Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/V6-lWwiSN3YZ_1Fg_iJqT1p7VC4.roa
File: V6-lWwiSN3YZ_1Fg_iJqT1p7VC4.roa (raw, json)
Hash identifier: i3ycFbVY9dPK7tSJSKbK9FY7bHTAq2RPB68f/mcwtHU=
Subject key identifier: 57:AF:A5:5B:08:92:37:76:19:FF:51:60:FE:22:6A:4F:5A:7B:54:2E
Certificate issuer: /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial: 01A09FD9D123C68F52F970960A585A0D043D
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/V6-lWwiSN3YZ_1Fg_iJqT1p7VC4.roa
Signing time: Mon 14 Sep 2026 12:17:27 +0000
ROA not before: Mon 14 Sep 2026 12:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62178
IP address blocks: 94.229.80.0/24 maxlen: 24
94.229.81.0/24 maxlen: 24
94.229.82.0/24 maxlen: 24
94.229.83.0/24 maxlen: 24
94.229.84.0/24 maxlen: 24
94.229.85.0/24 maxlen: 24
94.229.86.0/24 maxlen: 24
94.229.87.0/24 maxlen: 24
94.229.88.0/24 maxlen: 24
94.229.89.0/24 maxlen: 24
94.229.90.0/24 maxlen: 24
94.229.91.0/24 maxlen: 24
2a05:2c0::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:d9:d1:23:c6:8f:52:f9:70:96:0a:58:5a:0d:04:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Validity
Not Before: Sep 14 12:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57afa55b0892377619ff5160fe226a4f5a7b542e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:2b:ab:c7:84:60:db:94:6d:03:17:03:5d:
93:8d:90:9f:1e:7c:31:7c:98:4d:4b:a1:8d:cf:bc:
78:06:e1:66:17:08:03:cf:0d:39:2d:a9:0f:01:70:
2a:35:3d:28:b5:b4:f9:67:24:16:a8:53:bc:03:be:
d5:e8:94:c7:b6:21:01:61:75:0e:70:8d:85:e8:34:
b6:ce:b9:85:96:00:ed:95:4d:b2:8f:e8:5c:01:42:
71:55:a6:57:e9:05:12:52:3b:a9:5f:66:ff:4d:75:
69:d8:2e:e7:6a:17:b8:88:3d:33:eb:13:04:aa:e0:
17:f2:a9:19:89:c1:2a:a4:81:a0:1a:95:8f:9f:2a:
b6:bb:46:3f:68:d4:08:b6:8a:96:62:c1:f1:b9:c9:
3f:3c:78:f3:56:81:eb:dc:df:9e:b0:83:e0:3a:9c:
3a:2c:f6:28:a4:e4:f8:ff:a0:72:42:1c:87:b7:21:
d1:03:cf:74:1f:e5:1b:67:8b:cd:16:c4:6f:65:0b:
76:c8:48:c6:86:5e:01:4d:9e:55:2d:b6:1b:24:bc:
ef:ac:1d:0f:5e:59:63:39:24:c8:65:67:05:61:d5:
1b:76:1c:b3:ba:71:f5:68:29:81:47:35:20:95:93:
72:c6:43:b8:ee:27:2e:44:5e:26:0f:69:2f:f8:eb:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AF:A5:5B:08:92:37:76:19:FF:51:60:FE:22:6A:4F:5A:7B:54:2E
X509v3 Authority Key Identifier:
keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/V6-lWwiSN3YZ_1Fg_iJqT1p7VC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.80.0-94.229.91.255
IPv6:
2a05:2c0::/34
Signature Algorithm: sha256WithRSAEncryption
21:a0:9e:36:7d:a6:53:9c:46:1c:72:86:34:87:e8:e4:5d:f3:
7c:93:df:df:a3:cb:9a:db:34:23:29:18:1f:80:ec:99:55:f9:
a3:5c:06:3c:e7:6f:70:ff:06:66:1c:07:5d:42:27:94:e7:00:
48:39:66:d2:d0:6d:6d:c7:c3:ee:90:f2:31:84:ab:4d:77:5a:
22:6a:8c:f3:1c:c3:14:bc:38:bb:91:2f:6c:2e:83:4d:c8:3e:
43:c0:48:d0:c7:43:ea:92:d1:9c:45:9a:a2:0c:24:0b:21:5e:
c1:29:92:54:cd:f5:66:06:03:33:63:7c:65:1d:66:6d:10:01:
2a:06:58:06:08:b0:66:18:2a:86:d4:76:d8:29:5b:a7:7a:3f:
2e:7e:ba:c9:88:c5:f8:5e:af:e7:d2:98:f6:ba:6d:9d:9c:04:
c9:1b:b6:b9:0f:11:f6:b6:91:02:ff:ef:4f:a5:f2:b5:51:25:
96:6b:fe:55:de:ee:5a:bd:2b:50:81:72:0b:89:67:73:31:b3:
55:01:8a:ba:3a:49:c8:4d:b4:a3:6c:88:d4:09:59:a0:de:ad:
53:60:1f:3a:fd:10:b9:c4:d9:50:41:45:dd:e3:b1:06:0f:df:
59:4f:21:30:e9:c1:f4:2c:5d:d9:8a:c2:2d:8f:b3:7e:65:04:
89:4a:8b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:11:02 2026 by rpki-client