Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/8JbX4W9CpZR4sp8oXbshsMu3qhg.roa
File: 8JbX4W9CpZR4sp8oXbshsMu3qhg.roa (raw, json)
Hash identifier: hCHQyL16C72+1THFmVb/zaNecTBJgYxVKSF0WwCJuaU=
Subject key identifier: F0:96:D7:E1:6F:42:A5:94:78:B2:9F:28:5D:BB:21:B0:CB:B7:AA:18
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 019B7EA6A51DEDA2D48C2D4F08F2C046DE52
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/8JbX4W9CpZR4sp8oXbshsMu3qhg.roa
Signing time: Fri 02 Jan 2026 12:20:09 +0000
ROA not before: Fri 02 Jan 2026 12:20:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44185
IP address blocks: 92.60.48.0/22 maxlen: 24
185.91.200.0/22 maxlen: 24
2a01:b200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:a5:1d:ed:a2:d4:8c:2d:4f:08:f2:c0:46:de:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Jan 2 12:20:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f096d7e16f42a59478b29f285dbb21b0cbb7aa18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a3:6f:50:fe:bb:80:66:44:3f:ec:3c:e1:2c:
28:81:2b:3d:50:9b:3e:91:4c:df:d8:59:64:f0:30:
44:a3:c6:fd:20:0c:ad:c8:fe:4d:a7:13:9f:1f:e9:
aa:f2:b4:d3:80:b3:91:57:9a:e3:c9:b4:09:5e:cc:
6c:98:83:c6:71:3d:10:09:42:06:24:24:64:74:f2:
13:2b:e5:62:f8:bd:52:9b:02:96:83:8f:82:4d:4c:
c9:0d:1b:24:10:db:45:c1:2f:8c:85:6d:5d:b2:b6:
96:3d:c3:13:1f:de:fa:43:d4:dd:af:46:d1:9c:cf:
a4:c5:68:5f:f2:0f:1a:2d:6a:3b:3d:e1:e7:b1:55:
69:3a:76:53:49:9d:ee:72:8a:a4:9d:a1:81:ea:45:
6f:f3:f4:78:ad:8c:5d:62:48:fd:1f:f7:df:ee:7d:
d4:1a:c3:08:18:77:0d:e1:80:1b:d0:55:d9:2c:be:
d5:93:f5:15:a6:54:3f:91:2b:fe:5f:19:ca:12:7f:
2b:7b:ff:89:ef:b2:d9:9a:49:83:43:38:48:17:62:
16:be:dc:8e:5c:bf:b7:b4:9b:5a:cb:19:83:44:b7:
be:c9:44:12:c8:ea:4a:b4:46:20:8b:f1:32:f7:69:
da:e9:d8:35:b0:35:9d:1a:c5:9c:aa:77:9a:c2:aa:
c9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:96:D7:E1:6F:42:A5:94:78:B2:9F:28:5D:BB:21:B0:CB:B7:AA:18
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/8JbX4W9CpZR4sp8oXbshsMu3qhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.48.0/22
185.91.200.0/22
IPv6:
2a01:b200::/32
Signature Algorithm: sha256WithRSAEncryption
31:d8:ec:b2:17:f6:f3:43:25:de:bb:0a:48:fd:0c:fd:d5:34:
00:b6:7d:47:94:b0:fc:ff:a6:17:25:85:db:e8:20:a9:3e:35:
26:41:aa:99:45:e5:8b:6c:d7:78:e7:3c:f2:06:07:03:5e:6f:
90:59:a9:fd:3c:64:f5:dc:99:3c:d9:a2:c6:b4:fb:30:64:b5:
ae:9d:f0:db:7c:7e:5b:5e:06:11:24:2c:22:35:38:75:dd:13:
12:d6:b6:4e:38:5b:fe:c3:53:d3:b9:54:f6:c9:84:19:23:bf:
cf:92:35:c5:a8:7c:95:bc:b6:e6:b1:3f:b7:b4:05:83:74:48:
53:2a:25:a8:c5:35:c6:80:f6:28:5a:4a:da:04:22:e0:3f:df:
b6:76:a6:5a:4e:7e:1f:3f:1b:8a:d5:ba:58:e2:98:4a:e4:36:
43:53:ad:00:8e:fe:e5:cc:8e:d3:af:41:cb:0e:82:8a:30:ba:
6b:db:96:4f:98:66:28:77:f7:a1:e8:e6:84:42:df:17:cc:9c:
dc:51:ae:03:a1:b6:4c:4f:56:60:69:74:5b:ad:7c:0c:8f:e9:
e8:d5:1c:c0:99:fb:3c:51:d2:45:cb:a4:bd:0a:0a:41:e7:ec:
66:8c:8a:9a:03:1b:f5:1d:09:a5:70:6d:08:f6:93:45:c1:7f:
62:b8:08:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:11 2026 by rpki-client