Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/292UMmT6VXScVNc3K4_JjIUNT4Q.roa
File: 292UMmT6VXScVNc3K4_JjIUNT4Q.roa (raw, json)
Hash identifier: CpQ5zILrlo4k8nsLrkVsaGmDSZocIUk7x8ybrfOi7Qg=
Subject key identifier: DB:DD:94:32:64:FA:55:74:9C:54:D7:37:2B:8F:C9:8C:85:0D:4F:84
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0584C9C1A69F95471293E5CB514FA4363
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/292UMmT6VXScVNc3K4_JjIUNT4Q.roa
Signing time: Mon 31 Aug 2026 14:50:10 +0000
ROA not before: Mon 31 Aug 2026 14:50:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154859
IP address blocks: 84.54.0.0/23 maxlen: 23
84.54.0.0/24 maxlen: 24
84.54.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 14:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:4c:9c:1a:69:f9:54:71:29:3e:5c:b5:14:fa:43:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 31 14:50:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbdd943264fa55749c54d7372b8fc98c850d4f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:cf:02:21:dc:71:bb:55:72:6e:f4:5a:b6:
e9:6c:31:78:0f:22:52:f0:5b:3d:86:cb:74:1f:6b:
da:c2:81:ab:7d:e4:7f:b6:ce:09:aa:8e:31:0e:90:
87:eb:d4:0e:ad:9f:7f:ad:e8:e2:71:c8:eb:74:73:
4d:2d:d4:e1:de:f6:2b:0c:22:94:43:0c:87:25:16:
db:58:d5:1f:22:a4:51:f3:74:71:80:f9:d4:8e:47:
38:79:3a:af:7f:cf:48:bb:f6:8d:69:1f:38:50:fb:
b5:bc:c5:89:22:b4:50:ba:96:ee:22:a6:f0:78:f3:
2c:ea:ed:30:06:62:71:30:94:ce:65:a8:d1:05:45:
b1:71:8d:21:be:0a:3a:31:17:1a:4a:5d:4c:4d:77:
e0:b0:e6:ff:cb:3b:34:cb:65:19:ff:32:a9:61:2e:
f1:40:b5:df:ab:a1:43:67:db:29:65:d9:ef:7a:75:
1a:13:14:2a:96:fd:a7:21:5d:b1:94:55:9b:3e:63:
6c:9a:00:ce:90:1a:cf:55:1b:8f:cd:61:97:f5:90:
d2:f8:2f:a9:d7:c8:b4:33:32:1c:81:94:dd:48:6b:
6d:c1:15:b0:21:0b:3c:7d:17:75:b6:7d:ec:f3:48:
01:b7:1f:52:fc:03:e0:34:0e:be:23:34:47:a4:5f:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DD:94:32:64:FA:55:74:9C:54:D7:37:2B:8F:C9:8C:85:0D:4F:84
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/292UMmT6VXScVNc3K4_JjIUNT4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.0.0/23
Signature Algorithm: sha256WithRSAEncryption
61:a1:8b:5e:2a:99:c0:96:40:e6:33:9c:30:dd:55:7d:c3:68:
6b:46:43:39:a3:21:0d:e1:27:35:3d:81:26:6f:d9:d9:d3:3f:
23:41:36:52:a3:31:87:39:01:e5:6b:60:ae:e9:40:6d:89:5d:
f2:8e:93:21:bd:ea:58:56:0d:83:82:aa:84:e6:23:c8:be:92:
4f:64:7d:dd:3a:33:96:b2:d9:42:af:bd:83:d1:bf:62:d6:07:
9d:8d:8d:e3:6e:54:52:f0:12:3e:c1:7c:b9:5e:1f:5b:cb:b6:
b9:8f:45:4f:0a:28:cb:46:28:5a:b0:55:9f:76:22:b9:a3:70:
06:07:7a:89:d2:f5:a2:6c:7f:84:f6:4c:96:33:c1:f7:55:74:
ce:31:d3:57:cc:3e:07:91:aa:fa:15:69:7b:2c:d2:f1:8e:5d:
b6:c8:e2:49:22:b2:57:d3:57:a8:14:5a:2c:e6:88:31:63:8e:
c2:6b:e3:93:b8:f9:d0:76:ff:6c:dc:fa:b0:8f:c1:18:13:39:
a8:40:7a:03:ab:f8:89:9e:9d:30:e7:29:14:ff:f1:3c:84:48:
d2:0d:b9:37:2c:26:c6:7e:63:bc:51:e9:6d:ae:19:2f:23:90:
89:56:40:db:04:10:ae:34:c5:7b:9e:75:d3:e6:af:f8:78:f1:
d3:80:5f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 21:01:19 2026 by rpki-client