Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/Piv3x5GjdFWYogfJry-sQL2JX-U.roa
File: Piv3x5GjdFWYogfJry-sQL2JX-U.roa (raw, json)
Hash identifier: 2ZYAqvuqxNoPqFzul2MyF+P3n7KAI2Js6FxsXshtYjc=
Subject key identifier: 3E:2B:F7:C7:91:A3:74:55:98:A2:07:C9:AF:2F:AC:40:BD:89:5F:E5
Certificate issuer: /CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Certificate serial: 019C8D2D11EA40ED2EB77806C5E7FE0D8461
Authority key identifier: E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/Piv3x5GjdFWYogfJry-sQL2JX-U.roa
Signing time: Tue 24 Feb 2026 01:04:26 +0000
ROA not before: Tue 24 Feb 2026 01:04:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212721
IP address blocks: 45.92.72.0/24 maxlen: 24
45.92.73.0/24 maxlen: 24
45.92.74.0/24 maxlen: 24
45.92.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8d:2d:11:ea:40:ed:2e:b7:78:06:c5:e7:fe:0d:84:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Validity
Not Before: Feb 24 01:04:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e2bf7c791a3745598a207c9af2fac40bd895fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:ea:c9:c5:17:1b:11:8e:8d:c0:2f:ac:e0:
d6:f7:42:0f:0b:03:82:76:6c:b8:61:6b:a0:c8:9e:
0d:d6:f2:3b:12:43:2d:b0:90:af:22:55:03:d7:4c:
60:8a:aa:74:d7:6d:44:fe:a3:dc:ca:2f:48:ad:1d:
45:17:9a:d2:fe:4d:36:a1:1c:dd:03:ae:92:8e:07:
fc:d4:9e:30:2c:0a:ae:ed:d3:a5:d7:54:4e:ca:a8:
2c:56:f9:7d:ba:37:e9:1f:60:4f:f0:00:c0:06:03:
43:27:d3:48:3b:7c:a0:ef:c2:91:aa:42:71:c9:bf:
2c:dc:ce:87:fc:98:6d:63:85:40:ea:69:cb:32:9f:
73:34:17:eb:a4:25:e4:60:b1:37:52:27:da:08:0c:
e9:d0:f3:3a:3c:e9:81:5e:f1:20:4f:04:f2:d0:ee:
59:e3:68:2f:b4:0b:8f:d5:26:9f:cf:50:cd:a1:a9:
fb:5b:a2:5e:70:99:74:f8:bb:45:6f:d0:24:ac:91:
b4:25:1c:d4:ad:29:ae:d7:f2:88:db:97:bf:d5:15:
bf:d8:55:2f:2d:a0:6b:9e:aa:99:47:7f:b6:05:41:
0e:9a:be:ad:24:1f:61:7c:ea:ac:d9:d3:cf:78:5e:
68:d7:d7:82:17:bf:2c:43:e1:84:79:52:fe:13:f8:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2B:F7:C7:91:A3:74:55:98:A2:07:C9:AF:2F:AC:40:BD:89:5F:E5
X509v3 Authority Key Identifier:
keyid:E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/Piv3x5GjdFWYogfJry-sQL2JX-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.72.0/22
Signature Algorithm: sha256WithRSAEncryption
66:ef:00:33:3d:d9:15:0d:f2:57:39:f5:40:5d:7d:8c:25:78:
13:48:07:c9:87:3b:35:b0:76:8b:96:ee:38:20:4c:b1:5f:35:
14:72:1a:ff:f9:a9:e1:d7:e9:da:ef:40:5c:5a:81:af:4e:75:
85:91:a5:89:d7:8f:b9:ea:bb:70:da:59:3e:cd:dd:3a:56:66:
1a:43:aa:c3:f5:cd:01:1a:cd:2f:5f:c9:da:0f:4a:dd:cd:99:
1c:57:13:29:a5:91:19:ce:26:06:0a:aa:1b:06:c8:91:7d:3e:
75:ba:8c:73:4d:33:d5:bb:57:75:d0:52:e8:43:01:71:0a:93:
8e:bf:78:c4:03:ac:e2:07:90:34:02:78:a9:00:b1:f7:7c:69:
ca:8a:08:53:d1:4f:da:4b:d0:c6:2b:91:1a:a7:45:58:81:3d:
89:75:c6:8b:72:8a:45:f9:9c:de:a4:ef:f5:30:5a:91:4e:d6:
36:e4:d9:b7:30:84:aa:98:8c:db:72:52:1d:bf:97:60:13:24:
82:33:9d:57:a3:a2:57:35:7f:ac:b5:d1:ec:86:20:8d:38:bf:
a1:58:ad:f8:dc:0e:a5:0e:10:07:7f:14:d5:09:da:72:86:1a:
7a:0d:90:5d:92:a4:4e:65:bd:1a:4d:4a:af:92:28:97:74:32:
8c:17:90:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:39:57 2026 by rpki-client