Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/0y3BSLlk43QtrfUoNgk-X73r4Lw.roa
File: 0y3BSLlk43QtrfUoNgk-X73r4Lw.roa (raw, json)
Hash identifier: tEO4G8BHLgq+raaH5EwqIJrUEIOFZC3cQgG+JNY95JI=
Subject key identifier: D3:2D:C1:48:B9:64:E3:74:2D:AD:F5:28:36:09:3E:5F:BD:EB:E0:BC
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 019C759E4658CD744D67F3E555EF8D308FF0
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/0y3BSLlk43QtrfUoNgk-X73r4Lw.roa
Signing time: Thu 19 Feb 2026 11:17:12 +0000
ROA not before: Thu 19 Feb 2026 11:17:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214673
IP address blocks: 92.62.118.0/24 maxlen: 24
178.251.232.0/24 maxlen: 24
193.143.69.0/24 maxlen: 24
217.180.14.0/24 maxlen: 24
2a11:4880::/32 maxlen: 32
2a11:4881::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:9e:46:58:cd:74:4d:67:f3:e5:55:ef:8d:30:8f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Feb 19 11:17:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d32dc148b964e3742dadf52836093e5fbdebe0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:3a:8a:fd:c2:a4:bf:40:9d:11:5b:6f:12:
f4:b6:a3:56:de:95:1c:a4:c0:a1:88:89:25:42:3f:
7b:66:ac:19:7e:c1:b3:05:45:cc:53:27:bb:65:f0:
f9:c0:f4:26:0e:9a:b1:38:9b:49:e6:b0:df:b0:d6:
e5:22:91:ff:6d:cf:c8:57:87:97:c2:75:d6:bb:3f:
94:7a:c1:17:98:70:b5:dd:aa:7a:1d:cc:81:50:e3:
26:63:1f:27:51:7f:cf:dd:05:d8:40:11:95:80:aa:
25:c4:2d:78:c0:c2:a1:0b:d9:b8:28:5e:13:a3:b0:
b6:f6:91:3a:8b:85:cd:a7:79:12:48:8c:36:d9:7b:
2c:e7:c3:59:80:38:bc:0f:e3:cb:60:44:2b:1e:1a:
4a:1e:b7:f3:3c:34:9b:ae:5e:41:ce:5c:68:3f:4d:
43:88:1f:75:62:25:de:8d:70:b4:de:4c:c3:eb:81:
84:4d:80:9c:7b:d6:ff:95:98:24:49:41:d9:6e:23:
6a:38:b3:eb:56:98:7e:b2:8b:79:0e:30:89:ff:92:
15:58:53:67:45:51:a9:6f:a2:74:6b:14:6b:e7:f3:
07:2c:27:1f:f2:af:25:58:b3:27:b3:33:a7:ba:95:
e9:53:d4:15:82:74:fb:df:50:50:56:01:50:19:6d:
cb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2D:C1:48:B9:64:E3:74:2D:AD:F5:28:36:09:3E:5F:BD:EB:E0:BC
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/0y3BSLlk43QtrfUoNgk-X73r4Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.118.0/24
178.251.232.0/24
193.143.69.0/24
217.180.14.0/24
IPv6:
2a11:4880::/31
Signature Algorithm: sha256WithRSAEncryption
85:24:6f:de:5f:e7:d0:09:e0:23:e3:4f:4c:c8:f7:95:b9:13:
a0:90:ca:23:a2:0d:c1:0f:1f:61:25:78:26:a1:b9:b0:7f:c8:
07:80:98:ab:61:dd:84:8c:3e:73:e2:0f:a6:38:64:db:e4:d3:
2c:e5:f0:b7:2a:ac:3b:ff:cf:6c:8d:7b:69:f9:e9:cb:34:3e:
d6:36:6d:12:f8:cc:75:fd:c6:5b:bd:6b:8d:93:a5:e4:52:37:
23:67:7d:a2:ef:b6:1e:e8:22:b0:e1:01:8a:de:a4:68:24:c9:
cf:e2:77:13:2f:f7:bf:ee:f4:8e:9a:c5:27:c1:84:9e:e9:88:
24:d7:92:cd:8e:b1:a6:2f:14:8b:05:34:75:ec:bd:1d:39:17:
5a:9e:4b:e5:54:2a:90:28:c1:78:f4:fc:f0:3c:c1:2e:4d:21:
8e:b3:4c:16:7c:5c:84:5e:e5:42:46:c4:8c:a1:5c:da:07:fd:
34:c3:e9:97:79:4d:f6:08:bc:ea:8d:06:1a:e8:06:81:1c:fa:
b0:cb:81:b3:04:8b:4d:7d:00:19:ee:af:64:be:40:54:31:3d:
17:a1:e0:f9:2b:57:7e:42:c9:b9:98:43:40:80:37:1e:4f:9e:
af:bb:cd:57:b4:96:0e:b6:dd:3f:69:90:87:ef:30:b8:d5:65:
2a:e2:fc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:21:39 2026 by rpki-client