Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/n9REwkhfEAGVBPXu1NeU8ckSw0Y.roa
File: n9REwkhfEAGVBPXu1NeU8ckSw0Y.roa (raw, json)
Hash identifier: /LBumHatcMFGiSJpi+D4CNDkH6MVAePa519MRpuWiWc=
Subject key identifier: 9F:D4:44:C2:48:5F:10:01:95:04:F5:EE:D4:D7:94:F1:C9:12:C3:46
Certificate issuer: /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial: 019B78344BFB9769FF418503EBA325B64657
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/n9REwkhfEAGVBPXu1NeU8ckSw0Y.roa
Signing time: Thu 01 Jan 2026 06:17:31 +0000
ROA not before: Thu 01 Jan 2026 06:17:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207853
IP address blocks: 91.210.152.0/24 maxlen: 24
2001:678:b9c::/48 maxlen: 48
2a07:b1c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:4b:fb:97:69:ff:41:85:03:eb:a3:25:b6:46:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Validity
Not Before: Jan 1 06:17:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fd444c2485f10019504f5eed4d794f1c912c346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:11:d0:2c:12:5b:48:78:bd:59:df:9b:de:
cf:fb:dc:9e:b9:43:87:2f:52:84:68:98:d2:96:f0:
e7:87:3a:b9:ad:b6:f5:e6:d1:5d:ad:2a:e8:ae:45:
a8:b5:e2:6d:48:c4:f8:3a:85:ed:36:4c:eb:39:eb:
9a:72:ea:78:15:a9:2f:c3:58:c4:a2:5f:41:55:10:
3d:e6:61:3f:be:81:dd:fb:34:c8:60:e1:8b:d5:96:
7f:c2:03:29:a5:02:5b:0f:a1:e2:65:50:e5:55:60:
9a:cf:a8:86:93:f7:52:fa:2b:85:c6:5c:ef:bf:1b:
45:62:1e:63:ca:e8:77:f5:5f:c4:e6:69:18:fd:9b:
d4:bc:06:6c:d0:1c:de:14:d6:e0:16:49:cb:90:d9:
3c:70:c9:5e:4e:a4:e3:8c:b7:2c:fc:8e:0e:83:17:
80:f2:88:85:4d:bb:f4:dc:d8:de:d0:e5:57:fc:ea:
44:0e:ed:c9:fa:d1:e0:84:2f:fc:00:97:9d:e3:42:
86:77:2a:c3:7b:e6:3f:f1:8d:dc:f7:e8:7f:9e:73:
e0:2e:37:88:94:f1:03:38:1a:21:9f:30:c0:64:83:
d2:67:a1:70:06:c9:b9:51:93:36:ae:9c:30:1c:97:
2b:a2:f2:d6:1a:0b:cd:5d:dc:49:11:c2:1d:ab:25:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D4:44:C2:48:5F:10:01:95:04:F5:EE:D4:D7:94:F1:C9:12:C3:46
X509v3 Authority Key Identifier:
keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/n9REwkhfEAGVBPXu1NeU8ckSw0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.152.0/24
IPv6:
2001:678:b9c::/48
2a07:b1c0::/29
Signature Algorithm: sha256WithRSAEncryption
55:b5:3e:d7:1f:10:97:fe:95:06:6b:08:b2:29:d8:85:a1:d7:
f0:84:d9:e2:5e:70:6d:04:3b:47:87:e5:c3:79:54:65:70:3c:
72:e1:65:44:1f:74:ac:ad:20:0c:e9:df:f7:f0:11:84:ab:f1:
b6:37:0f:ba:f5:a1:21:8f:6a:e5:37:38:17:46:40:69:77:24:
6d:eb:bc:f0:55:3c:50:f0:5a:20:25:3a:1f:77:42:bd:ee:0f:
3d:aa:4d:42:8c:70:fa:82:a0:6a:24:55:2c:26:3b:e5:e1:1c:
b3:84:81:e9:8e:40:68:1d:c0:68:2f:bf:57:4b:05:1d:0a:b7:
2c:d5:0c:1f:19:bd:e3:a0:70:be:57:ce:b7:5a:80:26:e7:b0:
bb:93:34:33:5f:4a:71:68:f4:78:89:0e:b4:1d:f4:2b:a5:83:
55:fe:5d:e2:2a:8e:b5:9c:fd:79:df:68:d6:cd:70:87:9c:aa:
2b:10:6d:36:f2:ca:a2:a1:bb:b9:b0:63:96:d9:95:d9:7a:02:
a0:cf:73:0a:7b:8e:ee:29:14:c3:c1:c9:81:c0:d1:90:e9:b6:
48:31:e7:7f:26:9c:f1:a2:eb:d8:1f:46:74:cc:da:5e:37:0d:
03:f7:a2:e5:96:23:7d:ba:27:0d:54:cc:27:b3:d9:84:56:d5:
20:43:b5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:02:58 2026 by rpki-client