8:80:8f:60:ac:63:24:7f:60:54:11:1f:4c:
4c:ee:9e:7a:49:d2:9d:bc:2c:c8:f8:d8:7a:98:99:
d0:a4:0c:6c:f8:0d:55:f5:1e:34:74:c4:88:ca:50:
28:89:81:6a:34:e1:04:9d:1e:d1:d6:80:84:ab:26:
22:45:3b:cb:2f:f3:fe:ba:e6:53:17:40:24:2e:e6:
64:1e:e6:10:bc:88:d4:aa:95:67:23:d9:17:db:0b:
15:91:73:72:fe:da:08:aa:58:9a:46:f2:47:32:41:
28:da:5a:f2:34:ef:bf:9d:e0:a9:d3:a1:c6:f4:ee:
31:c6:3a:40:c4:5c:69:00:8b:e7:6e:93:6d:5d:4c:
b5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D7:9D:BC:23:A0:0A:94:54:1E:3A:0E:93:6D:3E:70:DF:70:9B:18
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/j9edvCOgCpRUHjoOk20-cN9wmxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:31:0b:d1:d9:9b:84:bc:c9:33:ee:1a:67:06:f9:db:8c:9c:
7e:d5:ee:2a:f8:db:da:2e:8d:0d:f7:20:77:05:23:40:40:ae:
b4:2f:52:39:1f:68:5f:18:e6:e3:52:3f:88:b1:1e:cf:9e:c6:
cb:bb:c6:94:92:07:9c:78:86:98:1a:0c:f7:8a:d5:2a:31:ac:
51:39:37:f9:9a:61:20:ed:86:a9:d1:bd:5a:05:19:9a:f7:92:
26:19:24:7d:e1:d1:b2:66:0c:6d:91:e8:7b:09:71:0b:fa:90:
c8:4a:4b:45:5c:4b:01:4a:59:98:44:01:57:2a:01:7c:4e:58:
ee:3e:09:eb:8d:c4:f1:70:df:ae:8d:34:21:b8:59:77:89:96:
73:63:e5:56:ed:84:02:f3:7f:11:ce:4a:de:db:6c:23:b1:be:
05:40:92:5a:5b:3f:ab:12:21:78:d9:af:78:d4:22:18:2a:f5:
fa:cd:34:4a:7b:a6:c6:45:5a:4d:29:72:05:80:3f:8b:98:0c:
a4:a6:0c:ac:53:35:cd:9d:e7:96:b0:e4:73:67:d0:13:df:f6:
08:80:c4:fb:07:91:b7:1a:69:12:cb:8c:bc:29:23:c5:f9:98:
58:f1:06:1b:79:05:41:17:da:27:6f:91:66:99:f5:c1:11:da:
db:2c:0b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:59:25 2026 by rpki-client