Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/x-XonmE5dvLur1OxvFQr6H38FwM.roa
File: x-XonmE5dvLur1OxvFQr6H38FwM.roa (raw, json)
Hash identifier: zWIumHXMp1m+hNVABrbxWgvO1UkXyiG4O4UCyEISs5U=
Subject key identifier: C7:E5:E8:9E:61:39:76:F2:EE:AF:53:B1:BC:54:2B:E8:7D:FC:17:03
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 01A09EE38A9CB3B0306BE81321B361233E9A
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/x-XonmE5dvLur1OxvFQr6H38FwM.roa
Signing time: Mon 14 Sep 2026 07:48:27 +0000
ROA not before: Mon 14 Sep 2026 07:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 84.247.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:e3:8a:9c:b3:b0:30:6b:e8:13:21:b3:61:23:3e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Sep 14 07:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7e5e89e613976f2eeaf53b1bc542be87dfc1703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9e:9c:a9:96:74:e7:3d:9d:68:75:fc:81:36:
81:98:ef:3a:af:f1:a4:d0:da:34:16:a5:3d:7a:68:
f2:5b:49:a2:00:9d:d0:4a:09:fc:79:86:1c:f4:89:
e1:74:cc:c6:ae:eb:b1:9d:35:0a:30:86:35:f2:20:
6b:18:a3:09:c8:ac:3e:a3:dc:f4:89:a5:fc:96:12:
07:2f:63:c4:ea:83:b6:53:5d:a5:6c:de:ad:9a:e8:
f8:68:5a:87:89:44:8a:81:3b:70:fe:02:66:78:d8:
32:81:31:42:79:1d:55:1e:d3:b2:41:0c:2f:93:f6:
79:95:58:f6:1a:f2:f5:03:d7:cc:73:ed:f6:3d:ed:
43:f2:39:ad:99:52:b4:60:50:e2:1b:00:c4:38:a7:
13:bc:42:86:51:93:db:8c:93:ce:ab:d5:46:ad:45:
57:ee:27:9f:61:e0:8b:fb:29:eb:20:57:40:12:f6:
78:74:af:ef:50:5a:86:c1:5b:fb:e3:3c:a5:27:2d:
0b:62:58:48:01:cd:03:1a:01:c0:62:2a:1b:aa:40:
9d:d2:28:fd:6a:46:34:f0:28:e3:7b:43:e1:95:1f:
2b:ef:82:c3:aa:31:dc:40:16:64:03:05:a1:2d:1c:
21:b3:fc:fb:dc:5b:e3:3b:7b:92:2e:db:cc:48:bb:
8b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E5:E8:9E:61:39:76:F2:EE:AF:53:B1:BC:54:2B:E8:7D:FC:17:03
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/x-XonmE5dvLur1OxvFQr6H38FwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:4b:ef:c6:ba:e8:87:76:77:91:83:17:7e:f3:cc:2f:63:5c:
52:ef:d9:e2:f1:8c:98:a0:9a:93:0d:51:f0:08:4a:4a:2d:eb:
7a:81:0f:7b:26:b6:dd:65:df:6c:dd:b9:6b:e3:c9:29:95:25:
66:13:21:eb:f9:e9:4b:9a:18:a6:1b:d5:57:31:78:b9:bc:ba:
10:bd:dd:ee:5b:a7:46:f0:10:95:19:f2:4f:5e:7e:31:32:bc:
f2:66:d0:61:ab:e2:c4:a2:9a:b4:bd:e1:d6:1a:9c:d3:b1:f5:
24:09:32:63:77:3c:39:d4:e8:10:07:65:73:da:41:f8:0f:16:
f0:11:7b:b2:fe:ec:df:82:ad:7a:63:1c:05:15:4c:5b:5e:d4:
49:0f:c9:98:9a:15:50:62:c8:ed:a5:31:90:d4:54:92:1b:04:
c5:b5:cf:ec:a1:c6:90:a9:cc:b7:f3:59:a9:8d:72:cb:ac:5c:
86:e4:f6:3c:b2:4b:09:58:f6:b0:d0:94:e7:94:6d:78:71:3a:
d0:3d:0c:fd:e4:f9:6c:ef:da:42:95:06:39:02:ee:54:14:0a:
a4:98:f0:fd:e5:66:0b:f7:7a:a2:20:2e:72:1a:44:15:e4:7f:
ee:33:8b:91:14:da:e0:cc:52:a2:3a:f2:c4:7d:11:41:d5:0a:
4c:ed:24:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:14:18 2026 by rpki-client