Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/zGoiKUlSyXdnycFm21G7hznXNsk.roa
File: zGoiKUlSyXdnycFm21G7hznXNsk.roa (raw, json)
Hash identifier: KVMW287TjTdo6OcUlQjMIIqxnAjDO6zfQ6VauLmb8qg=
Subject key identifier: CC:6A:22:29:49:52:C9:77:67:C9:C1:66:DB:51:BB:87:39:D7:36:C9
Certificate issuer: /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Certificate serial: 019EB0C1CCF727B1AECA2C97DA9D0C79ECA9
Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/zGoiKUlSyXdnycFm21G7hznXNsk.roa
Signing time: Wed 10 Jun 2026 08:59:11 +0000
ROA not before: Wed 10 Jun 2026 08:59:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219514
IP address blocks: 92.43.48.0/24 maxlen: 24
92.43.49.0/24 maxlen: 24
92.43.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:c1:cc:f7:27:b1:ae:ca:2c:97:da:9d:0c:79:ec:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Validity
Not Before: Jun 10 08:59:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc6a22294952c97767c9c166db51bb8739d736c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:ce:d0:c0:3b:f8:80:97:70:70:93:84:ba:
15:a6:86:18:4d:04:8d:c7:53:35:df:68:94:47:c5:
ea:78:73:b7:81:9e:5b:e1:5c:9d:a2:1e:66:46:9b:
9d:31:ad:cb:00:bb:fa:3a:17:66:bf:65:15:b7:a3:
bd:0d:0a:ca:93:4e:83:d0:52:98:be:e2:91:da:fc:
8e:a3:4a:0e:87:5e:11:8d:7a:9e:ef:fa:43:41:7a:
96:47:b0:ba:b1:7b:8e:5d:37:d2:c2:11:72:ce:84:
32:80:3a:ab:9e:1b:2e:db:a7:e8:94:ef:3d:9b:24:
96:b4:c9:46:20:7f:b8:be:c1:02:0a:f6:db:93:39:
94:4a:a6:87:d9:c9:c9:e8:f1:ab:7d:46:75:3b:c9:
3f:91:66:0c:0f:3d:11:24:7b:ef:76:7e:a4:8c:b6:
dc:73:5d:ae:af:b2:71:84:1a:bb:a3:b7:71:c0:37:
bf:f6:26:fe:e1:93:26:27:28:34:d7:53:ef:4a:57:
a3:48:e2:30:ae:67:11:af:82:41:e0:8a:df:cc:d0:
40:b6:e0:be:df:c3:e6:65:93:ed:e2:b4:6c:64:e7:
55:9b:6c:56:46:d3:22:23:24:0d:a9:60:97:e4:cf:
10:6b:04:77:28:74:3c:cb:0b:cd:09:10:37:96:95:
ee:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6A:22:29:49:52:C9:77:67:C9:C1:66:DB:51:BB:87:39:D7:36:C9
X509v3 Authority Key Identifier:
keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/zGoiKUlSyXdnycFm21G7hznXNsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.48.0-92.43.50.255
Signature Algorithm: sha256WithRSAEncryption
93:e9:cd:a3:0d:67:a4:40:73:bf:3f:82:3d:b1:83:05:fb:a5:
55:ea:7f:7d:cc:ab:d9:ac:28:e4:e7:88:3f:1b:1b:d9:32:3c:
8d:c7:a9:92:7b:8a:a2:1e:bc:ac:05:27:f5:6f:a2:db:aa:33:
fc:fc:42:9b:a1:db:f7:9c:46:85:5b:bb:88:f0:63:66:47:2b:
cd:c0:b7:3d:1a:8a:1d:b6:76:87:e1:36:fb:dc:a0:5f:4e:b3:
4c:c4:a2:e4:4d:f2:a0:c7:0c:df:2b:14:fe:ab:bb:ca:18:cd:
70:fd:aa:d8:5e:cf:7c:1a:26:58:9a:3e:63:8c:37:cf:43:09:
46:de:21:41:2a:e8:4b:17:83:92:46:70:38:30:ee:38:41:b8:
ba:76:02:39:15:5d:e6:fb:ca:96:87:c7:92:1a:a7:7d:a3:7a:
ac:d2:39:ab:57:ce:be:9e:c3:bd:ef:c0:84:a5:2c:51:82:0e:
94:7f:d6:ce:92:9b:38:fb:88:5e:d8:f2:55:16:ef:a4:9b:36:
9a:2b:e9:bd:2b:53:f1:d2:90:ad:aa:4a:ae:bb:be:8f:64:64:
44:9f:5a:5e:f3:ff:13:04:55:70:6a:d2:36:f1:00:32:53:a7:
6d:28:3e:83:eb:1d:d7:be:b5:74:b4:99:b9:4f:83:81:b7:c2:
ef:1c:21:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:03 2026 by rpki-client