Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/9vZ-bh78nQSisMvdujS-2j3jEKQ.roa
File: 9vZ-bh78nQSisMvdujS-2j3jEKQ.roa (raw, json)
Hash identifier: 9I7QrI133VXhhj9mm/9D7pspc5I/xtLd60jZL9gznBc=
Subject key identifier: F6:F6:7E:6E:1E:FC:9D:04:A2:B0:CB:DD:BA:34:BE:DA:3D:E3:10:A4
Certificate issuer: /CN=c94ab84b380f32e3b156fca370a284fcb0761ab7
Certificate serial: 019D938EC6F1FAF90C294E99823978664F21
Authority key identifier: C9:4A:B8:4B:38:0F:32:E3:B1:56:FC:A3:70:A2:84:FC:B0:76:1A:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUq4SzgPMuOxVvyjcKKE_LB2Grc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/9vZ-bh78nQSisMvdujS-2j3jEKQ.roa
Signing time: Wed 15 Apr 2026 23:51:40 +0000
ROA not before: Wed 15 Apr 2026 23:51:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49788
IP address blocks: 193.84.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yUq4SzgPMuOxVvyjcKKE_LB2Grc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:93:8e:c6:f1:fa:f9:0c:29:4e:99:82:39:78:66:4f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c94ab84b380f32e3b156fca370a284fcb0761ab7
Validity
Not Before: Apr 15 23:51:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6f67e6e1efc9d04a2b0cbddba34beda3de310a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3f:d2:65:e4:f6:73:62:d6:df:93:b7:91:28:
f8:89:28:f8:a8:8b:50:00:59:e4:0f:8e:14:45:f5:
77:e0:b0:93:df:14:e2:e6:58:be:98:b0:70:af:cf:
23:d6:fa:74:4f:90:d2:30:8c:2d:00:e7:33:6f:69:
70:68:e2:0c:0f:43:cc:ab:3c:fa:29:29:d6:3a:52:
e4:cd:8a:41:05:a7:e0:22:cb:1b:12:77:f6:6e:c6:
fb:89:ca:eb:50:46:ad:39:05:5c:0c:a4:c8:41:34:
de:81:08:91:23:d3:3e:a4:06:20:d7:f4:5d:58:40:
e4:b1:2f:ff:e6:82:f7:b8:15:f3:10:9d:3a:a2:dd:
50:c1:cf:5e:f6:db:3c:30:c4:43:0c:cf:bf:3c:34:
5d:d9:28:11:da:01:4b:1e:c8:7d:86:61:b0:ad:e1:
20:bd:2e:7d:46:6b:f0:12:fe:ea:ab:66:50:ca:fd:
58:68:35:f5:4c:2b:0c:56:bd:bf:78:09:ae:c1:18:
d7:47:4c:5a:28:6e:3b:38:b9:df:1c:7c:40:35:da:
50:64:2b:08:24:04:8b:6d:c1:72:69:76:a3:73:d4:
2a:92:e0:d2:53:b9:61:59:81:e5:4e:0b:ce:b8:86:
b2:10:0f:89:a1:70:9a:38:24:c4:af:e1:f4:8e:bc:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F6:7E:6E:1E:FC:9D:04:A2:B0:CB:DD:BA:34:BE:DA:3D:E3:10:A4
X509v3 Authority Key Identifier:
keyid:C9:4A:B8:4B:38:0F:32:E3:B1:56:FC:A3:70:A2:84:FC:B0:76:1A:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUq4SzgPMuOxVvyjcKKE_LB2Grc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/9vZ-bh78nQSisMvdujS-2j3jEKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.17.0/24
Signature Algorithm: sha256WithRSAEncryption
51:30:19:e6:3e:96:09:97:f0:0c:bd:25:5f:76:cf:4d:56:c6:
7e:ad:eb:8d:58:ae:3c:c6:be:eb:f6:86:0f:48:06:fe:92:28:
1b:d0:14:69:42:fe:1c:a2:98:5c:b1:fb:e6:ee:b1:e4:73:e0:
52:ca:1c:a6:cc:9a:12:48:bc:c8:e0:47:7b:1b:76:3a:17:24:
83:2b:bf:0a:6a:3a:01:63:d3:49:b9:d9:8c:23:85:2e:bd:73:
3e:f2:8e:fe:86:69:e0:76:1e:65:f3:81:8b:c9:01:1e:22:24:
84:78:49:a5:0d:a6:5b:e2:03:49:82:d8:11:cf:37:0b:eb:e9:
43:76:70:51:ae:cd:5b:53:0a:ec:8b:be:a4:cc:92:4c:1b:15:
1a:32:7d:bd:a8:06:89:32:93:5c:7d:24:b2:cb:19:1a:9d:7a:
1c:5d:7a:98:75:61:7f:ca:39:0f:df:c9:be:0b:fd:da:47:8a:
de:b8:ac:05:55:0e:ef:f8:05:80:86:cb:f6:a5:2c:c8:44:61:
8c:45:d3:aa:1e:5d:0f:ee:c2:7c:6c:e6:e6:ef:04:7f:e4:f0:
10:16:2a:df:ec:89:08:2c:e4:0d:37:7a:58:a0:f3:08:c6:4a:
e3:21:29:6c:39:4c:6b:b7:b6:94:28:fb:2b:0b:26:16:0b:55:
cd:ca:19:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2Tjsbx+vkMKU6Zgjl4Zk8hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NGFiODRiMzgwZjMyZTNiMTU2ZmNhMzcwYTI4NGZjYjA3
NjFhYjcwHhcNMjYwNDE1MjM1MTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmY2N2U2ZTFlZmM5ZDA0YTJiMGNiZGRiYTM0YmVkYTNkZTMxMGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD/SZeT2c2LW35O3kSj4iSj4qItQ
AFnkD44URfV34LCT3xTi5li+mLBwr88j1vp0T5DSMIwtAOczb2lwaOIMD0PMqzz6
KSnWOlLkzYpBBafgIssbEnf2bsb7icrrUEatOQVcDKTIQTTegQiRI9M+pAYg1/Rd
WEDksS//5oL3uBXzEJ06ot1Qwc9e9ts8MMRDDM+/PDRd2SgR2gFLHsh9hmGwreEg
vS59RmvwEv7qq2ZQyv1YaDX1TCsMVr2/eAmuwRjXR0xaKG47OLnfHHxANdpQZCsI
JASLbcFyaXajc9QqkuDSU7lhWYHlTgvOuIayEA+JoXCaOCTEr+H0jrzBXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPb2fm4e/J0EorDL3bo0vto94xCkMB8GA1UdIwQY
MBaAFMlKuEs4DzLjsVb8o3CihPywdhq3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVVxNFN6Z1BNdU94VnZ5amNLS0VfTEIyR3JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8zNDc5YWQtNzgzZi00ZGFmLWE5Yjct
MDgwNzc5MGJhMjFjLzEvOXZaLWJoNzhuUVNpc012ZHVqUy0yajNqRUtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8zNDc5YWQtNzgzZi00ZGFmLWE5YjctMDgwNzc5MGJhMjFj
LzEveVVxNFN6Z1BNdU94VnZ5amNLS0VfTEIyR3JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwVQRMA0G
CSqGSIb3DQEBCwUAA4IBAQBRMBnmPpYJl/AMvSVfds9NVsZ+reuNWK48xr7r9oYP
SAb+kigb0BRpQv4cophcsfvm7rHkc+BSyhymzJoSSLzI4Ed7G3Y6FySDK78KajoB
Y9NJudmMI4UuvXM+8o7+hmngdh5l84GLyQEeIiSEeEmlDaZb4gNJgtgRzzcL6+lD
dnBRrs1bUwrsi76kzJJMGxUaMn29qAaJMpNcfSSyyxkanXocXXqYdWF/yjkP38m+
C/3aR4reuKwFVQ7v+AWAhsv2pSzIRGGMRdOqHl0P7sJ8bObm7wR/5PAQFirf7IkI
LOQNN3pYoPMIxkrjISlsOUxrt7aUKPsrCyYWC1XNyhk8
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:06 2026 by rpki-client