Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/DEnwWvywXaQoWX5uv792ebbZYus.roa
File: DEnwWvywXaQoWX5uv792ebbZYus.roa (raw, json)
Hash identifier: UKmQiudj85vaQt2LZdYW4fQWF3MpXue2FudeO7Dr3eo=
Subject key identifier: 0C:49:F0:5A:FC:B0:5D:A4:28:59:7E:6E:BF:BF:76:79:B6:D9:62:EB
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 019FAA797498A98E5C4516A0B650DEE418DB
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/DEnwWvywXaQoWX5uv792ebbZYus.roa
Signing time: Tue 28 Jul 2026 20:45:14 +0000
ROA not before: Tue 28 Jul 2026 20:45:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.189.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:79:74:98:a9:8e:5c:45:16:a0:b6:50:de:e4:18:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jul 28 20:45:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c49f05afcb05da428597e6ebfbf7679b6d962eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:af:8c:39:ff:6c:57:2c:5d:04:57:e6:86:d7:
5a:11:f1:21:35:ab:4d:e3:cb:22:eb:0a:0a:2a:52:
b4:37:bf:a7:f6:e3:b2:7b:67:b3:d1:44:b8:a7:bf:
18:88:b6:19:3b:1e:83:f0:38:14:82:b0:d8:3c:7b:
66:db:fd:1f:2e:67:0a:d1:d0:94:6c:ba:ee:76:0c:
08:73:90:22:b0:9b:64:88:9e:45:92:77:e6:b2:69:
a9:e4:3e:18:19:a4:87:c0:9c:9a:6e:91:c9:f2:7c:
c9:60:17:aa:8a:34:e1:15:75:b8:a9:8c:ba:1f:e6:
bd:94:a1:52:af:d6:f8:19:15:fe:9d:33:74:40:cf:
d0:32:13:b3:a1:47:ea:91:4b:1f:7a:25:4b:0c:31:
44:c0:b8:dd:e3:33:78:fc:b9:b4:2d:b6:16:33:5b:
50:03:6e:ef:cb:ba:69:6f:07:ea:eb:4b:ec:8c:9e:
67:12:97:c1:74:ef:d3:4f:03:ca:52:7f:bb:ff:3f:
26:b5:a6:4c:e3:52:88:9a:80:b7:d1:da:d2:e6:c5:
b6:b7:bd:3e:d3:58:92:47:34:de:45:f2:d1:03:a6:
01:b8:20:48:cc:ff:7a:ef:b9:ea:60:1f:7b:4f:0c:
16:6b:32:82:bb:15:fa:03:5b:c2:ce:76:9f:03:05:
bc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:49:F0:5A:FC:B0:5D:A4:28:59:7E:6E:BF:BF:76:79:B6:D9:62:EB
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/DEnwWvywXaQoWX5uv792ebbZYus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.32.0/24
Signature Algorithm: sha256WithRSAEncryption
68:00:81:b5:27:9a:0e:df:b6:09:b3:6e:e4:6c:e1:db:5f:5a:
1a:3f:7a:8c:e3:2c:d4:12:4b:4a:e7:ae:84:68:7c:ae:ca:12:
48:98:cf:a1:ee:7f:e5:57:20:6f:8c:cb:00:eb:f5:7e:11:de:
92:2a:5e:b9:26:27:04:5c:41:3d:d3:d1:f3:5d:aa:6c:43:03:
24:3a:56:fa:c4:3b:1c:08:e7:6f:b4:be:ea:a0:b2:06:56:9f:
e3:d8:6a:94:63:f9:c7:02:fb:24:71:a4:75:52:6f:c4:04:74:
78:c2:0e:cb:44:41:a5:50:b1:6b:13:c6:fe:85:d8:9c:17:d0:
b0:32:66:22:a3:ae:dc:93:2f:4f:f1:b5:be:e5:60:4a:ac:da:
3c:a6:b7:50:f0:e5:55:86:51:96:77:f2:bc:3a:c7:85:7a:1b:
3a:f0:2f:05:98:86:e0:0f:a5:7e:82:e4:c0:9b:06:ba:f8:ad:
f7:00:66:9c:48:10:89:b7:cf:eb:bd:e4:16:f1:92:56:cf:08:
53:90:a1:5f:ea:e5:dd:c0:98:af:f2:93:02:b7:65:03:40:32:
2b:5d:fb:d1:ab:93:c0:18:0f:4f:c7:e7:38:f4:22:32:48:31:
a8:ad:c7:0d:b0:15:31:0b:27:33:f6:8c:48:45:56:9a:12:0e:
4d:80:48:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:05:28 2026 by rpki-client