Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/9NjIuu79tOWOs4s_vxlsyRI0HIE.roa
File: 9NjIuu79tOWOs4s_vxlsyRI0HIE.roa (raw, json)
Hash identifier: sDPtToOGWgvWgoveUqJ+rU4TxwqwqRDHgNQZ+9jsm4M=
Subject key identifier: F4:D8:C8:BA:EE:FD:B4:E5:8E:B3:8B:3F:BF:19:6C:C9:12:34:1C:81
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019D8673F8572E14F787BB2AE7E7F61306BD
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/9NjIuu79tOWOs4s_vxlsyRI0HIE.roa
Signing time: Mon 13 Apr 2026 10:47:20 +0000
ROA not before: Mon 13 Apr 2026 10:47:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199144
IP address blocks: 193.42.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:73:f8:57:2e:14:f7:87:bb:2a:e7:e7:f6:13:06:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Apr 13 10:47:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4d8c8baeefdb4e58eb38b3fbf196cc912341c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:ae:06:06:ff:f1:f3:06:79:3a:a0:f9:b8:
67:65:2c:6c:20:8d:db:de:cd:b2:a4:44:a6:79:81:
9f:0c:f6:e9:7a:55:df:d9:71:6e:c0:39:f9:11:e4:
20:ec:95:ab:24:10:6d:13:a7:9b:a1:b0:21:fa:ba:
ba:fa:c6:d4:6d:cf:fb:9a:60:66:b1:7b:30:27:de:
f6:df:e1:7a:b0:f1:be:f1:24:28:49:75:61:71:25:
6d:1e:9c:47:a6:bf:65:8d:70:14:10:4f:9b:95:b7:
66:bb:a9:e0:30:a7:bd:e4:50:39:99:ce:75:ea:02:
3e:ba:67:be:46:bd:68:f9:cb:d6:66:56:20:c6:b1:
e4:e2:ab:d5:93:7e:cc:1e:ce:ec:61:b0:f8:09:96:
05:0a:56:25:c6:3c:9c:20:78:dc:10:9c:fd:76:70:
a7:07:9f:28:8e:dd:59:4c:bf:bf:50:0c:ac:05:4e:
58:0b:da:5f:00:b1:02:78:f8:1f:a1:ac:7e:c6:5b:
c8:33:c3:b4:b9:fc:8c:c4:97:68:56:9e:a2:ac:a4:
30:83:a8:b1:82:83:d8:3f:f3:3f:30:17:b0:a9:ff:
6b:30:a6:f3:e9:a7:70:b9:15:c0:b6:ae:5d:c5:f7:
96:ba:1a:93:93:38:51:b8:e8:e6:55:03:2f:8c:21:
b4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D8:C8:BA:EE:FD:B4:E5:8E:B3:8B:3F:BF:19:6C:C9:12:34:1C:81
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/9NjIuu79tOWOs4s_vxlsyRI0HIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.112.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:12:b6:b6:2a:44:6c:2c:7a:13:c9:a6:c6:1e:58:ee:5d:86:
37:70:b2:ad:d5:12:f5:16:d9:20:9a:6d:08:7c:3a:c6:99:49:
77:1c:b0:13:ba:00:0d:78:58:c8:2f:c8:81:20:8f:6a:44:80:
f7:82:af:e6:a6:f7:14:73:af:bc:cb:80:44:73:95:1b:0c:a7:
87:21:07:17:6c:c7:d7:01:43:b8:88:94:ba:d4:82:f2:6b:bf:
91:eb:94:b9:9b:50:fa:44:35:40:c9:e8:36:c7:5d:a2:50:e8:
24:4e:6e:e2:6d:17:f2:91:4c:d6:7c:30:13:80:76:d5:19:ca:
d6:d9:33:00:80:d1:30:f6:a2:74:6c:86:ef:a3:15:81:e8:56:
5d:78:e7:04:06:93:6a:14:b2:8c:a0:ed:68:60:89:71:53:d7:
98:89:5f:a0:c9:2f:7c:6e:60:ec:fc:7c:70:6c:40:71:9d:5b:
26:3f:1a:bd:e1:58:ca:e0:47:91:2a:78:55:5f:72:42:24:40:
68:1a:ce:c0:d9:05:d5:40:bc:8a:9a:97:5c:ae:70:44:01:34:
05:dd:d1:46:17:dd:52:88:00:4c:25:28:9b:d3:14:8d:69:c3:
b5:3f:09:27:1a:d9:71:1b:7b:c4:3f:d5:8d:3c:3d:21:9d:78:
1a:cd:15:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:49:40 2026 by rpki-client