Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9BGOZ9tCiEGl3s0085XUNy7ZpVs.roa
File: 9BGOZ9tCiEGl3s0085XUNy7ZpVs.roa (raw, json)
Hash identifier: IrILVJBEUaMTcwv5crJPQfzWCoHe/6epSkEEPIJ8LDo=
Subject key identifier: F4:11:8E:67:DB:42:88:41:A5:DE:CD:34:F3:95:D4:37:2E:D9:A5:5B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D68D769C5D1218B614AF017E8FB699D01
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9BGOZ9tCiEGl3s0085XUNy7ZpVs.roa
Signing time: Tue 07 Apr 2026 16:47:20 +0000
ROA not before: Tue 07 Apr 2026 16:47:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53107
IP address blocks: 144.31.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:d7:69:c5:d1:21:8b:61:4a:f0:17:e8:fb:69:9d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 7 16:47:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4118e67db428841a5decd34f395d4372ed9a55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:9f:19:ca:c3:2c:f9:1c:2c:b5:d4:f7:26:
c9:67:3d:dd:45:51:ea:4f:b6:6a:45:58:9d:07:fb:
5b:30:8f:e3:e4:1a:34:55:9f:2d:80:51:4a:6a:b8:
ca:08:7f:29:69:b7:8d:e9:55:b3:e9:e3:db:41:d2:
71:b3:a7:99:b1:7f:b4:4b:2b:7f:a6:86:4f:ff:d3:
53:05:e0:0a:d0:d9:94:08:ca:c6:f9:b8:19:e8:8e:
0e:ea:8d:92:97:d0:81:c5:02:a5:95:e0:38:94:53:
a9:ef:cf:6d:b7:24:00:4a:46:5e:08:e9:8b:06:e3:
10:d8:0c:61:53:10:06:c1:c6:4c:c3:ac:d0:13:00:
7c:ca:3f:50:64:0b:1b:07:85:d4:21:1d:df:a6:0b:
e7:47:d7:bd:f0:14:02:12:af:c3:13:49:96:55:e4:
25:b3:db:d7:2e:7f:2b:1a:84:27:35:1e:b1:15:d6:
97:61:f4:7c:d5:8f:58:8c:15:91:1d:f7:e1:9b:16:
9b:91:30:02:c2:59:0a:af:e5:07:d8:99:7d:32:79:
5b:ad:e2:76:3c:e2:6e:86:25:64:0f:d5:2b:7d:b0:
44:22:3e:52:ad:6d:3f:f7:74:8e:b7:74:71:2c:ac:
28:77:6a:de:58:97:a1:be:78:9f:1f:74:40:dd:62:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:11:8E:67:DB:42:88:41:A5:DE:CD:34:F3:95:D4:37:2E:D9:A5:5B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9BGOZ9tCiEGl3s0085XUNy7ZpVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.32.0/24
Signature Algorithm: sha256WithRSAEncryption
58:34:57:bd:3c:16:62:bf:bf:68:e4:74:55:52:17:14:fa:f9:
7d:e6:b5:ce:f6:4e:af:ec:1c:4f:f7:ab:44:a6:0f:13:79:bf:
83:15:07:0f:c5:04:d7:55:a2:c3:33:bb:4c:72:cf:f2:c8:0a:
b8:04:7f:2a:51:92:20:e7:20:05:e7:02:e8:77:01:f5:6d:f6:
38:39:bb:3a:6f:15:3d:d1:dc:96:c7:3b:78:e2:3b:92:f3:23:
7d:80:af:cc:9d:9b:da:cd:ba:15:8f:48:d9:de:5f:82:da:01:
b0:25:a5:b4:17:4f:f4:97:73:9c:07:6e:fe:3e:e1:07:92:7a:
db:26:7e:50:cf:46:b6:a0:45:26:df:2d:eb:e8:b0:54:b8:84:
90:f1:c4:01:4f:97:0b:a9:35:0f:6b:91:34:aa:18:86:4c:40:
0b:89:92:58:d3:78:d7:b9:a5:42:2e:12:cd:ea:58:4d:eb:c2:
f9:24:f7:e4:d7:e6:7e:9b:f5:b8:a1:58:72:28:4a:98:5e:f4:
7e:f7:d1:15:10:a7:95:19:eb:56:5b:40:9f:f1:f8:06:30:88:
7d:63:f0:8b:c2:f5:da:40:c6:78:22:73:07:18:41:3c:53:02:
b5:04:8d:a2:55:f4:68:cb:db:7d:ef:11:5a:f0:cf:af:b0:91:
1b:25:e4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:09 2026 by rpki-client