Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/K9WxEgCA8r410R0KfEYyV5Wjw7E.roa
File: K9WxEgCA8r410R0KfEYyV5Wjw7E.roa (raw, json)
Hash identifier: JpVLUCuj5OvUHTAAwwKvqtVZT1BNrDYMprV0yX+uBgU=
Subject key identifier: 2B:D5:B1:12:00:80:F2:BE:35:D1:1D:0A:7C:46:32:57:95:A3:C3:B1
Certificate issuer: /CN=3edd551d0a636db4b5077c648d9d87bdadaab81e
Certificate serial: 019D8E11201271B5FE283ACAF3A78F375EFF
Authority key identifier: 3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/K9WxEgCA8r410R0KfEYyV5Wjw7E.roa
Signing time: Tue 14 Apr 2026 22:16:20 +0000
ROA not before: Tue 14 Apr 2026 22:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212445
IP address blocks: 193.162.31.0/24 maxlen: 24
2a10:9a00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8e:11:20:12:71:b5:fe:28:3a:ca:f3:a7:8f:37:5e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edd551d0a636db4b5077c648d9d87bdadaab81e
Validity
Not Before: Apr 14 22:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bd5b1120080f2be35d11d0a7c46325795a3c3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:43:6d:46:3a:46:30:01:0d:e8:25:87:50:97:
21:01:bf:8e:48:ec:26:2e:4a:d9:d6:e1:0f:d2:aa:
93:55:03:b1:20:8f:e4:03:20:50:ff:bc:b3:58:6c:
8f:f9:5c:b4:e1:b6:45:12:28:f4:ca:71:19:23:53:
23:66:18:8d:a7:3d:0c:d1:7b:ca:3f:5c:ac:f1:b9:
77:f8:96:b0:36:e7:6d:e6:ac:63:47:c1:db:7e:7a:
dc:b3:d2:78:fc:6f:72:fe:06:f2:6c:ad:09:e2:6e:
be:e3:26:c4:e3:e0:fd:f1:11:1f:a5:e9:1e:6d:68:
0d:6d:c5:e3:c2:a8:83:01:66:7b:94:cf:53:fb:63:
7c:86:f0:80:c1:ca:dd:de:7d:74:06:66:27:d0:f1:
97:c0:8f:f1:6a:ca:f5:e8:b7:83:d6:53:08:0f:4b:
b9:41:4d:30:12:b0:de:e6:e6:39:4c:a3:60:91:d7:
75:c6:81:31:82:9f:4c:92:c3:11:0e:f2:1e:36:82:
c1:5a:35:b6:31:6e:d5:74:1f:9b:14:87:5d:45:2f:
9e:f1:ab:d5:41:df:9c:3a:08:bc:35:fd:a9:0d:8f:
65:15:e9:3c:04:72:89:70:55:4d:ed:21:45:fc:c4:
ca:35:e7:2e:df:b1:68:1d:3f:99:d4:9f:46:3d:2a:
25:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D5:B1:12:00:80:F2:BE:35:D1:1D:0A:7C:46:32:57:95:A3:C3:B1
X509v3 Authority Key Identifier:
keyid:3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/K9WxEgCA8r410R0KfEYyV5Wjw7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.31.0/24
IPv6:
2a10:9a00::/48
Signature Algorithm: sha256WithRSAEncryption
b9:c6:56:2e:2b:3c:50:5f:e4:ed:fd:14:86:97:3a:fa:ed:10:
11:9a:69:82:d4:78:d2:27:f1:86:55:ae:9b:93:f3:a8:7d:bb:
6b:f4:7f:84:3e:66:34:f3:09:41:6c:6f:ad:50:5e:c5:16:06:
72:7a:31:22:d0:fe:bb:fa:3f:1e:c2:ec:52:9a:8c:70:d5:6c:
b7:bc:a2:18:8b:f8:ec:e9:38:c6:a7:e0:93:65:ac:8c:0e:35:
b3:be:44:bc:28:35:97:f9:10:7b:5c:10:79:d8:b2:b3:cf:15:
84:9b:0e:8a:e6:4e:be:29:fa:3c:d7:14:05:f3:05:a0:09:b3:
83:a5:cb:5f:8a:8c:d2:f0:ef:de:02:c8:99:7e:2c:95:67:f3:
cf:b5:b3:aa:e0:99:50:cf:37:20:45:62:59:0c:82:81:68:ce:
aa:4a:57:6d:8d:e7:07:37:81:48:c1:b5:30:e7:8f:53:a3:c5:
23:cb:df:b5:a7:72:f2:d5:d2:eb:97:7d:ed:f6:51:cd:90:15:
41:30:13:e1:d3:73:8b:51:3b:8f:46:ed:d0:c0:8a:ea:b4:ee:
0b:c9:a4:18:00:3c:20:69:db:62:44:94:27:b7:4d:2a:73:7e:
83:1f:df:05:ad:ec:9a:29:f5:48:1b:c9:57:3b:88:de:4f:96:
e7:26:ca:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:04:14 2026 by rpki-client