Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/fYCn4v8iFHoElnhPm0C9SUJygw0.roa
File: fYCn4v8iFHoElnhPm0C9SUJygw0.roa (raw, json)
Hash identifier: NaE7YkLP9K4FMPCq8fK6cLrMNnOJGZccxSrQ3P0JIpA=
Subject key identifier: 7D:80:A7:E2:FF:22:14:7A:04:96:78:4F:9B:40:BD:49:42:72:83:0D
Certificate issuer: /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial: 019B7B35C2755D15BDD48226B0CD7DBEE907
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/fYCn4v8iFHoElnhPm0C9SUJygw0.roa
Signing time: Thu 01 Jan 2026 20:17:59 +0000
ROA not before: Thu 01 Jan 2026 20:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48767
IP address blocks: 92.42.97.0/24 maxlen: 24
2a07:1a80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:c2:75:5d:15:bd:d4:82:26:b0:cd:7d:be:e9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Validity
Not Before: Jan 1 20:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d80a7e2ff22147a0496784f9b40bd494272830d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b1:a8:f7:8d:ea:6b:38:dc:97:0d:a0:4e:85:
43:cc:c6:7c:9e:5c:0e:b0:30:78:76:6e:c3:98:ea:
5c:21:da:6e:fe:a0:2d:0f:d5:56:c8:00:8a:c1:12:
e0:88:17:2e:cc:2c:f1:64:cb:54:13:ae:70:02:37:
69:35:2a:8e:e5:0f:0a:21:04:ba:15:c0:73:60:9c:
ac:50:ca:63:ba:4f:ac:5b:84:fc:17:f1:ce:ec:dd:
03:d9:b1:66:34:00:bc:01:d7:09:0f:d1:f1:6e:81:
51:b0:83:32:dc:df:74:2b:a8:fc:52:9e:b2:08:96:
ba:6b:cc:3d:69:cd:f7:7f:fe:23:7b:f1:74:f8:b9:
99:27:34:3b:78:48:da:1d:38:6a:82:d1:0c:b4:f2:
0f:bd:1f:50:cb:2c:8a:d3:d8:75:55:7f:8c:9c:ce:
23:44:4e:5a:cf:36:af:64:93:1c:76:31:a0:21:c6:
e1:ad:eb:81:12:23:2f:b6:02:2c:ae:9a:29:dc:4f:
1e:ed:ef:c5:52:55:d1:32:7c:63:d4:a7:20:77:06:
a0:be:34:d5:e6:fc:00:df:7f:c2:79:90:c9:8d:83:
5f:09:db:93:22:91:0c:a0:b3:c6:b7:51:60:b8:1b:
74:4e:09:2a:56:c5:12:f5:ee:fd:6b:da:18:2d:56:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:80:A7:E2:FF:22:14:7A:04:96:78:4F:9B:40:BD:49:42:72:83:0D
X509v3 Authority Key Identifier:
keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/fYCn4v8iFHoElnhPm0C9SUJygw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.97.0/24
IPv6:
2a07:1a80::/48
Signature Algorithm: sha256WithRSAEncryption
78:50:27:2a:91:98:7f:37:a5:29:e0:53:75:3c:22:67:08:bf:
8a:8d:9f:ae:08:a0:2d:fa:da:ea:c8:89:83:01:6e:bd:f9:44:
cb:20:8b:57:b6:bf:0b:a4:db:67:f3:c0:b5:58:5c:d3:fb:c7:
fc:52:1c:96:43:68:f8:de:4c:45:02:08:77:4f:07:4c:47:7f:
af:54:8f:05:23:b0:53:67:8c:1c:f3:cc:e3:8f:a2:c1:c8:47:
11:2d:28:37:8b:dc:be:b6:43:42:77:46:69:4c:22:ca:f3:8f:
9f:23:6c:a7:dc:35:e8:da:eb:70:ac:e5:d3:5d:33:5b:58:bf:
94:a9:8d:76:6b:f8:3e:95:27:a4:b4:51:7c:fb:a0:16:17:d0:
d8:0c:71:52:e7:fa:07:ab:f8:83:8f:86:61:f0:53:43:c7:c9:
90:aa:b8:9e:5b:0d:56:ca:0b:45:bd:1c:16:fa:aa:83:5f:97:
14:5f:c3:af:13:f4:23:e8:29:88:54:78:3b:47:12:74:9f:4a:
3e:bf:9a:4b:a4:08:79:bf:14:5b:46:75:50:d6:87:11:2a:2a:
32:9f:96:71:8f:82:10:41:50:a7:bb:d1:4e:ac:65:f5:69:6f:
10:87:a9:5b:95:3a:1a:b5:7f:f4:84:a6:fe:d4:0a:d7:b4:54:
44:fe:bf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:32:04 2026 by rpki-client