Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/psZNmPYVql98KxRd5_J9v8TyFDo.roa
File: psZNmPYVql98KxRd5_J9v8TyFDo.roa (raw, json)
Hash identifier: 83pmxITkPLNCEyrAljxQNeti1DcWIEULoY0Jkfv3Y08=
Subject key identifier: A6:C6:4D:98:F6:15:AA:5F:7C:2B:14:5D:E7:F2:7D:BF:C4:F2:14:3A
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 019B79ED66222DA25B76FFBA5771C6AE057F
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/psZNmPYVql98KxRd5_J9v8TyFDo.roa
Signing time: Thu 01 Jan 2026 14:19:19 +0000
ROA not before: Thu 01 Jan 2026 14:19:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 193.84.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:66:22:2d:a2:5b:76:ff:ba:57:71:c6:ae:05:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Jan 1 14:19:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6c64d98f615aa5f7c2b145de7f27dbfc4f2143a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:e0:50:d0:3a:bc:e6:ac:46:ec:b9:9c:f6:
8e:5a:5e:88:54:cd:2d:d3:07:68:33:49:23:81:24:
aa:18:c1:76:20:fb:f0:c9:95:a0:d3:cb:14:3d:34:
4f:90:77:66:d3:c1:cc:d6:74:c9:c3:9d:b0:0a:44:
22:b7:de:44:e3:88:90:54:f0:3e:b2:6d:18:7e:74:
80:39:9f:e3:f4:b2:1e:58:69:f0:80:be:c7:e9:a0:
bb:81:08:81:61:d1:08:e6:62:8e:09:b7:09:39:73:
06:78:0e:8d:b2:6d:59:8c:df:f2:7b:6f:2c:61:4e:
4a:d6:5f:69:b9:d5:70:a6:99:40:4e:d7:c1:24:bd:
07:be:22:ad:39:ce:ad:6d:a5:e5:b4:66:61:5f:d1:
f5:b2:a1:fb:ab:5b:a9:8e:2a:63:65:aa:ce:2c:c4:
83:18:f3:fa:04:9f:72:8e:ed:e3:c1:21:88:b0:11:
ad:b2:ea:0c:c0:05:15:a2:3d:9e:46:a3:67:18:30:
75:fa:6e:8b:22:1d:5f:cb:fe:ee:9b:1c:f5:6b:0a:
6f:47:d7:a8:a1:e4:43:f3:9f:a3:b5:68:52:52:18:
1c:6a:b4:ba:63:4c:24:5b:a4:8c:4a:df:69:9e:b4:
ba:33:75:d0:3c:a7:b9:6c:c9:d6:af:5b:69:c4:90:
32:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C6:4D:98:F6:15:AA:5F:7C:2B:14:5D:E7:F2:7D:BF:C4:F2:14:3A
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/psZNmPYVql98KxRd5_J9v8TyFDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.136.0/22
Signature Algorithm: sha256WithRSAEncryption
18:22:a2:0c:eb:a1:7e:31:fa:cd:f2:d7:94:8d:11:a6:b9:b3:
78:56:fc:8f:bc:0d:aa:3e:1f:25:48:13:cc:38:43:75:0e:7d:
7b:58:af:d1:41:1b:9a:57:4e:51:85:d9:6e:68:4b:d5:f6:f2:
59:49:c6:8d:5f:a4:d5:ff:92:50:0d:93:20:f5:f9:ba:c2:fe:
23:ff:7c:99:ff:4a:8d:f7:59:29:f3:0d:14:94:57:d9:59:f2:
2b:7d:c8:6d:9d:96:e7:68:17:71:85:20:07:5f:e4:71:32:b8:
c9:dd:00:40:bf:59:0f:83:c1:14:71:a1:47:09:f0:d1:6b:b0:
bd:54:9a:7a:54:0e:a5:8a:f8:d2:37:4f:c4:38:eb:ad:ff:59:
59:f9:bb:e8:0a:18:59:be:4c:84:2f:3a:6e:c8:c1:54:fc:66:
47:31:52:93:5e:2c:ec:07:1c:de:ea:23:c6:09:3e:82:df:80:
19:07:4a:78:4b:91:99:c1:01:b8:b6:ff:38:67:11:04:cd:21:
43:bb:42:50:28:1a:ec:40:50:a2:1f:0d:c9:ba:94:a5:74:9c:
cc:d3:26:a4:b6:7f:2f:1c:cb:16:de:fc:3e:4b:26:c9:e5:18:
b0:ef:b7:07:2a:90:e4:f7:57:3d:bb:4d:94:a8:50:b6:ab:9f:
ad:fa:bf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:03 2026 by rpki-client