Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/OrDMFmvYhqEppIVRoQx4tB-Rn3Q.roa
File: OrDMFmvYhqEppIVRoQx4tB-Rn3Q.roa (raw, json)
Hash identifier: 6waejzNPfHQOJeXXVEjkdoP8gRvVVQefnvBZa7ovi2I=
Subject key identifier: 3A:B0:CC:16:6B:D8:86:A1:29:A4:85:51:A1:0C:78:B4:1F:91:9F:74
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0ABFE0A28321B3B5337C0DFD750F31577
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/OrDMFmvYhqEppIVRoQx4tB-Rn3Q.roa
Signing time: Wed 16 Sep 2026 20:52:27 +0000
ROA not before: Wed 16 Sep 2026 20:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 92.249.62.0/24 maxlen: 24
185.254.55.0/24 maxlen: 24
217.18.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:fe:0a:28:32:1b:3b:53:37:c0:df:d7:50:f3:15:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 16 20:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ab0cc166bd886a129a48551a10c78b41f919f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:eb:11:7b:c7:3b:30:99:96:e8:ad:25:23:58:
a9:a7:8e:99:10:e8:a5:be:9a:e7:46:6f:4f:d2:9b:
bd:65:93:c2:94:1b:11:47:19:43:08:f2:f6:29:f0:
d2:5e:9c:a9:2c:f9:98:85:83:c6:ca:a5:61:d9:2a:
8b:96:2d:a8:1c:8c:f5:9b:d3:5e:15:a0:02:8d:41:
00:de:bc:2e:3f:36:25:ab:b4:b1:1e:7e:ce:d4:f3:
e7:91:31:26:60:a9:60:7a:8f:4a:f7:9e:80:5f:87:
7b:a1:6c:3b:8a:43:bc:5a:f7:8c:22:eb:5e:3b:a6:
4e:c7:3d:c9:a4:2a:d8:ed:bb:0f:8b:ef:51:9c:44:
a3:b5:30:47:ab:da:ae:77:c1:45:c0:5c:16:7a:9e:
39:3a:91:6c:2a:56:a7:02:9f:2a:df:2d:48:9d:b1:
24:4d:a1:f1:09:86:a6:e6:87:2b:a7:91:d6:64:1a:
18:59:07:0d:71:b3:d0:cd:76:6e:06:1e:36:bf:73:
11:08:83:c6:45:b9:df:56:3b:d1:5e:89:d3:9d:a1:
69:cd:8a:17:87:04:f7:96:53:34:99:1d:19:c6:7e:
f8:a8:00:a6:31:ac:22:aa:a5:38:ce:dd:f0:21:b9:
58:14:12:14:7c:b5:e2:b4:dc:01:98:32:95:b8:7b:
3f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B0:CC:16:6B:D8:86:A1:29:A4:85:51:A1:0C:78:B4:1F:91:9F:74
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/OrDMFmvYhqEppIVRoQx4tB-Rn3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.62.0/24
185.254.55.0/24
217.18.211.0/24
Signature Algorithm: sha256WithRSAEncryption
70:80:91:92:64:8c:2a:40:52:5a:9c:2d:f8:1b:a4:f1:58:ad:
88:1d:6c:38:f2:95:ea:12:f7:bc:b8:17:52:e0:0e:87:6b:25:
dd:c0:12:37:e6:50:27:2c:cc:dd:43:cb:d3:e1:4c:2f:b7:b2:
34:84:74:2c:6d:ad:45:7d:3e:15:08:17:80:fc:0f:b0:92:66:
78:2d:bb:1a:f4:6a:33:84:71:63:f0:90:48:2b:cd:b2:8f:41:
bf:a2:1f:39:be:41:7b:de:1e:b8:b4:fc:db:8c:30:40:df:5a:
5a:61:91:d7:db:f9:d7:c0:1e:49:22:cc:f0:54:35:86:06:3d:
7a:e9:a3:6c:af:ec:77:5d:71:c9:92:10:ac:3e:c6:4d:70:f3:
9b:90:ad:0d:16:9b:80:97:41:e0:7e:3b:2c:61:82:fd:f2:a5:
53:d3:e8:12:4a:b8:92:5c:68:e1:ae:d5:96:29:1d:4c:45:ba:
f3:a4:d7:93:73:f8:a7:58:04:7d:dc:f9:57:aa:f9:66:a0:e0:
bc:65:4f:92:60:dc:c0:60:5a:0f:48:93:df:62:75:96:41:0b:
cf:43:1c:b2:89:a2:56:34:62:e5:93:6c:46:6f:9d:01:f7:6e:
2e:4b:60:2e:38:87:5d:1e:fc:2d:a3:ba:54:45:69:e4:b1:5a:
68:33:43:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:33 2026 by rpki-client