Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/1EPj5oCsvEp1ETVvGrcTQxkCQms.roa
File: 1EPj5oCsvEp1ETVvGrcTQxkCQms.roa (raw, json)
Hash identifier: f9+jGJesrY0olTfTtyOt2zp8nsGdbEcZJti7tdKfZHA=
Subject key identifier: D4:43:E3:E6:80:AC:BC:4A:75:11:35:6F:1A:B7:13:43:19:02:42:6B
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0A456CEDADA0CFAF5D43F413B8882C271
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/1EPj5oCsvEp1ETVvGrcTQxkCQms.roa
Signing time: Tue 15 Sep 2026 09:12:27 +0000
ROA not before: Tue 15 Sep 2026 09:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51441
IP address blocks: 89.46.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:56:ce:da:da:0c:fa:f5:d4:3f:41:3b:88:82:c2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 15 09:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d443e3e680acbc4a7511356f1ab713431902426b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:cf:7f:d1:ba:8f:c3:8b:39:8e:de:23:11:
15:77:12:7b:31:f1:4e:75:52:b9:32:45:28:0f:44:
7c:06:19:dd:1f:06:b9:62:42:08:2f:3c:43:a5:de:
a7:da:2d:52:2f:34:44:16:d6:fe:1b:b4:a0:08:82:
fb:13:94:da:3a:32:f9:fc:06:20:a8:5d:83:05:7a:
9a:6c:8b:93:4d:8d:c8:73:14:81:c2:28:f8:8e:49:
2e:8e:78:6a:0d:5a:3b:26:21:f3:8f:d4:ee:0e:1d:
bc:9b:63:1e:ef:3e:cf:05:d4:da:51:a1:89:fc:0a:
3f:82:11:d2:e9:98:87:59:6f:07:eb:26:fa:aa:52:
35:39:69:c7:45:1e:68:7a:09:73:20:22:c5:4a:9e:
f1:ac:95:ae:26:ae:fd:77:1c:ca:ef:28:f4:72:b5:
0b:a7:3f:05:19:c5:cf:14:6e:af:dd:ba:aa:29:23:
3f:a8:f3:bf:83:0e:42:d5:b9:12:b8:76:50:31:a7:
3c:78:3b:a8:11:b3:e5:08:d1:a0:c7:3c:57:87:48:
d6:c6:a2:d6:40:f5:c1:70:72:4e:db:88:2b:11:32:
b3:ab:45:03:b2:ab:59:df:68:dc:00:6c:58:6e:cc:
e6:8b:ed:d4:0a:33:c9:bf:0a:10:2a:ad:ec:7d:ae:
8d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:43:E3:E6:80:AC:BC:4A:75:11:35:6F:1A:B7:13:43:19:02:42:6B
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/1EPj5oCsvEp1ETVvGrcTQxkCQms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.244.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b9:2c:c9:00:a7:16:d6:49:e0:a6:2a:37:78:84:2a:19:31:
4a:21:4c:65:1d:4b:b3:be:7d:35:24:ba:88:62:48:ed:9b:fd:
ea:a2:b8:b1:8f:90:21:8b:5c:ae:32:fc:24:ef:c7:74:6a:dc:
df:fc:f3:9a:05:d3:5e:84:90:a8:b1:19:93:b0:4e:c5:25:11:
d0:ef:73:85:75:e0:58:47:49:37:e5:07:e8:c0:cc:03:eb:00:
40:c7:c0:47:01:7c:8f:d5:0d:8e:46:c5:28:bc:3a:17:21:95:
63:92:32:fb:90:4c:34:98:b0:40:eb:90:11:dc:7a:41:1a:8d:
2b:7c:56:6c:6e:17:cd:89:ed:28:ce:b3:94:9a:d3:95:af:4c:
1e:82:10:c5:1b:0a:c3:e8:e5:1a:b2:fe:76:17:52:fd:cd:9e:
bf:92:e5:c8:a4:b6:a2:fe:54:2b:a6:17:4e:52:9e:1b:f8:c2:
7d:29:1f:50:ed:52:2c:66:44:78:4b:c9:f5:6a:45:81:20:f2:
0f:dc:b9:13:52:d9:7d:17:cc:f6:29:ff:c9:a5:ec:4b:65:d1:
12:81:ee:13:c6:65:cf:ce:8a:9d:3f:c7:ed:5c:9f:fd:d7:5d:
d1:e9:60:ae:65:fd:a4:68:29:c9:d0:93:1b:58:33:c8:0f:1b:
ca:c4:ac:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:58 2026 by rpki-client