Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/92O93VxDU4pUVWr7dnT1Y4KqdI0.roa
File: 92O93VxDU4pUVWr7dnT1Y4KqdI0.roa (raw, json)
Hash identifier: 27cPDTqD5XdPrxS6jGsrQqv1l0PeJCPzXimQBRdpqQ4=
Subject key identifier: F7:63:BD:DD:5C:43:53:8A:54:55:6A:FB:76:74:F5:63:82:AA:74:8D
Certificate issuer: /CN=a5541609cd947bedfc99125840030108a3f141c1
Certificate serial: 019D9B13D19F941FF9E602357426516A617A
Authority key identifier: A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/92O93VxDU4pUVWr7dnT1Y4KqdI0.roa
Signing time: Fri 17 Apr 2026 10:54:20 +0000
ROA not before: Fri 17 Apr 2026 10:54:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13274
IP address blocks: 176.102.190.0/24 maxlen: 24
185.210.158.0/24 maxlen: 24
195.42.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:13:d1:9f:94:1f:f9:e6:02:35:74:26:51:6a:61:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5541609cd947bedfc99125840030108a3f141c1
Validity
Not Before: Apr 17 10:54:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f763bddd5c43538a54556afb7674f56382aa748d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:ff:99:9a:fb:88:54:51:50:75:d3:18:db:
7e:a0:63:bc:0a:92:61:0b:f4:47:00:ed:5e:0c:7e:
30:d6:68:e5:9a:23:f3:41:6a:eb:a1:56:a6:f0:e1:
ee:74:18:e1:30:ee:e0:1b:bd:a3:af:9f:36:b2:85:
19:33:dd:ad:be:85:c3:23:f6:06:6a:c5:d1:b1:07:
9a:85:da:15:eb:39:2d:60:22:87:1c:99:bd:a1:f9:
c1:1d:dc:74:10:a3:c1:d1:3e:bc:f6:64:e9:f4:d2:
38:da:ba:ff:e8:c7:62:44:d8:3c:e9:d7:63:3c:62:
6c:97:3c:cd:c9:dc:ed:16:cd:4c:46:04:b7:bb:eb:
31:75:b9:f9:9a:d3:bb:04:cd:43:dd:f7:02:06:db:
d6:30:bb:d1:ac:28:65:51:a3:68:38:3e:5e:7f:6b:
96:fb:33:f5:89:25:2e:6a:ec:ab:16:e7:08:9e:63:
f0:b1:d8:12:69:0d:ca:3e:58:a5:84:7b:40:8a:c9:
a6:eb:cc:42:b4:f0:cb:b0:a3:4a:33:5a:25:51:1e:
ae:38:81:4a:39:6a:d7:d2:f5:d2:e8:d7:17:11:3b:
0c:e1:88:81:7b:4e:eb:e3:e0:07:da:c9:cb:3a:41:
ab:0c:95:6a:2e:83:e6:9c:96:a7:73:c7:51:02:b2:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:63:BD:DD:5C:43:53:8A:54:55:6A:FB:76:74:F5:63:82:AA:74:8D
X509v3 Authority Key Identifier:
keyid:A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/92O93VxDU4pUVWr7dnT1Y4KqdI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.190.0/24
185.210.158.0/24
195.42.249.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b0:04:c7:ca:7c:12:d6:66:05:42:95:34:a0:db:66:ae:d7:
d4:75:12:89:2f:7d:a8:9c:ff:d2:54:ce:6d:ed:08:cc:3f:56:
ee:1a:2b:b9:3e:a6:c5:de:c5:70:84:05:76:ba:46:9a:38:2c:
31:99:d9:e7:33:a3:f5:fe:53:33:f6:8a:3e:e7:c7:32:3d:24:
3c:c1:3c:82:8b:e2:e6:ea:f0:c3:11:57:ec:28:47:2a:65:93:
91:3f:72:2b:d3:a1:bd:8d:46:23:4c:d2:8c:bc:bb:16:04:83:
b1:1f:b5:1c:70:18:ae:dc:67:3f:73:ee:ed:2c:1b:52:b9:af:
63:af:86:82:cc:67:b8:19:22:a5:1c:0f:17:95:2e:66:9f:b7:
dd:22:3c:96:aa:71:a5:3e:f2:df:9e:b6:82:e1:5a:ab:f4:cb:
72:80:04:03:14:bd:7b:ef:03:e0:c0:d2:30:de:90:ce:c0:cc:
c2:17:30:f3:f0:9b:04:de:94:73:47:ba:20:23:67:cc:ff:9a:
8d:99:d3:24:b5:3c:09:e7:cf:88:b4:81:67:bb:09:d1:9f:61:
94:f6:39:6a:4f:7e:59:68:af:59:16:5c:d7:cf:ab:7d:43:5a:
b5:24:76:86:18:d3:db:19:54:18:59:94:4c:16:15:c9:10:5d:
9f:57:6d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:25 2026 by rpki-client