Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/O92NJ5Awv2BDng61oOd15HuLqPA.roa
File: O92NJ5Awv2BDng61oOd15HuLqPA.roa (raw, json)
Hash identifier: X8BuUjbEcw4gYt0kVOFHS871nwSuI6STGkEuR3rs+f4=
Subject key identifier: 3B:DD:8D:27:90:30:BF:60:43:9E:0E:B5:A0:E7:75:E4:7B:8B:A8:F0
Certificate issuer: /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial: 019D873B8D87097F11925900A84EBF8FD39E
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/O92NJ5Awv2BDng61oOd15HuLqPA.roa
Signing time: Mon 13 Apr 2026 14:25:20 +0000
ROA not before: Mon 13 Apr 2026 14:25:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200010
IP address blocks: 194.62.118.0/24 maxlen: 24
2a14:9401:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:87:3b:8d:87:09:7f:11:92:59:00:a8:4e:bf:8f:d3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Validity
Not Before: Apr 13 14:25:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bdd8d279030bf60439e0eb5a0e775e47b8ba8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:ac:ed:00:42:e4:15:ce:47:6f:73:30:ab:
1d:81:a7:2d:c2:63:c0:67:45:48:c8:2b:81:36:e6:
eb:70:c5:5c:ad:5c:83:92:82:69:61:f8:03:8b:9d:
87:fd:d4:3e:e7:d1:5a:e7:b0:b8:fd:cc:69:4c:e1:
72:22:a4:ea:dd:4a:d1:8c:16:17:23:79:30:76:5c:
5c:c9:93:94:36:db:77:48:5b:27:f4:48:92:0c:39:
62:20:ba:c1:92:4f:99:04:66:a2:62:ba:29:92:6c:
2b:fd:30:6e:12:b2:13:df:16:5c:b1:f9:73:e0:b1:
38:e7:7f:0e:6e:1a:ac:1a:cf:fd:4a:30:79:6b:06:
1e:df:4b:95:f4:33:0c:6a:52:d5:92:cc:ff:07:92:
15:92:cd:22:fe:d2:56:55:f1:f1:49:9e:94:7b:a6:
70:f5:4d:e2:f5:c2:a8:ba:74:eb:58:c1:da:a1:4d:
1d:8c:f4:cc:63:58:16:5b:7f:23:36:79:b3:6e:1f:
85:1f:bc:a2:91:9b:8e:8e:c5:17:39:49:a7:4b:03:
0a:31:39:9e:c7:7d:aa:dd:63:34:fa:48:c2:ae:32:
4c:fb:75:b2:99:a2:d0:25:e5:d0:27:45:8d:c8:67:
1e:f9:d8:af:e6:e6:d9:58:d0:9c:ae:e1:90:5b:38:
16:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DD:8D:27:90:30:BF:60:43:9E:0E:B5:A0:E7:75:E4:7B:8B:A8:F0
X509v3 Authority Key Identifier:
keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/O92NJ5Awv2BDng61oOd15HuLqPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.118.0/24
IPv6:
2a14:9401:8000::/36
Signature Algorithm: sha256WithRSAEncryption
31:f6:d8:df:d5:e9:07:61:f4:48:2a:50:6e:e9:27:4d:07:dd:
f4:c7:01:0f:87:12:45:6f:57:88:a1:fc:02:99:14:69:43:bc:
71:d4:f3:54:4c:a4:ca:25:a0:ce:8c:00:20:d3:ca:1e:fb:a6:
d9:15:cd:fa:69:b7:ba:9e:5a:9f:a7:77:8e:97:38:a6:40:5e:
d9:53:53:3f:5b:0f:74:c1:82:b3:26:10:f6:60:72:5d:8c:3f:
4f:b0:1c:b8:ab:5d:8f:6b:15:1c:6f:87:ef:ed:a8:40:e6:0f:
e6:06:be:ed:ba:9c:11:c5:5c:39:e3:63:fa:6e:f0:f4:f9:d8:
7b:be:68:05:88:1f:4c:27:d4:f6:f1:d9:43:19:4e:bd:3c:be:
67:83:87:2e:c1:4f:0d:7b:0b:10:79:e6:de:00:aa:ef:a0:e1:
5d:bf:23:17:b3:cb:bd:96:fd:a3:3c:6b:7c:14:63:d0:aa:8b:
61:1c:90:25:88:55:90:13:5e:7d:0a:87:b6:30:28:c9:55:47:
30:71:20:5f:9e:bf:1b:d2:47:9f:8b:cf:de:21:ce:f6:48:e0:
5e:49:fc:3d:a0:4c:59:72:fc:e3:b3:57:0e:7e:c2:04:9e:1b:
a5:c3:88:c1:a5:88:16:f9:72:d3:ba:10:1c:a7:49:22:ab:18:
2b:f2:af:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:56 2026 by rpki-client