Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/3ueobkuqCRrYHcS_Ra615Z2wF5U.roa
File: 3ueobkuqCRrYHcS_Ra615Z2wF5U.roa (raw, json)
Hash identifier: K0AzKxQwm7htko0KmC5TywH8R8BPhkqCaEM5jSmKm3g=
Subject key identifier: DE:E7:A8:6E:4B:AA:09:1A:D8:1D:C4:BF:45:AE:B5:E5:9D:B0:17:95
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019BFFC68928AF73FF47F5DB1F5EFCBEC8E4
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/3ueobkuqCRrYHcS_Ra615Z2wF5U.roa
Signing time: Tue 27 Jan 2026 14:05:59 +0000
ROA not before: Tue 27 Jan 2026 14:05:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 92.118.88.0/24 maxlen: 24
92.118.89.0/24 maxlen: 24
92.118.90.0/24 maxlen: 24
92.118.91.0/24 maxlen: 24
92.119.200.0/24 maxlen: 24
92.119.201.0/24 maxlen: 24
92.119.202.0/24 maxlen: 24
92.119.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:c6:89:28:af:73:ff:47:f5:db:1f:5e:fc:be:c8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 27 14:05:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dee7a86e4baa091ad81dc4bf45aeb5e59db01795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:9a:a0:67:9f:e4:8e:50:60:3f:38:6d:a8:
fd:21:a4:31:8b:9d:c4:8c:5c:f3:9b:50:66:97:be:
9c:89:80:17:03:15:30:01:c4:89:fe:2a:73:88:51:
91:66:4b:d1:43:8a:23:3c:f1:3b:16:a9:18:ec:3d:
b5:f8:68:dc:51:e2:d3:13:0f:5a:12:a1:84:c9:60:
79:b0:c0:d8:d8:a4:6c:5b:bc:40:b4:0b:1e:5a:12:
27:ce:af:53:7b:7d:3a:c6:3f:23:92:50:4f:97:3d:
28:2e:4e:b1:6a:d8:72:47:4e:6f:b8:e1:8f:af:58:
39:0d:37:9a:66:9c:50:bc:64:7b:22:2b:07:b5:f2:
62:c6:67:ca:0c:5f:af:6e:b2:c8:1b:c1:26:88:e5:
e7:26:10:e3:c2:06:6d:7e:a8:7c:1d:16:c8:2b:76:
a6:9e:3b:3e:b2:8a:f4:71:10:9c:ae:f6:32:36:96:
ec:c9:cf:97:65:61:74:23:6a:43:68:6d:48:50:39:
02:80:1a:c0:06:07:60:c3:9e:62:ae:2a:7f:9b:5d:
0f:cb:c6:e8:49:4a:89:8c:56:17:46:56:52:75:5f:
52:51:b4:cb:5c:04:77:62:69:85:2f:7a:bc:c8:fc:
e7:52:52:fe:37:6f:57:37:39:fc:ba:0e:fb:a1:17:
88:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E7:A8:6E:4B:AA:09:1A:D8:1D:C4:BF:45:AE:B5:E5:9D:B0:17:95
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/3ueobkuqCRrYHcS_Ra615Z2wF5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.88.0/22
92.119.200.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:a8:cc:9a:8c:cd:bb:59:6b:93:11:17:34:7a:60:00:bb:76:
36:2d:7f:6c:56:d7:07:1f:1a:03:6b:99:91:0c:8f:3e:f4:d9:
e7:42:b2:c2:e3:26:70:82:06:c7:93:99:02:cd:83:d0:f5:40:
7f:1a:36:62:00:38:ac:cb:37:c0:89:36:4b:18:01:b7:52:08:
bf:44:8d:12:1d:e4:21:e4:c8:a3:c0:9b:7a:4a:93:29:72:c3:
92:4b:71:43:8d:a3:4e:8d:3f:50:41:6f:4b:54:49:08:2a:cb:
f8:41:62:aa:ec:92:67:8a:c0:e9:77:56:66:af:2e:d2:71:28:
20:e3:1f:34:41:e5:2c:6e:c6:f1:c0:79:bb:68:60:0a:5b:a3:
68:94:7a:a5:73:1f:06:6c:09:1e:13:64:4c:9f:a8:03:c1:f7:
01:1a:b0:5d:6e:c1:b8:6d:16:53:d1:61:df:b1:1e:a0:b9:81:
d1:10:af:06:1f:28:be:25:00:9c:b0:76:4e:4f:38:23:61:5f:
e8:56:53:08:4e:37:57:00:4d:f7:37:90:f0:fb:ef:e0:71:50:
f6:3a:57:69:f5:d9:6e:c6:8b:45:1f:4e:20:9e:3f:ed:ff:5a:
7f:71:da:e8:9c:96:54:a9:e4:aa:1d:08:59:59:66:a9:ca:23:
13:fb:5e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:18:04 2026 by rpki-client