Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/J9cICFFeUPnuZ3yzA1KgrAZGx84.roa
File: J9cICFFeUPnuZ3yzA1KgrAZGx84.roa (raw, json)
Hash identifier: 9RH36o0oO3f56TRJm7j5nPq0jLwEjtVFzvQY0/8VQxQ=
Subject key identifier: 27:D7:08:08:51:5E:50:F9:EE:67:7C:B3:03:52:A0:AC:06:46:C7:CE
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 019EB62B2D94DF62C948BA3DB116BE8522EA
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/J9cICFFeUPnuZ3yzA1KgrAZGx84.roa
Signing time: Thu 11 Jun 2026 10:12:23 +0000
ROA not before: Thu 11 Jun 2026 10:12:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51847
IP address blocks: 86.109.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:2b:2d:94:df:62:c9:48:ba:3d:b1:16:be:85:22:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Jun 11 10:12:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27d70808515e50f9ee677cb30352a0ac0646c7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:41:aa:42:43:71:63:51:8c:50:44:04:98:d2:
fd:77:6c:80:4c:78:26:02:73:d0:62:c8:3c:cd:5a:
01:ff:87:03:ff:41:05:ca:f3:db:01:42:c7:84:f2:
7b:1c:52:94:09:b1:ad:75:c3:c1:f4:a2:b4:71:cb:
16:7d:b3:67:ab:d4:17:39:7f:d6:fa:57:ef:4d:20:
ca:f4:6b:c1:fd:e8:9b:c0:11:55:05:4c:22:b6:19:
45:59:9a:be:c6:c3:94:95:58:a6:81:0a:27:75:5a:
74:f6:52:50:e8:6d:7e:58:0a:48:ce:9b:0d:67:ca:
f5:6e:22:85:64:2f:10:fa:08:c0:cd:43:05:41:d4:
25:ed:c4:00:d8:c6:f6:92:e0:fc:57:05:8e:67:b7:
f0:3a:8d:bc:f6:9a:88:97:c2:dd:04:b8:ed:3d:a9:
07:e0:d6:4a:ac:35:f9:16:c2:e0:ed:d1:ba:62:c8:
3a:d2:30:5a:fb:25:6b:2f:cf:68:eb:0b:41:2c:29:
15:64:0b:1c:29:dc:25:c7:12:41:e5:94:7a:a3:bc:
d3:6d:65:e1:fc:b9:35:76:e7:92:4e:1e:d9:92:f4:
0c:68:8a:30:9a:40:02:fc:a1:db:f8:7e:d3:6d:e1:
00:54:8c:bd:ae:d9:e2:a4:a1:b5:08:29:dc:c6:c3:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D7:08:08:51:5E:50:F9:EE:67:7C:B3:03:52:A0:AC:06:46:C7:CE
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/J9cICFFeUPnuZ3yzA1KgrAZGx84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.78.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:53:7e:7f:e1:e3:d2:11:db:0e:7a:74:93:d6:68:f9:37:08:
05:e2:49:9e:6b:94:3a:c4:d5:f7:52:86:e9:01:4c:24:99:bf:
8e:a0:ea:1e:ff:30:19:1e:ed:b3:83:58:5a:d0:8a:e3:cd:b7:
70:a3:c5:d6:97:ec:e4:72:25:76:86:2f:2d:93:4f:21:e8:39:
f7:d9:e7:22:71:1b:cc:48:22:8e:ce:07:37:92:94:1d:e0:0b:
6e:f7:49:27:b0:2a:7e:56:ed:f3:24:c9:91:26:8e:4c:24:f2:
d1:df:8a:d0:c3:f9:8a:55:da:95:e5:37:a0:94:88:4f:13:59:
18:97:b3:56:78:17:9d:52:f8:84:05:ff:73:37:ea:a0:3d:48:
5e:03:56:7d:a3:d3:99:5e:d9:8c:92:98:54:e7:92:93:b5:ae:
a3:ca:46:a9:fe:21:84:af:2f:60:b8:72:f8:29:99:c9:59:b8:
10:e0:f6:59:b3:1c:a8:54:75:ab:1e:25:8c:36:62:f8:32:91:
40:ae:97:60:d8:c4:07:0c:ad:a8:f7:f7:37:62:94:24:cd:ca:
fb:c1:ed:81:ed:02:5f:f9:9b:51:af:b7:43:79:09:1f:bd:91:
75:98:89:d2:d7:30:c8:38:5f:a9:84:6e:10:de:48:02:f4:19:
c8:13:b6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:39:06 2026 by rpki-client