Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/PpfIHCD22AUayAWPFxeE0m6hL9o.roa
File: PpfIHCD22AUayAWPFxeE0m6hL9o.roa (raw, json)
Hash identifier: tEQKGH709CVuan0YOwHt1iqyxRmhemh2Iabk8KfvabM=
Subject key identifier: 3E:97:C8:1C:20:F6:D8:05:1A:C8:05:8F:17:17:84:D2:6E:A1:2F:DA
Certificate issuer: /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial: 019D47B6D53121BD595230438AC244766048
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/PpfIHCD22AUayAWPFxeE0m6hL9o.roa
Signing time: Wed 01 Apr 2026 06:24:17 +0000
ROA not before: Wed 01 Apr 2026 06:24:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60840
IP address blocks: 92.241.13.0/24 maxlen: 24
92.241.16.0/24 maxlen: 24
92.241.22.0/24 maxlen: 24
92.241.23.0/24 maxlen: 24
92.241.24.0/24 maxlen: 24
92.241.25.0/24 maxlen: 24
92.241.26.0/24 maxlen: 24
92.241.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:47:b6:d5:31:21:bd:59:52:30:43:8a:c2:44:76:60:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Validity
Not Before: Apr 1 06:24:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e97c81c20f6d8051ac8058f171784d26ea12fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e6:c5:ef:86:65:36:eb:fa:66:c4:fd:84:6f:
2d:4f:03:f6:c6:0b:60:a6:33:f5:41:47:47:11:1e:
06:cc:da:29:26:d9:37:1b:e7:58:77:bc:2e:de:60:
5e:0e:99:8f:de:d2:f3:d3:93:d3:73:1d:8e:3c:37:
0f:99:ed:84:c7:bf:11:7a:6e:21:d0:36:4a:ae:19:
4d:fe:9d:c0:7b:32:07:59:e5:8a:c9:7d:d4:ed:db:
78:a5:a5:81:97:50:72:64:a6:4c:ba:65:bc:7b:8a:
b2:a9:4d:3a:cc:c9:d5:86:ba:1e:92:46:10:0c:a8:
d6:7f:d3:cf:6c:b8:1b:69:31:f0:cd:00:e7:0f:2c:
97:36:90:1f:33:33:f7:ea:af:e1:95:d7:1d:95:cf:
16:59:58:44:3c:62:30:2b:2e:8b:77:b3:29:06:1e:
5a:47:76:b0:38:6d:ce:bf:99:10:f7:e5:93:82:ad:
5c:27:c4:cf:7f:c1:93:38:6c:37:3c:77:2f:0b:d6:
1b:1e:7e:b2:08:2e:fd:3c:39:cd:b2:f1:00:40:b1:
54:ba:f7:3b:27:71:77:af:3f:a5:0f:5b:79:06:28:
35:d3:fc:91:0b:85:ff:73:dd:f2:47:13:72:6d:c6:
23:fa:d7:8d:b8:41:01:7a:e5:01:fd:a7:27:4b:6b:
59:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:97:C8:1C:20:F6:D8:05:1A:C8:05:8F:17:17:84:D2:6E:A1:2F:DA
X509v3 Authority Key Identifier:
keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/PpfIHCD22AUayAWPFxeE0m6hL9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.241.13.0/24
92.241.16.0/24
92.241.22.0-92.241.27.255
Signature Algorithm: sha256WithRSAEncryption
09:52:5c:2e:a6:8c:41:5e:1b:5f:41:d8:97:2d:1a:31:30:83:
ec:6b:67:12:a9:59:f1:d4:5d:4f:a5:fc:2f:1a:bc:fd:a7:a4:
0e:e7:07:c4:66:08:6f:c4:be:94:dc:12:61:0e:eb:13:7a:62:
18:38:c4:f2:9e:9d:36:af:4a:31:f5:9b:50:39:4d:fd:f3:a3:
29:9f:9e:87:4b:b8:ca:d8:d5:19:6d:21:d5:b2:29:a0:3b:29:
c9:54:ca:63:46:fe:3d:3f:38:09:cf:7a:0d:c0:5e:8b:17:4a:
81:ff:66:3a:81:9d:12:e6:18:5c:05:4a:a6:31:21:79:ef:fa:
0f:95:1b:8e:c8:55:5b:6f:b2:5c:df:50:b9:97:da:be:11:f0:
71:39:8e:45:a0:c5:f5:f1:12:54:52:f0:93:59:cc:69:d6:68:
e3:83:b5:ea:44:5f:de:1b:61:69:52:4d:c4:dd:a6:1d:ad:0e:
8c:f1:c4:f1:b7:36:84:9e:0f:e2:13:b7:75:e3:05:bb:a7:e4:
64:d7:fa:f4:87:f2:89:32:f5:fd:ee:c0:65:4c:19:e6:19:bc:
2f:ab:bb:d7:7c:fa:0d:0b:14:f2:a9:d9:f5:5c:44:32:03:e4:
1f:ca:db:87:40:d9:61:4a:ec:a1:a6:f6:34:db:97:81:f3:1c:
a7:4f:25:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:19 2026 by rpki-client