Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/1-UQfPeP2Hp2kHg0OiYvIdbub_7g.roa
File: 1-UQfPeP2Hp2kHg0OiYvIdbub_7g.roa (raw, json)
Hash identifier: I98ISNyguLUFVm8aiR0qBsZTLT8A2B3NKke2YTAXtF0=
Subject key identifier: F9:44:1F:3D:E3:F6:1E:9D:A4:1E:0D:0E:89:8B:C8:75:BB:9B:FF:B8
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 019D9060009BAC495ADB596E02C5613C276C
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/1-UQfPeP2Hp2kHg0OiYvIdbub_7g.roa
Signing time: Wed 15 Apr 2026 09:01:43 +0000
ROA not before: Wed 15 Apr 2026 09:01:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212706
IP address blocks: 104.171.140.0/24 maxlen: 24
104.171.141.0/24 maxlen: 24
104.171.142.0/24 maxlen: 24
104.171.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:60:00:9b:ac:49:5a:db:59:6e:02:c5:61:3c:27:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Apr 15 09:01:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9441f3de3f61e9da41e0d0e898bc875bb9bffb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:01:84:9d:a2:9d:56:3a:b8:31:7f:38:52:
4f:7f:b9:fc:16:0b:2a:00:9f:8e:1e:dc:ae:95:a3:
57:4a:e3:a8:97:ef:d2:41:a0:b7:a7:a1:19:b1:7e:
ee:d9:a3:c9:f8:9c:fb:65:35:99:3a:e6:73:ec:2e:
b9:96:6b:8f:96:be:9c:45:29:db:34:91:d8:85:8a:
9a:9d:c4:22:a2:5b:e0:15:aa:b4:da:24:4b:8e:b6:
bc:c6:a4:08:76:36:02:ee:b5:02:28:09:2b:77:e4:
fa:bc:4a:a1:5f:e7:86:e8:01:1d:d9:ef:16:8c:54:
ed:81:91:3c:18:8a:56:59:dc:14:04:dc:d2:53:5e:
81:e7:35:a9:6d:9d:57:bb:86:5f:f4:98:2d:e0:76:
3d:f3:bb:38:ca:60:b4:28:6c:7c:a1:9f:a2:51:e9:
08:8d:3d:02:f4:9d:a8:d3:73:47:75:ed:0b:b3:75:
1a:d9:6c:d3:6a:2b:3d:01:a4:25:fb:59:27:7d:df:
31:d9:1e:73:17:61:c3:db:96:60:c7:51:63:56:e2:
1a:cc:74:34:86:06:41:23:9c:9e:2c:11:ff:5b:ce:
7a:ac:64:3e:b2:8f:ae:46:b7:81:62:06:a4:96:15:
64:fb:09:34:1e:1a:61:98:06:50:40:79:62:1b:8d:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:44:1F:3D:E3:F6:1E:9D:A4:1E:0D:0E:89:8B:C8:75:BB:9B:FF:B8
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/1-UQfPeP2Hp2kHg0OiYvIdbub_7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.171.140.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:a8:ba:91:7e:15:3d:d3:bb:76:62:02:b9:53:11:9b:f5:f8:
e4:1f:ab:0d:d9:86:ee:ee:e0:32:34:bb:bb:2c:2b:33:82:3e:
fc:c3:83:38:bb:a3:f0:88:a1:07:e6:ed:96:91:11:88:b1:ff:
70:ba:53:02:af:ff:46:6a:58:cb:82:21:06:f4:32:24:1f:9f:
53:6d:f4:17:36:d1:d7:8d:30:35:19:4f:49:ea:1d:8a:a0:f0:
8a:c7:63:33:4d:4f:d3:75:eb:df:86:66:d0:b9:19:1a:5b:de:
84:c0:ed:aa:8d:1d:70:3f:3e:bb:75:ef:1d:3b:85:72:98:49:
63:ec:92:52:3a:2c:37:e2:3e:e8:ea:13:4c:85:96:b6:cd:63:
0f:40:1f:09:e6:9d:b0:d3:a4:dd:66:83:1e:00:96:94:da:58:
34:ba:a3:94:50:e2:18:b3:41:8f:39:fd:10:c6:e5:83:d0:1c:
50:6e:2d:0c:dd:68:50:1c:00:79:db:24:3d:1e:c0:3a:99:e4:
01:57:a6:86:c5:1d:8f:98:3d:db:9d:e3:43:e7:75:e2:fb:39:
f7:70:ec:20:b2:6d:2a:d0:0e:3c:24:dd:8d:ec:51:1c:bf:4f:
73:d1:aa:da:d3:91:06:0c:03:5b:58:fd:d5:41:94:cc:0f:52:
b7:f0:3d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:04 2026 by rpki-client