Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/xA9wQK7FhZNKFk2Yx1BJl8C_iZI.roa
File: xA9wQK7FhZNKFk2Yx1BJl8C_iZI.roa (raw, json)
Hash identifier: /YX7ZCj/46xGv8r5M338uysfyyueDfTM3OjkYQhbm54=
Subject key identifier: C4:0F:70:40:AE:C5:85:93:4A:16:4D:98:C7:50:49:97:C0:BF:89:92
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 019B7DC9DFD3707EBD194CE9D9B9EFCB8D4B
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/xA9wQK7FhZNKFk2Yx1BJl8C_iZI.roa
Signing time: Fri 02 Jan 2026 08:19:00 +0000
ROA not before: Fri 02 Jan 2026 08:19:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207983
IP address blocks: 193.33.164.0/24 maxlen: 24
193.33.165.0/24 maxlen: 24
193.33.204.0/24 maxlen: 24
193.33.205.0/24 maxlen: 24
2a0f:640::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c9:df:d3:70:7e:bd:19:4c:e9:d9:b9:ef:cb:8d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Jan 2 08:19:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c40f7040aec585934a164d98c7504997c0bf8992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:e5:13:f5:8f:a9:93:20:01:40:5d:e2:4a:
9f:26:5a:d4:bc:f7:8f:1b:cc:b2:47:69:da:f8:40:
84:26:f5:7b:85:70:0c:6e:fa:69:12:39:e3:00:6e:
5b:0d:15:e6:a8:5c:7b:7b:81:b7:22:a0:46:5f:fb:
9f:76:38:77:9d:5d:ff:05:b6:5d:d8:ca:7d:24:95:
3d:42:5c:b5:95:4e:6b:0c:4f:dd:0f:37:37:47:a2:
6c:9e:54:d8:12:14:02:f4:7c:21:62:c4:71:e2:a0:
32:07:e2:85:09:b9:c8:b0:4e:c0:2b:8a:9b:c1:9b:
23:f1:f5:8e:30:29:f7:ae:7f:0f:f7:49:4c:f8:46:
e8:c0:cd:fb:02:fa:88:da:80:e0:4a:07:ca:2b:30:
fb:69:3b:5e:9a:50:25:7c:f8:b5:5e:8c:e5:6c:89:
f2:c7:e0:69:58:09:59:e3:3f:f6:01:3a:65:96:8b:
f7:47:da:f7:cd:0e:bf:e0:1f:b6:ab:23:9f:de:fb:
f4:bf:b0:76:21:9b:3c:da:ef:7a:96:66:b4:fe:9a:
10:af:28:9f:33:dd:52:7d:c7:3e:3c:ff:80:85:16:
9d:a2:53:e0:b8:6e:a8:f0:e1:57:1e:9b:97:8d:d0:
4d:85:e0:f0:03:c4:e1:33:ad:48:6d:f2:cb:a4:96:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0F:70:40:AE:C5:85:93:4A:16:4D:98:C7:50:49:97:C0:BF:89:92
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/xA9wQK7FhZNKFk2Yx1BJl8C_iZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.164.0/23
193.33.204.0/23
IPv6:
2a0f:640::/48
Signature Algorithm: sha256WithRSAEncryption
46:c9:d8:4b:27:f9:0f:2e:07:da:c3:b4:b7:af:6e:e6:a6:08:
cd:b7:ff:30:4c:1f:28:38:ba:e0:23:e4:b3:05:2c:80:09:ed:
50:8b:58:52:05:06:00:40:9b:d3:7f:9a:9a:76:8b:39:0c:4f:
67:f5:d3:66:17:69:ff:5d:1e:1c:f8:34:7c:5c:97:3a:1f:77:
12:d6:47:30:74:52:31:a3:17:fa:26:fe:8a:8c:a4:5c:4c:3b:
2e:c1:15:5a:21:24:bc:13:c4:5f:ec:09:bb:73:df:71:9c:c5:
9b:41:11:12:d9:f3:38:04:3e:cb:15:db:21:f1:06:59:61:66:
30:d5:4a:85:1f:3b:5f:ef:d3:09:47:3f:96:50:fa:9a:c3:e7:
9d:90:e5:55:f3:10:5b:ff:e0:01:f6:2f:8d:5b:08:8d:f4:63:
ba:02:9a:84:6a:f7:55:5f:05:03:55:55:80:24:96:7a:31:96:
bf:3c:56:ae:98:47:1e:cf:79:a2:76:c8:54:01:13:69:de:5e:
c4:8f:d9:27:f7:fc:93:7a:5e:7c:7c:e8:bf:48:d8:15:db:56:
7a:5a:2b:3e:50:d2:17:c9:d6:6d:b2:de:af:93:ca:a7:ea:a0:
d4:d9:09:e5:8f:0b:53:d1:5a:bd:52:c2:f4:2d:75:6b:96:fa:
8e:76:39:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:09:45 2026 by rpki-client