Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-6ypypN-jvxa7uk47QaTw0u7yYw.roa
File: 1-6ypypN-jvxa7uk47QaTw0u7yYw.roa (raw, json)
Hash identifier: 4rLbWDZc1EKliDza+vn+Ejz8ShPJV/1jZ7GlEvHFzSo=
Subject key identifier: FB:AC:A9:CA:93:7E:8E:FC:5A:EE:E9:38:ED:06:93:C3:4B:BB:C9:8C
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01A085A88092C533B76DC962C8B660AA3673
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-6ypypN-jvxa7uk47QaTw0u7yYw.roa
Signing time: Wed 09 Sep 2026 10:13:27 +0000
ROA not before: Wed 09 Sep 2026 10:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218746
IP address blocks: 188.132.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:a8:80:92:c5:33:b7:6d:c9:62:c8:b6:60:aa:36:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Sep 9 10:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbaca9ca937e8efc5aeee938ed0693c34bbbc98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:3c:74:90:3e:d7:7a:cb:77:d5:cd:7d:68:
32:35:3c:11:49:9c:2d:35:3b:db:20:3d:b9:cd:57:
e6:74:f8:32:ce:8c:ea:96:04:35:6c:5f:52:af:3e:
2c:b8:ba:1a:2a:05:e9:d9:73:57:19:54:60:51:b5:
aa:e6:b7:56:12:09:a8:22:90:90:23:be:d1:7b:06:
0f:7f:02:1c:23:d4:3d:f5:17:79:68:0a:57:ce:8e:
d6:0a:b0:46:c9:9c:02:fe:2a:90:9e:fb:c7:00:32:
72:3f:11:e0:f4:04:ad:cc:b3:be:26:7a:72:65:ff:
6c:e4:ba:52:29:ea:41:20:5c:c7:80:b9:43:45:3e:
d5:3c:1d:dc:33:10:ff:14:3d:2d:ff:3d:11:14:33:
af:21:4b:25:33:97:ea:3b:1c:ef:c4:25:c8:8d:27:
f6:19:17:5e:1f:18:9b:08:27:95:77:32:ac:1a:92:
e5:9b:5f:6b:9e:94:c1:26:18:4b:3d:8a:5f:55:e3:
69:20:b2:85:5e:de:c2:f6:00:ea:2b:06:bf:d9:83:
bf:52:5c:bd:a8:4a:54:66:d3:f4:e9:1d:6b:31:b1:
c2:c8:05:8f:e1:0d:14:63:4f:fc:e4:ac:0c:01:97:
86:26:32:40:38:91:a0:bd:6f:71:51:33:e4:bb:5e:
00:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AC:A9:CA:93:7E:8E:FC:5A:EE:E9:38:ED:06:93:C3:4B:BB:C9:8C
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-6ypypN-jvxa7uk47QaTw0u7yYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d1:82:94:ab:04:a1:9e:db:de:a9:7f:48:cd:d4:ff:9c:3c:
3e:e8:7e:f9:18:7b:04:35:af:39:05:b9:34:a8:57:f3:8b:e4:
13:a5:82:f6:74:ac:b8:9d:ae:e5:1e:72:ca:8e:aa:c5:f8:e1:
e4:a2:84:08:e8:e3:e7:64:fe:d6:20:2a:ce:95:d9:f4:df:2f:
81:8e:83:2f:5d:8d:fc:ba:1a:b5:57:e7:fc:32:11:c4:19:7e:
23:87:69:47:d6:b9:15:68:4c:fc:34:60:d1:94:69:0a:76:f9:
39:59:72:e9:19:38:a6:e7:75:e9:92:2f:69:54:bb:fa:70:43:
7f:f2:8e:85:21:08:18:ac:24:b5:39:8e:3f:19:46:8b:a2:7b:
1b:2b:8b:15:32:60:5a:dd:28:c0:c3:6b:12:58:f0:0e:77:fc:
c5:06:de:77:32:15:9d:1e:83:11:46:c0:d2:16:66:dd:d4:de:
69:e4:95:5a:42:e5:c4:a5:15:e5:5c:05:53:84:a6:f9:fe:78:
e0:10:a6:7c:d3:af:7b:38:ab:98:67:6a:ce:67:67:fb:4c:3f:
87:1c:34:5f:51:fd:b6:6d:c0:00:0f:9b:98:52:39:3d:a2:d2:
a6:e4:10:f2:ff:e1:af:a2:5f:57:56:68:07:39:5c:90:16:04:
5c:5e:d5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:38:52 2026 by rpki-client