Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/T9G0EsB9xNpRRqACBtjCNxlrY58.roa
File: T9G0EsB9xNpRRqACBtjCNxlrY58.roa (raw, json)
Hash identifier: O8JhPnTVM6Wx6QaGCJoBS17fGqbeozAvQWWzsMQhij8=
Subject key identifier: 4F:D1:B4:12:C0:7D:C4:DA:51:46:A0:02:06:D8:C2:37:19:6B:63:9F
Certificate issuer: /CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Certificate serial: 019C2D67F400056B04A6532B6C1EE9E9DC5B
Authority key identifier: 4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/T9G0EsB9xNpRRqACBtjCNxlrY58.roa
Signing time: Thu 05 Feb 2026 10:45:12 +0000
ROA not before: Thu 05 Feb 2026 10:45:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215538
IP address blocks: 193.16.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:67:f4:00:05:6b:04:a6:53:2b:6c:1e:e9:e9:dc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Validity
Not Before: Feb 5 10:45:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fd1b412c07dc4da5146a00206d8c237196b639f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:1e:a4:60:18:f1:c6:0a:d4:1b:7d:ee:d5:
4a:9e:72:1f:11:42:3d:83:29:b6:13:e7:5a:2e:bf:
1c:5e:12:79:14:37:58:d0:2d:88:8f:38:3a:75:b0:
b9:62:f7:71:1f:e2:f4:30:83:11:e2:15:74:68:9d:
e8:99:d1:64:59:f4:b9:d4:26:bf:a0:b7:63:63:ad:
a8:1b:de:3c:f3:d5:8d:01:d2:ee:63:dd:f1:04:2e:
72:2f:1a:ee:e2:ce:01:f6:65:00:db:3f:5f:e2:74:
61:cc:bd:5e:f6:86:cb:91:0c:b9:6e:89:86:2f:48:
44:0f:32:ed:83:30:73:53:42:f9:04:47:b6:ab:e9:
ca:f5:97:00:1b:e7:43:06:00:46:ab:de:c4:07:38:
56:ea:92:48:73:f3:0d:7a:0e:b9:45:e2:4c:3b:ed:
28:ea:dd:a4:53:b7:77:53:db:d3:8e:e8:1e:64:c2:
8e:b4:20:1c:a7:6e:59:ef:0a:c8:72:09:c8:cd:1f:
eb:33:e4:29:65:e6:51:a0:06:1c:7f:da:ee:e2:8b:
c5:38:e8:e1:7a:5a:83:6d:6e:8f:7c:18:af:6f:a8:
5e:01:43:13:aa:f1:eb:94:26:e4:73:41:0b:e7:52:
47:78:d8:1f:17:2a:0d:80:aa:6c:65:7a:30:0f:cb:
60:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D1:B4:12:C0:7D:C4:DA:51:46:A0:02:06:D8:C2:37:19:6B:63:9F
X509v3 Authority Key Identifier:
keyid:4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/T9G0EsB9xNpRRqACBtjCNxlrY58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.241.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:69:68:17:0e:50:c4:f4:f4:02:c6:b9:11:bc:f6:b9:2c:1d:
fb:f6:fb:42:60:73:4d:3d:3b:49:38:73:63:c9:9e:fe:ee:53:
a0:7e:54:d3:51:b5:60:80:91:be:b5:78:ef:d2:85:37:5d:0c:
16:d1:2a:6d:57:0d:38:55:a0:4a:6b:b9:87:5e:45:7f:61:07:
43:7b:f6:e3:11:c3:19:7e:50:60:d2:8b:01:e7:b9:b7:3f:06:
e3:db:4e:d4:19:a6:f1:d7:5a:66:9b:8a:3a:d6:6a:a2:45:3c:
23:c6:58:50:18:ee:13:a0:fb:dc:d3:9e:99:ef:ff:12:60:78:
eb:6f:6b:04:31:49:6f:9b:30:ca:1a:53:a7:a3:c9:d8:e6:90:
7d:d9:25:7a:4b:b9:9b:36:ee:d0:ca:e4:9b:f5:8a:0a:d7:15:
1a:26:db:7d:9b:c3:6b:fb:73:50:a0:fc:8d:58:19:ee:26:49:
ad:42:9b:9d:a0:36:f7:db:b3:9c:86:51:a9:a3:79:57:83:c5:
3a:35:84:7c:13:03:ea:3f:26:ad:35:ba:6c:3c:bd:ba:e0:20:
01:a9:a2:ec:7a:47:cd:60:14:c4:2e:74:f9:90:1d:81:3c:67:
96:68:ea:10:36:45:f5:d9:0d:1a:e6:a1:21:a3:0b:fb:58:e5:
38:1f:5f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:40:56 2026 by rpki-client