Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/sWpV1lM6mX2RBTW0h8r_NA_9v_E.roa
File: sWpV1lM6mX2RBTW0h8r_NA_9v_E.roa (raw, json)
Hash identifier: njFKou37JjOVHNJyHCdo0h+VwxwWDcP+7TJORAKmSII=
Subject key identifier: B1:6A:55:D6:53:3A:99:7D:91:05:35:B4:87:CA:FF:34:0F:FD:BF:F1
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019CC76B59A92F0FC59CC9945185CDC2A692
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/sWpV1lM6mX2RBTW0h8r_NA_9v_E.roa
Signing time: Sat 07 Mar 2026 08:30:27 +0000
ROA not before: Sat 07 Mar 2026 08:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48266
IP address blocks: 92.118.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:6b:59:a9:2f:0f:c5:9c:c9:94:51:85:cd:c2:a6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Mar 7 08:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b16a55d6533a997d910535b487caff340ffdbff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:bb:2a:a9:e9:4a:d2:2f:55:32:a5:7b:d3:
02:d2:4a:bc:b4:88:29:a0:19:05:b2:8b:ea:08:14:
ae:a3:eb:7a:c3:f1:b0:1c:bb:00:5c:eb:4b:ac:46:
53:85:82:b7:8f:61:93:46:bc:15:df:7f:d6:13:56:
28:d2:d2:d7:22:be:bc:4d:bb:19:2d:b7:1a:31:cd:
c2:fc:28:ba:ff:ae:06:5d:be:b4:fe:dc:1c:4a:ee:
0c:67:bb:59:54:5a:90:bc:a7:90:20:ed:ee:54:55:
26:d8:e9:f4:3d:ec:3e:57:db:fb:ce:c6:66:2c:5b:
01:fa:14:4a:2b:0f:0a:24:98:72:3a:8f:aa:99:64:
e1:cf:92:29:e4:6b:c5:b8:e7:9e:94:b1:93:79:1d:
e9:17:6f:5f:1a:ea:38:d8:1e:f3:b3:51:06:40:27:
4d:10:45:b5:a8:4e:da:77:7d:4f:cd:50:97:aa:c7:
26:2e:19:05:30:04:c2:0e:26:4f:de:75:7c:dd:6c:
62:ce:0c:64:be:57:bc:63:46:4a:a9:0f:b6:25:02:
f5:7f:d0:eb:a9:5d:2d:3b:4a:c8:ef:2f:d1:81:c0:
e6:ef:42:c9:ca:bf:32:c5:94:b8:0d:83:ab:d0:e2:
33:4c:f8:c5:fa:31:b2:89:39:a5:ff:88:f5:8b:f3:
f1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6A:55:D6:53:3A:99:7D:91:05:35:B4:87:CA:FF:34:0F:FD:BF:F1
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/sWpV1lM6mX2RBTW0h8r_NA_9v_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.204.0/24
Signature Algorithm: sha256WithRSAEncryption
60:52:9a:b7:52:47:e1:3e:ec:00:a7:ef:73:17:e2:fd:93:33:
eb:f9:1c:f4:8d:14:c4:51:d9:0e:d7:1d:b9:02:be:41:10:66:
0a:20:b7:ee:42:76:ea:41:5b:b0:87:59:57:c8:95:0f:23:a3:
ef:3e:bd:02:18:d5:21:be:06:1c:20:7a:ed:df:9d:a3:e2:cb:
68:a6:05:c6:78:6b:56:0c:c5:80:19:df:fd:b0:c5:83:7e:17:
2b:8f:5b:82:9e:55:68:10:b0:7a:22:0a:a5:fd:3c:05:07:95:
4d:8c:15:a5:ea:7b:f5:45:b5:d1:7c:a6:26:d5:35:25:6a:38:
d2:b6:4e:82:65:2e:97:e8:2a:4e:ad:29:b3:6c:c0:65:af:ce:
36:3f:45:26:5a:56:12:fa:15:64:04:e2:08:b1:41:04:6d:14:
20:e1:2e:81:a4:a4:09:91:11:0d:ce:b7:36:a3:a3:6e:5f:63:
f2:86:66:89:76:2b:ca:8d:01:de:d6:46:4c:2d:6b:f1:9c:92:
37:66:3b:7f:4e:56:4e:a0:bf:d2:a9:a5:c8:21:85:e8:d1:c9:
6d:39:37:cf:04:55:f3:ec:dd:8e:d2:23:35:ef:6e:de:38:9e:
1c:f5:27:f9:72:99:45:31:7a:33:60:47:bc:ac:37:95:a3:b4:
91:ce:a4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:48:19 2026 by rpki-client