Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/92dvUhQEGiWXRaTViQRtHZCdqKg.roa
File: 92dvUhQEGiWXRaTViQRtHZCdqKg.roa (raw, json)
Hash identifier: N0TyPFF4qTvjNw3r6SPGjuKKlCPFiBROsnTGXGM6CaM=
Subject key identifier: F7:67:6F:52:14:04:1A:25:97:45:A4:D5:89:04:6D:1D:90:9D:A8:A8
Certificate issuer: /CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Certificate serial: 01A0F79CC958AF41D364D2A0224D197B433F
Authority key identifier: 20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/92dvUhQEGiWXRaTViQRtHZCdqKg.roa
Signing time: Thu 01 Oct 2026 13:17:22 +0000
ROA not before: Thu 01 Oct 2026 13:17:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207147
IP address blocks: 185.204.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:9c:c9:58:af:41:d3:64:d2:a0:22:4d:19:7b:43:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Validity
Not Before: Oct 1 13:17:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7676f5214041a259745a4d589046d1d909da8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:c6:df:bb:53:ce:47:cc:6d:a9:bb:16:68:
c6:1a:56:45:d0:dc:03:76:77:0a:af:ab:c2:26:10:
0f:9e:a8:fa:56:d3:97:17:c3:c3:e5:28:73:fd:a9:
19:eb:bf:43:cc:11:b6:75:3b:64:a4:cd:0c:06:a0:
04:ef:aa:32:11:33:23:f9:ff:0e:c8:8d:6f:e8:d4:
0e:e1:f6:f6:60:9c:52:49:ed:e5:25:8c:fc:a3:6b:
6e:a5:63:86:b1:42:bc:e4:4f:15:1a:50:37:55:23:
2e:8f:da:e4:a7:58:3b:33:9b:f1:40:bc:b5:95:52:
9c:96:3f:ad:ea:14:c6:83:06:b6:c6:8a:56:5f:20:
f1:ac:0b:8e:67:48:2b:b8:7d:ac:9c:08:7b:1d:9e:
15:c1:99:24:76:4c:ae:ad:dc:3c:e0:e7:30:08:15:
42:c0:b2:90:d3:ad:fb:5f:36:43:0b:33:ac:45:80:
5f:f5:45:af:8c:46:01:74:e9:f4:d5:bc:13:69:7b:
24:37:87:1a:c6:7f:80:1f:81:fe:50:dc:92:59:3f:
03:76:13:0f:6c:3d:66:15:76:35:c3:c3:45:c9:9e:
53:df:d5:d3:ea:c9:f1:62:20:2e:f5:d9:e6:18:c1:
12:a4:b6:3d:5f:b7:85:6f:22:2f:6c:b6:01:d5:31:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:67:6F:52:14:04:1A:25:97:45:A4:D5:89:04:6D:1D:90:9D:A8:A8
X509v3 Authority Key Identifier:
keyid:20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/92dvUhQEGiWXRaTViQRtHZCdqKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.188.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:ff:ed:0a:db:80:73:43:09:44:be:2d:ab:c7:95:5e:8b:e7:
a7:c8:84:d4:54:e7:57:fe:a0:d1:72:e7:d9:58:38:7d:03:e3:
29:66:67:78:39:95:ca:1c:29:6a:fa:bb:94:a5:2b:44:14:b6:
29:2e:de:bf:17:ec:02:ea:a9:1e:ce:58:be:61:22:49:66:63:
3c:6a:ec:b6:5c:cc:38:0f:ee:92:9d:f7:69:44:0b:ae:48:a9:
7e:fb:cc:61:83:91:76:0b:1a:9a:9d:db:06:2b:e6:47:ac:4a:
a5:d7:1f:6e:9a:b7:74:2c:c5:b2:df:5f:b8:15:05:5d:44:05:
78:40:ff:10:fb:46:2c:02:ee:c3:e5:66:d7:70:a7:51:d2:86:
8a:a9:96:bd:89:0e:f0:cb:ae:96:97:3c:f7:fd:91:db:ae:20:
e7:bf:49:8f:44:c5:d2:5c:e7:07:a3:2a:f1:c4:98:d8:82:cb:
ad:c4:62:71:18:ac:05:43:24:91:6e:52:a0:46:e1:cc:42:09:
22:d6:2e:da:0f:82:28:05:be:72:20:2b:8b:43:c2:49:e3:a5:
75:8f:2f:eb:f5:96:2b:4f:ef:ff:73:14:f5:ba:7f:60:04:25:
cf:1a:a4:39:13:6b:08:94:54:90:37:e3:0d:1c:78:e7:72:86:
e4:21:bd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:43:06 2026 by rpki-client