Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/pIz19AzGRSOHbgi0HK46VARHAbw.roa
File: pIz19AzGRSOHbgi0HK46VARHAbw.roa (raw, json)
Hash identifier: BHtg/iE+PxWYxNkb5NocA1YYugWWqWjIVnEjbkXO1oo=
Subject key identifier: A4:8C:F5:F4:0C:C6:45:23:87:6E:08:B4:1C:AE:3A:54:04:47:01:BC
Certificate issuer: /CN=bc8b777c4faebcbf82ec97798a3e9503f831cfba
Certificate serial: 019F2368DC151C0458FBCA0213DCEC8F235B
Authority key identifier: BC:8B:77:7C:4F:AE:BC:BF:82:EC:97:79:8A:3E:95:03:F8:31:CF:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIt3fE-uvL-C7Jd5ij6VA_gxz7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/pIz19AzGRSOHbgi0HK46VARHAbw.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42324
IP address blocks: 194.0.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/vIt3fE-uvL-C7Jd5ij6VA_gxz7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/vIt3fE-uvL-C7Jd5ij6VA_gxz7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIt3fE-uvL-C7Jd5ij6VA_gxz7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dc:15:1c:04:58:fb:ca:02:13:dc:ec:8f:23:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8b777c4faebcbf82ec97798a3e9503f831cfba
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a48cf5f40cc64523876e08b41cae3a54044701bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:18:ef:69:9e:d0:1a:70:83:a9:bf:28:ea:
b6:d2:f6:b5:81:2c:b3:c7:31:7a:d2:e3:8d:ba:c2:
1a:7a:45:01:ed:30:21:a6:91:91:59:ff:f0:07:44:
e7:d2:37:f2:34:63:a3:37:c6:3b:83:72:43:89:de:
28:79:c1:0d:08:48:59:19:d3:8e:dd:be:0f:1f:04:
0a:3d:73:c1:42:f0:93:d3:05:b3:71:f4:d1:a4:f6:
7c:29:58:f6:75:bb:96:0b:cf:62:17:95:c1:62:81:
fe:3c:3a:cf:a0:9d:68:35:7d:7d:46:8d:67:a5:9f:
71:65:b5:5b:d6:c6:39:b4:6d:9c:c8:e8:41:a8:46:
13:5a:78:25:bb:6b:5c:b4:80:d2:a3:fa:be:d9:88:
7b:a5:d0:3f:1a:e2:3f:be:43:dc:f9:59:b5:a6:7d:
59:ac:ee:f1:d5:f3:06:58:4e:5a:d8:ea:a4:9b:af:
cf:aa:34:44:05:5d:c6:07:bf:ec:31:fc:26:87:63:
a6:2c:bd:0b:03:b1:4d:45:ff:cb:ac:da:56:ad:df:
28:17:d0:7f:94:de:ab:6f:10:b1:f4:27:3b:8a:13:
64:81:70:b1:ab:ad:6d:0c:f8:ed:db:d4:56:b3:4e:
d9:b2:14:6e:b6:04:4b:48:f8:24:a2:aa:d9:a6:36:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8C:F5:F4:0C:C6:45:23:87:6E:08:B4:1C:AE:3A:54:04:47:01:BC
X509v3 Authority Key Identifier:
keyid:BC:8B:77:7C:4F:AE:BC:BF:82:EC:97:79:8A:3E:95:03:F8:31:CF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIt3fE-uvL-C7Jd5ij6VA_gxz7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/pIz19AzGRSOHbgi0HK46VARHAbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/vIt3fE-uvL-C7Jd5ij6VA_gxz7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.204.0/24
Signature Algorithm: sha256WithRSAEncryption
af:42:9c:ac:ac:b1:10:9a:cb:3c:0d:51:b2:08:b3:99:20:22:
99:52:42:8f:e4:7d:61:2d:44:30:58:49:a2:ef:1b:f2:d8:8a:
f5:6e:6b:94:9d:f9:7e:a0:07:a8:74:aa:41:c1:bf:f7:0c:f8:
ed:59:df:62:90:fc:83:d2:eb:37:23:82:47:70:1e:7f:d1:b1:
cb:0d:5c:0b:82:a7:79:6f:90:db:88:af:12:ca:f2:b6:ca:1e:
82:eb:d1:26:30:f9:be:95:ba:57:a9:0e:0c:31:8b:a0:8c:9c:
e1:dc:de:99:f9:70:56:00:d4:f8:65:cd:ae:83:6c:88:9c:68:
e7:15:96:6e:05:7c:a9:fa:93:2c:5e:2a:9d:d7:32:16:19:e1:
18:fc:d7:70:5a:9c:96:b3:fd:5e:b8:7e:2f:40:ce:50:f5:34:
f5:df:2b:da:79:1b:8e:40:af:1b:69:65:1e:d1:f7:bb:43:14:
6d:e2:1a:6c:73:c4:6c:38:c2:fa:fe:35:3a:54:8e:07:f4:05:
75:7d:b5:29:85:30:eb:ca:4c:bb:61:a7:f4:99:80:9b:f2:19:
05:f7:f6:8f:2b:8b:13:5e:a6:8d:a5:43:6c:10:76:64:c8:8f:
b1:05:2f:f3:d0:5b:8d:f1:b1:53:51:1b:1c:c6:b5:df:00:f3:
56:63:ca:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:35:57 2026 by rpki-client