Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9LIPlxXuUxFzFNz5PxrwojQOwxI.roa
File: 9LIPlxXuUxFzFNz5PxrwojQOwxI.roa (raw, json)
Hash identifier: ONKpURx+KzrfJTmE5Dpgbz8FDEwkz99NFeUsO5hyZ1s=
Subject key identifier: F4:B2:0F:97:15:EE:53:11:73:14:DC:F9:3F:1A:F0:A2:34:0E:C3:12
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01A0C253322976E853A4F387F3716BFFE9D6
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9LIPlxXuUxFzFNz5PxrwojQOwxI.roa
Signing time: Mon 21 Sep 2026 04:57:07 +0000
ROA not before: Mon 21 Sep 2026 04:57:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214957
IP address blocks: 5.57.33.0/24 maxlen: 24
37.32.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:53:32:29:76:e8:53:a4:f3:87:f3:71:6b:ff:e9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Sep 21 04:57:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4b20f9715ee53117314dcf93f1af0a2340ec312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:71:e8:d1:7b:b1:96:3d:3f:a9:d3:d7:3a:58:
11:b6:36:cc:76:e9:5a:24:24:af:c4:1f:ee:14:41:
ef:83:b5:91:98:ee:9b:73:6f:87:2a:41:fa:a8:a9:
ed:63:9a:b7:78:6d:3c:ab:d1:3f:69:0f:a8:b0:c9:
b0:3d:d2:db:73:f6:35:8c:1a:ea:60:cd:a2:41:77:
cb:a5:92:e0:43:43:1a:c8:80:3c:fa:1c:fb:26:8f:
04:b4:94:69:30:59:59:92:21:d5:f6:6a:e0:e3:09:
48:11:5a:1e:3a:df:f6:ac:d3:2b:75:14:f7:37:64:
89:97:80:29:af:59:f2:5a:78:ab:1b:0d:e2:f8:7c:
0c:b2:75:d5:c0:4e:b5:f3:2b:89:f5:24:e1:95:6d:
da:07:f1:37:74:c2:bb:b6:f4:4f:49:8f:e5:3d:59:
5e:97:58:52:1a:83:b0:29:dd:6f:bc:89:ca:7b:a1:
c1:b9:70:97:42:b4:9f:84:4d:c9:cb:b9:f4:90:ff:
74:ae:46:98:d9:a3:35:39:39:e8:f8:97:12:4a:d8:
69:56:6a:67:d2:1a:a1:0f:97:04:06:0c:72:f6:51:
f9:b7:80:de:fe:03:72:03:ae:a7:f8:cb:93:e6:8e:
cf:3e:78:5e:36:8d:c8:97:ea:79:57:7b:7f:03:c6:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B2:0F:97:15:EE:53:11:73:14:DC:F9:3F:1A:F0:A2:34:0E:C3:12
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9LIPlxXuUxFzFNz5PxrwojQOwxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.33.0/24
37.32.43.0/24
Signature Algorithm: sha256WithRSAEncryption
68:fc:94:a8:ed:be:69:ab:5e:14:44:aa:00:2d:9b:af:49:b9:
12:5a:b4:6e:0c:9c:b5:78:10:82:48:c6:b0:0b:9a:fb:95:a9:
20:9d:be:bb:bc:37:82:58:a9:f3:57:59:9a:5c:ca:ec:04:6f:
c3:53:ae:a6:b6:fe:eb:ff:36:6e:15:bc:95:37:c9:dd:41:77:
67:40:d6:f8:6a:92:f3:c3:c0:d6:c7:bb:20:86:5b:29:89:1f:
54:41:9f:ed:16:3e:74:f4:fc:0e:82:10:8f:b3:8d:8f:4b:76:
db:0a:8b:54:0d:cf:c1:f1:ed:30:49:12:c4:c0:2d:85:d1:07:
72:46:78:37:84:ea:3f:46:87:ce:c5:68:ec:5a:cb:54:1b:5f:
02:ab:4a:95:30:72:3c:e8:12:75:d9:4f:df:bf:98:9f:51:5b:
d9:78:85:06:be:df:c2:31:be:68:e8:7a:e9:03:85:c6:3f:d0:
e7:69:4d:16:91:92:0b:00:2f:ae:f3:43:5c:7a:33:f5:11:2e:
90:b4:e0:b9:14:56:54:4e:0d:27:01:41:09:a6:15:bf:b2:1e:
c4:ec:75:35:f1:f0:bb:74:fc:9e:ab:b4:97:6f:b2:06:35:89:
7e:1b:d8:bf:0a:90:ac:ec:80:b0:1e:02:08:a4:bd:75:8a:36:
0d:cc:75:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:11:31 2026 by rpki-client