Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/N_I9-811oh5FvMv-Jze_3iZkh5w.roa
File: N_I9-811oh5FvMv-Jze_3iZkh5w.roa (raw, json)
Hash identifier: a32SbcQteIT/Df4/H4a0JbpwFS4P9eHYICrMZQEJkgg=
Subject key identifier: 37:F2:3D:FB:CD:75:A2:1E:45:BC:CB:FE:27:37:BF:DE:26:64:87:9C
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F95FB7C6FA9E727BB6BF930667F235F33
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/N_I9-811oh5FvMv-Jze_3iZkh5w.roa
Signing time: Fri 24 Jul 2026 21:15:14 +0000
ROA not before: Fri 24 Jul 2026 21:15:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219137
IP address blocks: 201.50.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:fb:7c:6f:a9:e7:27:bb:6b:f9:30:66:7f:23:5f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 24 21:15:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37f23dfbcd75a21e45bccbfe2737bfde2664879c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:21:4d:59:3c:c5:0f:20:56:e9:2a:cd:fb:
48:bf:ed:4a:fc:e6:f9:b9:d6:ea:de:3f:82:a7:35:
3c:da:4f:c3:5a:d7:01:17:1b:32:4e:c0:2c:53:e3:
5b:fa:4e:84:f0:0f:68:9b:48:ca:8f:02:ab:c5:e5:
bf:c7:b8:59:34:c9:61:ee:45:a0:bb:b5:92:24:ca:
08:14:fa:39:08:01:61:6a:18:70:20:3f:9b:c4:91:
f2:c6:36:5e:c7:2c:4b:98:c6:e4:09:3e:bf:d3:d3:
40:61:79:40:8a:e7:47:66:2b:f6:4e:77:2b:30:48:
90:d6:be:6d:d9:f2:06:19:24:0d:3c:da:96:20:47:
e3:17:b3:96:8c:33:78:cd:b1:17:c9:f5:c2:3e:73:
c0:5e:2f:83:11:1c:6b:81:38:da:c8:15:1c:c2:83:
c7:c7:72:29:38:d9:fa:de:77:29:14:43:0d:05:52:
fb:47:b2:73:0d:33:4b:97:ea:d3:e7:fe:0f:d2:06:
48:4b:9b:ec:1a:0e:50:c9:7d:e4:63:d4:05:30:c3:
53:93:67:99:15:81:24:7c:33:11:78:81:d7:ff:6f:
9f:62:d8:8d:b2:b4:ba:d8:cb:18:50:fb:45:d9:66:
ef:47:3f:6b:8b:83:86:a5:f6:8b:d6:35:07:4d:bf:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F2:3D:FB:CD:75:A2:1E:45:BC:CB:FE:27:37:BF:DE:26:64:87:9C
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/N_I9-811oh5FvMv-Jze_3iZkh5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.121.0/24
Signature Algorithm: sha256WithRSAEncryption
93:0d:74:32:0b:8f:87:bf:28:34:2c:66:89:75:41:15:69:57:
db:0b:d4:cc:2e:82:c0:ee:57:41:af:3c:56:5d:83:59:13:ae:
2d:fb:6f:11:76:5e:33:92:4e:14:4d:b6:88:4d:86:b0:4a:92:
1c:ed:3a:6c:16:da:c0:47:0e:b3:8a:eb:af:0e:0d:a8:49:d2:
df:49:33:83:21:98:ce:11:4d:ab:69:11:75:ff:0f:9e:5c:46:
9b:e0:79:a9:0e:b5:da:9c:cd:ed:3e:c0:79:f3:31:77:93:a3:
a9:48:e8:99:15:93:6d:26:08:21:02:eb:c8:21:f1:ed:1e:ee:
0a:73:5b:e9:02:fc:52:8d:5b:86:94:77:43:d7:62:4c:d8:3d:
93:04:7b:90:3b:af:c8:11:05:74:c0:66:46:8d:ba:58:eb:86:
a8:cc:54:de:78:d6:fa:ca:a3:cb:b4:81:e2:2c:33:4b:3b:e7:
78:bc:a1:e3:2e:94:d2:4b:71:5f:9b:f7:56:0c:8d:71:8b:f9:
6e:b6:35:ba:fe:3f:f3:e3:26:b0:f8:6a:db:6a:0c:44:ec:34:
6f:ae:35:9d:45:67:b9:fd:69:42:f8:ec:d3:66:c2:dd:81:22:
7c:59:97:f5:ed:e2:44:ec:d1:c5:ad:39:d0:3a:f4:32:8f:21:
9b:d5:a2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:19:40 2026 by rpki-client