Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/c82Jj8YlTln5loSqdknv1wJwkbA.roa
File: c82Jj8YlTln5loSqdknv1wJwkbA.roa (raw, json)
Hash identifier: LTDkk7Lx7lOfFGJCDeOnadroiY01oSdEJqoohp0z8k4=
Subject key identifier: 73:CD:89:8F:C6:25:4E:59:F9:96:84:AA:76:49:EF:D7:02:70:91:B0
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019F475C124E0D7F07C34C0383BD722587B5
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/c82Jj8YlTln5loSqdknv1wJwkbA.roa
Signing time: Thu 09 Jul 2026 14:50:44 +0000
ROA not before: Thu 09 Jul 2026 14:50:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48266
IP address blocks: 92.118.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:5c:12:4e:0d:7f:07:c3:4c:03:83:bd:72:25:87:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jul 9 14:50:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73cd898fc6254e59f99684aa7649efd7027091b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:51:bc:ea:3e:1a:c2:87:27:2c:31:dd:9d:94:
07:9b:35:d1:13:39:5a:b6:fd:43:a9:7c:3c:b2:ff:
3a:69:c9:d6:07:a0:52:25:c6:75:fc:22:b2:e2:32:
3c:1e:f9:44:03:91:a8:a9:ba:1a:5e:e6:95:a8:19:
80:55:b2:98:23:21:ac:f3:e9:2d:ac:5b:cc:22:cb:
48:43:6e:06:ee:89:0f:e7:27:e8:bf:a4:45:cf:e1:
7f:d2:fe:41:87:78:ce:2a:11:24:db:bc:29:3a:4e:
1a:b4:27:2d:61:1c:ba:5c:08:8f:f9:fc:5d:3b:10:
69:c8:89:21:e8:b7:94:26:29:85:c0:f4:56:7a:bb:
46:49:de:13:73:ec:16:6b:f4:59:12:4c:3f:dc:08:
0c:65:98:af:71:47:3d:9b:33:9d:70:9d:cb:7e:84:
b6:96:75:eb:00:f3:9c:3a:aa:42:45:79:ae:9c:24:
95:70:1b:85:d4:43:41:e3:bc:c8:33:32:93:9f:9c:
da:a2:82:2f:ef:6f:05:23:fc:a1:a7:76:be:dd:b2:
f3:ca:43:51:f2:22:37:2d:af:3f:0f:dd:f0:50:7f:
3a:e7:0b:88:10:21:6e:c4:b7:1f:df:30:6f:2a:57:
cf:ef:c1:f4:01:f8:3d:16:3d:76:64:e1:55:9c:1f:
82:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CD:89:8F:C6:25:4E:59:F9:96:84:AA:76:49:EF:D7:02:70:91:B0
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/c82Jj8YlTln5loSqdknv1wJwkbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.204.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d7:cd:c4:bc:37:45:b0:6c:37:5f:f7:1d:19:4f:0c:e4:30:
05:9e:39:30:da:ac:c8:e1:f6:38:2e:7a:bb:88:1b:f6:b0:9a:
ba:51:ba:24:c8:a4:2a:d6:06:33:47:0f:25:dc:e4:ef:de:f6:
87:8f:7c:d0:e1:d7:53:9c:1e:b6:66:06:20:12:23:3e:db:8e:
36:1c:d1:e6:2a:77:65:c4:00:ac:f6:38:3b:08:f0:2f:62:2a:
51:09:34:2b:3b:02:da:43:59:47:c2:2b:bc:25:59:45:f3:80:
52:ed:f6:ac:5c:83:84:80:77:61:b2:db:aa:76:9c:6e:49:c9:
ef:4e:ab:ee:37:37:65:8a:c2:1b:a3:8e:74:14:27:68:06:75:
3c:3e:69:4c:58:3f:31:5f:59:49:6f:39:85:f1:47:41:b2:06:
a8:e4:6e:24:bf:2f:38:81:1c:2b:89:dd:7c:4f:f9:7e:97:4c:
f3:9c:d4:9d:94:07:90:ee:d2:be:3f:a6:4f:76:a4:af:c7:fc:
b4:81:b9:ff:b3:e9:ec:b2:72:39:f2:33:82:a2:2c:7b:b0:a8:
11:ad:98:9d:45:51:e9:22:11:a2:dc:5a:8f:0c:d9:36:58:75:
06:3c:c1:b8:c1:26:d5:58:18:51:19:b8:f1:01:6b:bc:51:41:
2f:fa:49:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:37:05 2026 by rpki-client