Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/toC9TpCejZGoS5Aiy088ROsAylA.roa
File: toC9TpCejZGoS5Aiy088ROsAylA.roa (raw, json)
Hash identifier: A+HnAnljtqd9QqU3SU6STVhVY4cLg0aMMIYBL3Zi0nQ=
Subject key identifier: B6:80:BD:4E:90:9E:8D:91:A8:4B:90:22:CB:4F:3C:44:EB:00:CA:50
Certificate issuer: /CN=28748970546b6882eff9b738d70efe06c601c335
Certificate serial: 01A01D577BD501847B94CA34397761BBCC27
Authority key identifier: 28:74:89:70:54:6B:68:82:EF:F9:B7:38:D7:0E:FE:06:C6:01:C3:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHSJcFRraILv-bc41w7-BsYBwzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/toC9TpCejZGoS5Aiy088ROsAylA.roa
Signing time: Thu 20 Aug 2026 04:04:27 +0000
ROA not before: Thu 20 Aug 2026 04:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213802
IP address blocks: 195.242.189.0/24 maxlen: 24
2a14:8800::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHSJcFRraILv-bc41w7-BsYBwzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1d:57:7b:d5:01:84:7b:94:ca:34:39:77:61:bb:cc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28748970546b6882eff9b738d70efe06c601c335
Validity
Not Before: Aug 20 04:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b680bd4e909e8d91a84b9022cb4f3c44eb00ca50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:17:d7:11:f0:10:8a:b7:2b:3b:3e:f0:b2:
8f:45:01:f1:00:9b:7f:68:20:6a:c7:a7:8f:b4:a9:
12:b9:4a:2c:e8:8b:c2:31:6d:c5:1a:a0:3e:75:3c:
9a:6f:74:a9:38:5b:27:90:b1:41:00:21:1e:e6:d3:
ec:cd:1d:c1:75:68:93:7d:70:fe:0a:e6:a2:3f:b6:
1a:8c:a9:a4:73:9d:32:f3:86:a6:04:b1:c3:04:57:
b4:3a:a7:fc:76:30:da:f8:cb:dd:57:f4:b1:e6:20:
a9:62:90:67:82:3b:67:e7:d0:a1:e7:94:0b:bd:86:
43:25:f3:df:18:cd:d6:34:7f:ea:64:8d:f0:60:d0:
4b:47:2d:5a:8f:b8:e8:e9:de:07:7e:c9:a5:f9:28:
2b:6e:3e:ef:cc:e5:12:9b:4d:ae:25:27:9c:3d:7c:
e0:d2:4d:47:17:e6:f0:9e:38:8d:0e:66:a8:c0:b6:
3c:c3:b0:b5:4c:a6:9c:3e:37:43:cd:18:ef:0d:a5:
96:50:6a:ac:11:04:ae:0f:51:39:ff:4a:f3:51:bd:
e0:6f:c6:59:dc:b1:57:b2:8b:bf:8a:7a:68:08:83:
47:d1:fc:eb:76:a0:f6:b8:bf:49:95:1a:a9:c2:6b:
2f:b4:ba:5e:d0:98:d4:30:e0:9d:ee:e8:c9:a3:68:
05:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:80:BD:4E:90:9E:8D:91:A8:4B:90:22:CB:4F:3C:44:EB:00:CA:50
X509v3 Authority Key Identifier:
keyid:28:74:89:70:54:6B:68:82:EF:F9:B7:38:D7:0E:FE:06:C6:01:C3:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHSJcFRraILv-bc41w7-BsYBwzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/toC9TpCejZGoS5Aiy088ROsAylA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.189.0/24
IPv6:
2a14:8800::/36
Signature Algorithm: sha256WithRSAEncryption
71:e7:1e:ef:b1:94:9d:68:43:01:a6:8f:b0:fb:8b:98:5b:83:
e4:5c:b5:5c:7a:47:7b:f4:c9:50:cd:da:52:e1:87:77:a6:c8:
43:e5:8a:eb:08:a8:5d:1a:63:a1:b9:01:28:72:a9:f9:e5:64:
35:27:f4:b5:8f:3b:7a:18:d6:13:4f:22:8e:cf:19:4a:73:d7:
39:e7:51:54:b1:30:1a:59:84:e3:2d:82:02:99:f2:1a:e2:48:
ef:7e:25:94:8a:19:65:2c:71:6d:45:e6:e1:3e:3f:d5:4e:c9:
bf:97:eb:e9:ab:ef:1e:ee:d9:94:58:82:c7:c3:3f:eb:8d:d9:
de:c7:2e:a6:5f:da:c8:97:be:ca:19:0b:74:87:18:87:b0:20:
14:a8:73:08:cf:d3:f1:84:11:e5:5e:88:f9:41:f8:18:20:25:
50:d5:59:24:fe:e0:7c:36:d9:42:5e:e9:24:ba:61:bf:6d:f7:
f1:00:58:ed:7a:5b:87:98:66:f7:29:81:d1:86:b3:80:85:31:
46:ac:ab:9f:f6:b8:0e:97:9e:68:01:57:14:4a:ad:84:c2:21:
f4:03:7f:8a:04:7c:a6:d4:68:4a:f1:2d:9a:ce:e2:ca:e5:79:
82:24:79:37:b5:6f:de:c6:6e:01:60:f6:3f:74:4e:fb:ab:6b:
5d:0d:b4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:17:29 2026 by rpki-client