Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/0uqpwshspN_7gFWrYvv8lmOXA9Q.roa
File: 0uqpwshspN_7gFWrYvv8lmOXA9Q.roa (raw, json)
Hash identifier: a2JZhYSu2ezMQoqUjQBdO43pPgiEd8O3NrnrVq3fVUs=
Subject key identifier: D2:EA:A9:C2:C8:6C:A4:DF:FB:80:55:AB:62:FB:FC:96:63:97:03:D4
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019C4D454BC019A31917D187C2CDDEBD8484
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/0uqpwshspN_7gFWrYvv8lmOXA9Q.roa
Signing time: Wed 11 Feb 2026 15:15:12 +0000
ROA not before: Wed 11 Feb 2026 15:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 93.92.19.0/24 maxlen: 24
93.92.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4d:45:4b:c0:19:a3:19:17:d1:87:c2:cd:de:bd:84:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Feb 11 15:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2eaa9c2c86ca4dffb8055ab62fbfc96639703d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:d1:53:4d:9b:d3:df:ee:cf:b5:ce:13:f7:
ab:e8:cc:c8:07:9b:6f:d5:87:db:f4:ec:a7:42:df:
6b:94:d6:b2:87:94:4e:1a:cb:6e:51:5d:42:ca:04:
26:9c:4b:65:34:75:36:44:e7:a9:99:09:e3:3f:15:
45:de:7d:6f:77:38:5b:43:94:bf:5c:9e:75:f0:ff:
ea:d9:c3:e3:80:c1:57:6d:cc:bb:56:f0:51:29:35:
44:28:4d:65:d6:e4:45:cb:7a:ac:63:da:aa:82:f0:
4c:33:76:02:dc:62:58:d2:3e:fd:26:24:40:93:a9:
4b:71:13:f2:97:f7:b2:42:cc:13:61:93:52:c2:17:
59:85:df:7d:2b:c9:bd:66:57:10:55:b8:9f:2c:df:
7d:b9:f9:c4:39:3a:4d:44:58:87:9f:a6:25:70:67:
01:bf:98:4e:6f:c6:36:e7:e5:6b:ad:91:5a:0b:c3:
a5:e2:f9:14:0a:da:38:76:54:1d:ba:f7:95:3a:30:
28:ac:3d:4a:ae:38:9c:27:5d:e9:7d:43:3e:0b:31:
4a:0f:a4:19:25:a2:a3:0e:ff:3d:6d:e9:8d:e6:62:
f3:e9:70:82:7a:93:42:eb:5b:3c:06:28:5a:01:5f:
dd:98:bc:44:42:05:69:40:f0:3f:fd:1a:3e:86:77:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EA:A9:C2:C8:6C:A4:DF:FB:80:55:AB:62:FB:FC:96:63:97:03:D4
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/0uqpwshspN_7gFWrYvv8lmOXA9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.19.0/24
93.92.21.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:05:8e:9a:1f:1a:69:c2:9b:d9:23:4f:b6:74:68:5b:ab:d6:
db:a4:5f:ea:bd:2b:ad:79:a3:9d:7d:80:60:c9:1e:c7:61:74:
4a:37:20:da:44:54:76:50:a9:37:cb:29:0c:b9:56:91:35:00:
13:1f:02:c2:97:2d:af:95:ca:78:cd:24:02:d3:47:85:e7:95:
4d:de:e2:51:e1:e9:97:7c:04:88:1c:f2:ea:4c:77:d9:27:53:
38:12:49:e8:d1:9a:da:f9:3d:96:75:c2:3d:ca:57:16:0f:7f:
95:c9:da:14:1e:83:1a:f0:c0:d4:5c:9c:4d:ae:4d:9c:b9:e6:
55:03:3a:f5:76:fe:d9:4b:4a:3b:3a:1b:f8:f5:92:8e:18:d4:
a8:dc:73:ce:f3:29:ef:35:5f:ee:2c:57:6f:09:a3:93:ee:21:
77:7f:ac:ac:c6:5f:66:5f:7b:f3:55:da:86:be:2f:68:5d:59:
0e:88:46:d3:b7:96:e5:db:a8:e5:95:b4:56:66:96:44:da:14:
9e:d0:7e:1a:cf:6b:ec:21:d3:3f:ce:fc:15:b2:28:b4:87:3e:
c8:a4:91:b8:98:36:dc:7c:b5:33:44:19:28:7f:cd:8f:df:07:
31:60:f7:e4:6b:f3:83:d3:ea:74:ff:1a:d7:c0:96:2f:1d:de:
64:aa:ba:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:59 2026 by rpki-client