Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/92brh40WW-h_KiNRuqIZRb5unjw.roa
File: 92brh40WW-h_KiNRuqIZRb5unjw.roa (raw, json)
Hash identifier: IJpD/Hxzhb2xZ5MqLyCbtsawZPipjgj8kAZiuASmDs4=
Subject key identifier: F7:66:EB:87:8D:16:5B:E8:7F:2A:23:51:BA:A2:19:45:BE:6E:9E:3C
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 019DB737493D6CCE0D7AC4396CB47AE39D9B
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/92brh40WW-h_KiNRuqIZRb5unjw.roa
Signing time: Wed 22 Apr 2026 22:02:26 +0000
ROA not before: Wed 22 Apr 2026 22:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 812
IP address blocks: 195.58.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b7:37:49:3d:6c:ce:0d:7a:c4:39:6c:b4:7a:e3:9d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Apr 22 22:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f766eb878d165be87f2a2351baa21945be6e9e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:66:fd:dc:ac:a8:7a:5e:b6:d4:cd:f8:93:
4e:50:b4:58:09:57:93:6e:e2:9d:07:cd:ee:53:d8:
9f:6f:7e:ee:8e:13:0a:d6:2d:21:2a:bf:fe:b7:aa:
aa:4d:85:4c:19:7b:48:85:58:3c:10:4c:35:d6:0b:
48:ca:be:25:f3:09:d3:00:8b:5e:e9:68:f2:d8:9d:
aa:01:5e:f9:18:6e:0c:44:3c:16:25:8d:01:61:b1:
cf:0e:7b:e5:74:dc:38:f3:ad:c5:50:db:be:b0:bd:
19:0a:5b:8b:db:93:66:10:c8:f2:40:cb:c8:a2:9b:
fb:24:09:c1:3b:ce:0b:50:6d:bf:09:7d:0b:35:36:
fc:02:a2:1f:fe:26:99:49:0a:f7:57:6b:4d:07:23:
3b:c4:24:c2:eb:08:b1:23:d9:56:9a:6e:9e:5d:86:
f4:8e:b0:42:63:cd:b3:f3:00:f1:6b:22:db:b7:3a:
c0:03:48:2f:fd:d5:68:fe:48:8d:4f:b1:44:d4:b0:
ed:37:03:41:29:ef:4b:57:13:f5:1d:d4:8c:82:30:
01:9e:11:2f:9f:b3:5b:5b:ac:62:eb:b8:9c:a4:94:
41:a3:36:1e:20:72:fc:74:6c:ee:8f:30:46:c3:82:
f0:ca:50:bf:c2:d5:9e:99:fe:ad:8c:7b:04:9c:84:
66:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:66:EB:87:8D:16:5B:E8:7F:2A:23:51:BA:A2:19:45:BE:6E:9E:3C
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/92brh40WW-h_KiNRuqIZRb5unjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.142.0/23
Signature Algorithm: sha256WithRSAEncryption
27:9d:15:3e:6d:c8:9f:41:2c:5c:bf:68:51:56:86:ed:c7:da:
c9:9b:4e:f9:a6:a6:bd:a4:62:8d:a1:7b:58:d4:c4:a4:06:68:
05:d6:f9:d2:35:00:7d:f9:46:3e:56:f6:e4:77:ca:5c:d4:71:
79:51:f8:7f:d6:dc:ae:a8:62:40:64:36:23:c9:1b:d5:d3:c7:
0f:79:15:f0:ac:80:44:7b:ae:5c:71:f3:13:2f:1a:3e:31:fb:
a3:ef:cd:14:4f:f7:7e:4f:b2:a0:ba:a8:3a:e4:63:08:8f:86:
01:76:a0:c2:6c:77:cf:44:dd:23:89:0d:51:ea:55:9f:9e:2c:
96:45:33:0d:32:8c:03:42:8a:ad:6a:6f:02:13:f0:80:ec:e8:
74:34:b6:4e:59:41:4c:b7:a8:71:4e:1d:fc:28:eb:5b:e8:39:
92:4f:26:cd:77:bf:e5:9a:95:c0:da:8b:d9:7f:72:60:17:f9:
99:2b:88:8c:bb:db:b5:5b:eb:c1:fa:2c:6e:b5:86:8e:7e:0c:
21:c1:a1:d2:f6:e8:0d:76:36:cc:68:8f:20:1c:4f:ab:7e:e4:
7c:c5:d5:e0:a5:10:f9:d5:bb:81:4e:2d:04:14:06:9b:59:be:
f0:b1:db:67:f6:f9:04:03:f4:0a:92:36:9b:80:97:63:34:9b:
32:1e:77:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:44:18 2026 by rpki-client