Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/h4PdPRUr2Anv_vU5UfrkNJcM4HY.roa
File: h4PdPRUr2Anv_vU5UfrkNJcM4HY.roa (raw, json)
Hash identifier: TATC8ufc1q7pOSkRu+CLGTFfRQ25Z2gnPtf6/PuD2AU=
Subject key identifier: 87:83:DD:3D:15:2B:D8:09:EF:FE:F5:39:51:FA:E4:34:97:0C:E0:76
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019D6C0D8B49D04ED694DB1AE260D0F9C770
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/h4PdPRUr2Anv_vU5UfrkNJcM4HY.roa
Signing time: Wed 08 Apr 2026 07:45:20 +0000
ROA not before: Wed 08 Apr 2026 07:45:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204154
IP address blocks: 92.118.10.0/24 maxlen: 24
132.243.28.0/23 maxlen: 23
2a0c:5d00:3009::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:0d:8b:49:d0:4e:d6:94:db:1a:e2:60:d0:f9:c7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Apr 8 07:45:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8783dd3d152bd809effef53951fae434970ce076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2f:31:94:9b:fd:b5:19:b3:64:42:ec:d4:94:
d3:cb:72:6b:23:04:e6:47:b5:83:32:9a:47:03:d5:
34:7f:48:5c:23:1c:dd:26:6b:12:0b:15:79:6e:13:
d8:20:8e:4d:05:fb:22:41:61:eb:ab:77:67:83:77:
1b:cc:e3:81:d9:4b:3a:1c:37:c4:6d:1b:5f:04:95:
8c:3f:f0:85:b7:bb:66:05:09:0b:40:12:4b:9d:83:
a2:43:ce:26:c6:f9:57:9b:21:8d:cf:80:2b:46:76:
22:dd:35:77:f1:14:44:8d:dd:4e:5c:3d:ae:35:d8:
98:0a:14:8e:f5:54:90:d8:42:7d:90:b2:92:75:b1:
a6:08:9f:5a:4f:45:02:5e:57:9e:e6:92:28:1b:a3:
21:15:b3:2e:c4:ed:44:0c:e4:94:7a:3a:9c:d8:f9:
a6:b6:96:31:bc:05:57:f3:2e:45:3b:ea:2e:07:c0:
88:e1:2b:fb:47:19:b3:33:a8:cc:39:96:3f:31:b3:
c5:42:69:f4:ab:a7:56:7c:ed:ee:a2:68:07:c6:b2:
c7:dd:e2:ee:4f:c7:51:fe:e0:10:40:47:36:5a:51:
f2:af:ef:6e:90:de:83:af:6b:a6:e0:6e:6f:c4:c4:
f0:d8:d6:4d:3b:8a:6d:ea:7a:b5:5d:6d:76:53:bd:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:83:DD:3D:15:2B:D8:09:EF:FE:F5:39:51:FA:E4:34:97:0C:E0:76
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/h4PdPRUr2Anv_vU5UfrkNJcM4HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.10.0/24
132.243.28.0/23
IPv6:
2a0c:5d00:3009::/48
Signature Algorithm: sha256WithRSAEncryption
20:ec:2e:53:ec:2f:44:93:97:32:76:96:70:64:e9:fb:09:ba:
4f:1c:da:fa:f1:2c:c5:e3:de:e2:ad:46:56:29:c8:86:92:69:
de:11:2e:92:46:a6:a2:75:0d:32:36:2b:4e:f9:39:4c:7b:cb:
bd:0f:9b:fc:c5:d2:37:cd:57:a4:fd:25:4e:07:64:ed:fc:99:
10:88:4a:ae:5d:1f:0a:08:24:9b:0e:fa:d8:3e:7e:12:ea:e4:
99:84:46:0f:69:53:aa:82:8e:eb:87:d7:b0:18:c7:06:90:90:
15:02:5c:b6:dc:14:89:78:ae:ad:f6:cd:46:e5:29:5c:5a:6e:
ff:14:ad:59:ba:a3:be:8d:d4:ad:1f:49:1b:22:74:08:75:6f:
45:25:b2:dc:22:bd:7b:99:3f:17:33:cd:6a:c8:8a:67:b0:9c:
8c:4e:5d:b2:d7:a8:19:6d:5e:9e:dd:06:98:4c:be:bd:a5:2e:
1f:2d:35:60:04:5d:d8:89:f2:5b:c2:cb:e6:d9:06:4d:71:c8:
d1:5e:1a:89:c9:a1:fc:87:f4:51:37:e8:09:6b:b6:08:79:47:
de:d2:2d:d5:88:4b:54:61:f4:47:52:74:f7:ee:64:03:23:f8:
be:b1:ea:0c:7a:7b:5a:62:d0:c1:09:2f:49:cd:0b:e5:7d:38:
77:f8:98:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:53 2026 by rpki-client