Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/TV3P0s4uwtaFIK2WOUaoBJ-Xjrs.roa
File: TV3P0s4uwtaFIK2WOUaoBJ-Xjrs.roa (raw, json)
Hash identifier: 9BkM0T1n4z97DADL7bwyZNwxFvKQwjhmNhhGnIrdjHw=
Subject key identifier: 4D:5D:CF:D2:CE:2E:C2:D6:85:20:AD:96:39:46:A8:04:9F:97:8E:BB
Certificate issuer: /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Certificate serial: 019B7D5C2E1D8311E62BB5F55D85EDB289B3
Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/TV3P0s4uwtaFIK2WOUaoBJ-Xjrs.roa
Signing time: Fri 02 Jan 2026 06:19:11 +0000
ROA not before: Fri 02 Jan 2026 06:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44942
IP address blocks: 92.63.228.0/22 maxlen: 22
92.63.232.0/21 maxlen: 21
92.246.104.0/22 maxlen: 22
92.246.108.0/22 maxlen: 22
92.246.108.0/24 maxlen: 24
92.246.109.0/24 maxlen: 24
92.246.110.0/24 maxlen: 24
92.246.111.0/24 maxlen: 24
185.157.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:2e:1d:83:11:e6:2b:b5:f5:5d:85:ed:b2:89:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Validity
Not Before: Jan 2 06:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d5dcfd2ce2ec2d68520ad963946a8049f978ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:f9:fc:81:78:40:3c:3a:d7:36:d2:56:8c:
4e:20:ca:03:07:08:46:c4:e9:67:80:d0:00:aa:f8:
cf:5c:7a:89:2f:4a:84:3c:90:24:7d:32:db:09:d6:
bd:f3:6d:b1:82:d6:75:a3:cc:7e:4b:49:70:4d:e9:
17:30:37:bd:4c:b0:75:dd:45:df:05:88:98:30:91:
58:85:04:d2:5b:bb:6e:f8:f1:89:51:5c:b1:21:d1:
c8:2e:e2:8d:05:ae:55:51:bd:71:88:80:f3:49:0a:
92:40:82:a3:ef:e5:83:8d:0a:32:27:9c:f8:62:2b:
ff:aa:07:66:bb:85:6c:bd:ff:27:22:99:9d:30:41:
07:ed:ce:13:44:f0:5b:81:df:29:d9:97:f8:0a:c4:
be:e1:b8:fa:15:1e:59:7f:11:5c:72:e0:7d:0e:bf:
77:6a:32:cb:d4:55:f6:44:9c:82:ba:b2:37:d2:b1:
75:ab:98:b8:08:2c:92:10:3b:75:64:2a:e1:6f:55:
21:c2:5d:74:b3:02:73:7c:24:d8:d1:f6:04:03:55:
00:8b:63:bd:83:df:78:3d:7a:0a:71:e3:27:b5:1d:
7b:9c:ee:61:b4:83:54:71:5c:42:c1:b0:9d:4b:8d:
dd:10:a1:b4:96:63:14:66:3f:84:68:2c:c6:ce:74:
45:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5D:CF:D2:CE:2E:C2:D6:85:20:AD:96:39:46:A8:04:9F:97:8E:BB
X509v3 Authority Key Identifier:
keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/TV3P0s4uwtaFIK2WOUaoBJ-Xjrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.228.0-92.63.239.255
92.246.104.0/21
185.157.216.0/22
Signature Algorithm: sha256WithRSAEncryption
22:30:c2:98:5d:83:e5:22:46:59:2e:c0:89:83:5d:0a:4b:9a:
2d:22:17:da:75:b0:bb:ff:49:c5:d2:a9:a2:43:71:86:85:2c:
1b:61:09:4b:06:2e:e2:b8:54:cf:2a:b3:23:7b:7f:b8:0b:b6:
3e:f1:a2:ba:9d:b8:8b:77:32:b7:05:73:c2:53:2b:f8:45:8d:
83:e0:9e:a7:1c:d6:f1:ef:41:b5:ad:58:cf:e1:27:a1:82:b9:
eb:47:e2:78:fa:41:54:db:f7:20:f5:08:22:1e:3c:c2:ac:f0:
eb:da:89:64:71:de:cd:50:a7:80:ad:b0:80:c5:02:bb:41:12:
ea:8d:af:3d:5c:bc:f5:c3:4f:16:9a:86:45:72:05:31:f5:e8:
7e:e5:20:9c:c1:91:dd:c5:c2:4f:58:e5:4f:81:e4:37:1d:cd:
f3:24:66:99:81:34:a1:f8:58:b2:5d:78:71:9e:fb:e4:a7:76:
a3:1e:07:b2:6b:85:0f:59:36:09:83:0f:1f:32:9f:d0:7c:ba:
9c:1d:e5:aa:25:02:f7:9d:59:74:4a:0c:37:e3:7f:77:dc:61:
c0:51:05:cb:3f:06:23:98:2d:16:83:36:11:b6:4d:14:7f:e4:
88:6e:bf:cc:76:90:3b:84:33:29:a1:8c:f1:91:91:bf:8d:25:
fc:f8:51:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:05:12 2026 by rpki-client