Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/9MqVNUZkLF8qRvs05wy7QA1yJvs.roa
File: 9MqVNUZkLF8qRvs05wy7QA1yJvs.roa (raw, json)
Hash identifier: 47XWmVQqILhCQ9ObE1/3GyuSK2LFdfhVQnx89P9zW5s=
Subject key identifier: F4:CA:95:35:46:64:2C:5F:2A:46:FB:34:E7:0C:BB:40:0D:72:26:FB
Certificate issuer: /CN=2cd9983169f960a0ec411df174059bdcfbec8132
Certificate serial: 01A013E76835CA4B5E20F377510113905E82
Authority key identifier: 2C:D9:98:31:69:F9:60:A0:EC:41:1D:F1:74:05:9B:DC:FB:EC:81:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNmYMWn5YKDsQR3xdAWb3PvsgTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/9MqVNUZkLF8qRvs05wy7QA1yJvs.roa
Signing time: Tue 18 Aug 2026 08:05:27 +0000
ROA not before: Tue 18 Aug 2026 08:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199195
IP address blocks: 194.39.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/LNmYMWn5YKDsQR3xdAWb3PvsgTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/LNmYMWn5YKDsQR3xdAWb3PvsgTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNmYMWn5YKDsQR3xdAWb3PvsgTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:e7:68:35:ca:4b:5e:20:f3:77:51:01:13:90:5e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9983169f960a0ec411df174059bdcfbec8132
Validity
Not Before: Aug 18 08:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4ca953546642c5f2a46fb34e70cbb400d7226fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:77:42:24:78:36:04:b5:f4:b4:de:53:5d:
fa:9c:fe:41:f1:e0:80:f6:1d:03:7b:8e:33:7f:fd:
87:52:bf:f4:25:a9:55:e6:73:43:47:eb:6b:85:39:
c1:e2:11:42:41:31:00:b9:6c:9e:b6:b6:4d:a6:a5:
39:88:43:09:6d:ad:57:f3:40:a4:7d:cb:f0:10:62:
4f:bb:6d:cd:76:66:7a:9d:5b:f3:46:8b:7d:9d:d7:
7f:c0:2c:3f:b2:37:91:ed:c5:0a:6a:1f:0e:6a:6b:
80:d5:d1:f5:c3:b3:43:07:bb:2d:2a:19:6b:34:22:
cb:3f:e8:fe:35:b9:e6:cc:2b:a7:df:ee:33:bc:ea:
51:a7:72:eb:60:c8:a0:79:97:d4:1c:f5:b5:2b:b6:
0b:bf:e7:14:0b:3b:9f:54:eb:6a:ae:2a:85:6d:60:
98:31:83:a1:89:07:95:7a:e3:96:c6:55:58:e2:73:
f2:fe:b9:86:29:f0:89:1a:9b:23:31:b3:01:c0:11:
30:20:0d:a3:d0:a4:fd:ca:7c:24:b1:89:6d:c5:81:
62:fc:34:8d:ff:24:a7:9c:7b:c2:c7:fa:8b:90:fd:
9c:54:cb:87:b6:35:b3:56:51:f9:59:a6:f6:2c:2f:
84:e0:b4:39:f4:89:11:6c:db:48:3a:ee:47:78:7e:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CA:95:35:46:64:2C:5F:2A:46:FB:34:E7:0C:BB:40:0D:72:26:FB
X509v3 Authority Key Identifier:
keyid:2C:D9:98:31:69:F9:60:A0:EC:41:1D:F1:74:05:9B:DC:FB:EC:81:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNmYMWn5YKDsQR3xdAWb3PvsgTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/9MqVNUZkLF8qRvs05wy7QA1yJvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/LNmYMWn5YKDsQR3xdAWb3PvsgTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.253.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:dd:58:50:8d:cc:62:a4:3b:d0:7c:19:c8:2c:49:1c:8a:36:
14:d2:2d:49:ee:68:5c:6d:1d:eb:de:8f:f3:f6:13:ac:8f:da:
6d:ae:9b:95:3b:b5:37:cd:8d:85:93:05:7e:b5:52:66:fb:21:
74:96:99:66:9d:7b:7b:dc:52:1e:17:bc:65:45:c6:e2:31:b8:
3d:37:3b:6d:84:ea:f2:e0:de:6f:6b:6a:ec:31:56:15:22:af:
06:79:51:50:92:ec:91:de:6d:c9:6a:08:a1:84:dc:f8:41:4b:
73:a1:80:8d:87:45:48:24:52:02:36:0e:b5:d2:10:e8:12:d1:
92:ad:7e:f8:a0:61:55:66:a8:3a:bc:1d:25:5a:2a:fe:69:2c:
3a:47:3c:70:7a:9d:5c:e5:c2:e6:3b:f6:ff:f0:06:1f:97:f0:
87:43:60:96:e0:28:4f:9a:da:94:3b:42:53:c7:d3:31:02:fc:
e4:ff:0d:70:51:3b:5a:4e:09:01:50:a5:92:b0:06:93:4e:78:
06:e8:5c:25:bf:54:96:98:f1:f4:a7:30:47:b7:b2:e8:cf:da:
7e:2e:f1:66:b5:6c:05:e4:27:84:f2:07:b1:fc:bf:1a:1d:8d:
6c:8d:7e:4c:fe:1c:f3:c3:43:53:80:b0:5f:2b:57:a5:88:e7:
35:5b:d2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:28:18 2026 by rpki-client