Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/HRsaNSH7K7gQIpvBegWGreESM_c.roa
File: HRsaNSH7K7gQIpvBegWGreESM_c.roa (raw, json)
Hash identifier: l8HiNYAa3uanY7zDmX7yurzSLByL+f17mBRuyOPffhs=
Subject key identifier: 1D:1B:1A:35:21:FB:2B:B8:10:22:9B:C1:7A:05:86:AD:E1:12:33:F7
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 01A0B3B82DE9CC9B963A3D5C75550E0CE266
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/HRsaNSH7K7gQIpvBegWGreESM_c.roa
Signing time: Fri 18 Sep 2026 08:53:07 +0000
ROA not before: Fri 18 Sep 2026 08:53:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219105
IP address blocks: 93.92.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:b8:2d:e9:cc:9b:96:3a:3d:5c:75:55:0e:0c:e2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Sep 18 08:53:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d1b1a3521fb2bb810229bc17a0586ade11233f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:1f:bc:d2:17:5e:36:4d:a5:63:4c:ce:4a:
23:ff:5f:d2:36:4b:88:75:0a:7f:f1:2c:50:ed:b1:
da:4f:ea:d6:12:61:3a:f8:f7:0a:6c:02:75:c9:e1:
9f:fa:2a:ed:cd:ef:ae:2d:31:0f:b0:16:24:79:f8:
b1:40:08:73:28:e7:46:52:c6:67:e3:02:36:41:2d:
be:09:6b:21:28:ad:08:05:39:32:45:20:ec:cd:d1:
f4:59:e8:ef:fc:46:0a:cd:8e:72:0d:9a:0c:a6:1f:
30:fa:00:90:2b:30:73:2e:19:7d:db:6d:17:d9:f4:
40:8b:47:52:41:17:70:33:15:a0:4c:1d:e9:58:dd:
16:62:ca:d0:93:79:89:ca:96:9d:9f:a2:eb:38:06:
be:b4:82:2b:81:b1:90:07:00:cd:5d:95:00:4c:8d:
77:49:53:da:db:4e:7d:e0:d6:38:d4:35:13:0f:48:
5b:2e:50:48:d3:9f:4b:7f:42:af:af:c6:71:2c:06:
65:57:2c:4c:e4:bc:0c:b1:c6:8c:df:f7:32:96:2b:
13:08:18:66:1f:dd:c0:80:93:93:7b:76:99:a4:dd:
18:a2:b9:24:2b:d7:57:16:8f:66:aa:e7:5e:48:a7:
bc:03:89:c4:b4:c7:57:6b:13:d1:9c:17:96:53:98:
70:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1B:1A:35:21:FB:2B:B8:10:22:9B:C1:7A:05:86:AD:E1:12:33:F7
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/HRsaNSH7K7gQIpvBegWGreESM_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.18.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:06:79:5a:d3:7b:d4:ab:ee:38:07:0e:8e:dd:94:72:7c:91:
8f:9a:f3:f4:aa:ac:82:e5:67:34:7d:57:c0:fb:4f:6b:df:d2:
38:17:7a:2d:37:e7:cb:50:57:03:a8:17:ec:37:34:f7:0a:19:
3f:12:3f:5a:34:12:68:61:2d:b1:82:c2:a8:e9:58:e3:6e:dc:
1e:1e:bc:67:20:ff:cf:5c:4f:68:e4:7f:3d:5a:40:cd:96:d4:
c9:e9:18:f1:02:b5:80:8e:f8:dc:ec:65:3d:d1:c6:9f:0e:1c:
47:94:56:eb:76:4e:f4:c5:03:e0:05:cf:63:ef:80:08:20:2a:
d9:68:19:3f:43:54:ff:18:4d:9d:59:c0:5e:b2:c7:a8:a9:15:
cd:15:35:29:30:a1:08:ae:4c:bd:18:d4:51:6d:ff:3d:e4:b9:
4b:d0:71:b3:84:ae:f9:bc:b3:9c:66:6d:5f:86:3a:75:13:43:
95:ab:51:63:f3:d0:33:1c:ce:41:61:2d:09:70:88:1e:76:eb:
3b:e3:32:ac:b1:3d:a2:08:c3:5f:d0:bc:76:4a:18:7f:37:c3:
5e:f4:51:6f:86:52:74:63:ba:e5:dd:ae:18:e3:ad:ba:57:e6:
14:df:c3:3d:89:ae:bf:72:79:4c:f6:c5:db:f8:99:6e:32:be:
66:17:2a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:58:12 2026 by rpki-client