Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/jUmexGFaoOAw3tBMp-lAl_uGguM.roa
File: jUmexGFaoOAw3tBMp-lAl_uGguM.roa (raw, json)
Hash identifier: H359l1rebuuO42B7kkI63dGIEaR0UjiEOl9VIPFGCCg=
Subject key identifier: 8D:49:9E:C4:61:5A:A0:E0:30:DE:D0:4C:A7:E9:40:97:FB:86:82:E3
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 01A09F39FFB111FFCDE09949AD7F1C112FED
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/jUmexGFaoOAw3tBMp-lAl_uGguM.roa
Signing time: Mon 14 Sep 2026 09:22:53 +0000
ROA not before: Mon 14 Sep 2026 09:22:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206766
IP address blocks: 86.109.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:39:ff:b1:11:ff:cd:e0:99:49:ad:7f:1c:11:2f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Sep 14 09:22:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d499ec4615aa0e030ded04ca7e94097fb8682e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:8c:e6:89:22:12:75:7c:b1:23:d6:f1:20:
b4:f6:c3:40:9d:ee:66:61:58:01:af:78:64:56:51:
51:4a:46:ea:43:ae:db:90:04:24:58:13:5b:db:e3:
00:fd:e7:02:c2:0e:33:d1:39:2e:47:62:78:66:18:
d2:a2:a9:a3:2c:56:2e:6b:21:84:8f:f6:e6:de:59:
88:5c:22:02:0b:49:41:ce:bb:3f:01:a6:73:8d:7b:
3b:8e:dc:45:00:b3:0c:0c:1d:b7:ef:dd:51:24:78:
30:cb:3a:8b:6e:47:20:87:7f:50:c0:8d:90:a7:14:
fd:04:71:d8:ee:9c:71:9e:ca:cc:ca:62:3f:cf:a0:
60:64:52:ff:f7:38:e0:4c:44:87:80:b4:1b:e0:96:
74:48:d1:89:32:e8:d4:d6:fb:3f:20:39:ae:21:aa:
90:03:ca:f3:bb:17:ee:8e:c7:b4:ed:df:ea:52:12:
07:97:3d:29:6c:b7:3d:b4:f8:38:fa:a1:36:b9:f5:
ee:1c:f7:3c:a1:9f:c1:d6:92:98:3d:62:84:cd:10:
db:74:48:16:3c:26:13:1d:18:53:b1:fe:44:57:14:
69:e4:e1:3f:67:ab:53:d7:7b:31:94:45:6a:14:e8:
18:23:19:5a:77:e6:7b:f0:81:3a:88:70:67:c1:79:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:49:9E:C4:61:5A:A0:E0:30:DE:D0:4C:A7:E9:40:97:FB:86:82:E3
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/jUmexGFaoOAw3tBMp-lAl_uGguM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.78.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:5c:12:3d:7e:15:79:23:ba:da:f0:5c:af:80:5c:a4:da:a4:
f0:60:c0:a7:ae:6a:c0:85:2c:21:a4:9b:12:85:17:db:42:b5:
5d:43:f0:3c:80:7a:4f:8c:d4:19:51:70:6c:b8:58:3d:8f:6a:
02:bc:67:c4:5d:ba:5d:04:23:d2:6e:1c:00:fe:9c:e1:ed:ef:
e9:1b:9e:42:b5:d0:f5:03:cf:d2:d5:27:55:e6:3a:c6:9b:84:
10:84:83:6d:d3:64:58:4a:28:2f:27:ee:7d:2e:12:c1:6c:a7:
18:25:57:1e:34:0c:2d:cf:11:3f:fb:9f:2d:a4:1a:ee:8b:d0:
b6:34:8c:db:f8:d1:6e:fb:f6:34:e1:1e:e2:85:6b:6c:30:9e:
40:1e:3e:8a:7d:dd:73:e7:88:5a:f0:75:1d:06:b3:ca:58:c7:
8a:ab:1e:7c:bb:76:ac:01:73:f4:1a:23:7b:1a:6b:97:65:05:
23:40:30:33:e1:01:aa:e4:7b:c7:b1:71:e8:c7:da:94:84:63:
08:e2:8e:96:73:fa:3c:73:65:a7:4f:48:6e:0f:19:1b:f0:92:
d2:de:92:7d:19:07:39:c3:06:37:9e:2d:9e:90:bc:d0:47:66:
35:b3:03:e7:b4:d1:c3:9e:e5:27:ba:d0:85:b4:73:dc:1f:db:
cc:6d:59:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:29:51 2026 by rpki-client