Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wD4X2FgF1Uc4XCBEc1ksULKm0gk.roa
File: wD4X2FgF1Uc4XCBEc1ksULKm0gk.roa (raw, json)
Hash identifier: rBRVsk9ZrPwMIy7LozDFnDojCPzqx1tDa5+4yTVDjSA=
Subject key identifier: C0:3E:17:D8:58:05:D5:47:38:5C:20:44:73:59:2C:50:B2:A6:D2:09
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019E00C61BB72D90ACB7A5CC6F0DA334A32A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wD4X2FgF1Uc4XCBEc1ksULKm0gk.roa
Signing time: Thu 07 May 2026 04:50:43 +0000
ROA not before: Thu 07 May 2026 04:50:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 92.119.199.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:00:c6:1b:b7:2d:90:ac:b7:a5:cc:6f:0d:a3:34:a3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 7 04:50:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c03e17d85805d547385c204473592c50b2a6d209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:b7:1a:4c:be:ab:64:93:fb:79:ae:ef:eb:
09:6a:b4:69:18:76:6b:3b:f6:46:95:35:86:d5:91:
d3:c4:b5:5b:ac:9b:40:7b:8d:8b:a5:39:83:0f:d7:
5f:b1:12:ae:6b:e2:5d:f5:c3:fc:92:e1:06:f4:d3:
be:5f:99:7c:9a:18:ec:3b:a9:8b:12:01:fe:93:88:
7c:b6:e1:70:49:41:97:cf:f3:7e:a4:1b:a4:8a:06:
7b:bb:0f:ff:da:7e:17:63:b7:2b:c1:bd:97:40:1a:
56:57:ae:76:83:ab:5d:fd:04:52:9e:c3:36:fd:72:
da:3a:f2:14:eb:82:74:f8:48:eb:94:07:7f:5a:66:
c5:3c:be:be:8d:d3:df:b1:c2:71:38:51:79:5a:26:
a4:e9:54:53:8c:61:ed:4c:3f:b9:ca:0a:ac:c7:d8:
6b:7b:b3:19:92:bd:dc:f4:56:ec:42:5c:58:58:43:
2a:f0:9e:4c:6c:d1:ee:00:ee:42:f4:f1:93:65:43:
7a:6a:a9:b9:b1:57:a6:38:d1:28:89:24:26:3c:c3:
94:2c:2f:9c:5a:fb:cc:3e:5a:9b:c9:1a:a9:f2:a3:
04:72:94:dc:9d:55:38:e6:55:ac:4f:8d:77:9a:6e:
3d:36:ad:88:93:ed:be:e3:72:59:35:89:7d:92:70:
bc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3E:17:D8:58:05:D5:47:38:5C:20:44:73:59:2C:50:B2:A6:D2:09
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wD4X2FgF1Uc4XCBEc1ksULKm0gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.199.0/24
94.103.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:6a:0c:eb:59:ef:22:c1:2c:a3:0b:4e:0b:d1:c8:8a:ce:48:
c5:eb:8b:37:5b:75:7d:e4:2b:3c:2d:8b:2f:ff:aa:a2:ef:0e:
1a:5a:a7:f4:ca:f3:71:09:e2:99:7f:45:d4:3d:fc:f4:23:56:
1b:cb:7d:20:70:2f:b8:e7:e5:5a:dc:93:c1:af:6f:a2:7c:bc:
10:86:da:78:58:cb:e1:72:62:15:11:95:19:75:b8:3d:ef:e4:
a1:f8:53:8e:83:dc:38:f1:b5:1c:8a:48:50:c7:94:c3:30:48:
96:82:ba:22:03:49:67:63:bc:ed:01:81:66:67:e3:af:bd:b8:
57:52:a5:79:77:3d:8d:68:11:71:e1:d2:81:68:3c:9a:6e:1a:
21:45:43:ca:09:f3:13:21:fc:4b:18:fc:bb:e5:59:1c:b6:14:
06:16:12:93:92:7b:26:fa:79:00:13:64:2b:68:54:1a:1a:32:
c5:db:de:82:19:1a:01:c7:38:54:e6:3d:b1:d8:27:60:ef:15:
c9:d1:e4:6b:26:bb:f8:d8:e3:27:e5:e2:e6:4c:d4:cc:ea:82:
7f:93:97:78:d0:f3:46:60:2a:51:ec:29:6c:03:dc:52:d1:d3:
3f:03:ac:88:33:5b:d3:00:55:23:2a:f8:dc:20:f2:52:1a:ce:
a0:af:27:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 14:11:32 2026 by rpki-client