Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/9h6W4r2ZUmSWR3rPAISEaioyTnA.roa
File: 9h6W4r2ZUmSWR3rPAISEaioyTnA.roa (raw, json)
Hash identifier: YXizQOzPpOHcnczJqxPHErnPR6o/jvzp0veayf1oTFI=
Subject key identifier: F6:1E:96:E2:BD:99:52:64:96:47:7A:CF:00:84:84:6A:2A:32:4E:70
Certificate issuer: /CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Certificate serial: 01A04E8A29A06E012E6C4AE80ED0BDD63106
Authority key identifier: FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/9h6W4r2ZUmSWR3rPAISEaioyTnA.roa
Signing time: Sat 29 Aug 2026 17:21:12 +0000
ROA not before: Sat 29 Aug 2026 17:21:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198926
IP address blocks: 92.42.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4e:8a:29:a0:6e:01:2e:6c:4a:e8:0e:d0:bd:d6:31:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Validity
Not Before: Aug 29 17:21:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f61e96e2bd99526496477acf0084846a2a324e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8f:8f:14:9e:4e:84:88:5d:5c:ae:b7:c3:ac:
01:ad:8b:21:35:84:ea:1e:79:26:08:eb:a5:14:51:
1b:0c:b2:c9:eb:b0:1a:a6:e9:2e:f8:9a:0f:d4:40:
cd:8e:7f:6f:cd:96:96:7c:b8:c1:4b:43:ba:37:4b:
11:9c:33:14:6e:f6:5f:bd:52:b5:a1:0e:b9:5a:9d:
17:8f:f2:23:c9:65:c3:5e:f1:7a:07:25:9d:23:78:
b6:a4:66:df:aa:7b:f5:e2:29:af:82:7a:2a:26:5f:
fa:64:61:f0:cb:d1:2e:e2:71:53:ed:9f:10:d5:e0:
07:3e:c4:25:66:9d:20:d8:5c:27:ac:32:12:a6:cc:
5f:7e:82:1d:7c:e2:36:87:c0:f7:0e:a7:81:91:2c:
a4:1e:1c:f2:b5:82:10:da:ad:5f:73:c3:c2:82:3e:
dc:55:59:b4:af:5d:b6:ad:f9:94:df:e1:1c:81:58:
d8:30:4c:a0:82:21:9c:cc:e2:8d:29:db:4c:7d:00:
15:08:a7:d2:c6:b0:78:8d:1c:ea:dc:17:93:58:f1:
54:42:91:f3:46:3d:7a:d8:c6:68:d9:d3:25:7f:93:
4b:b5:a6:8b:6f:bc:4a:1a:cc:40:34:3e:da:0f:67:
57:64:87:6a:94:88:ab:88:3f:a8:d3:f0:ae:8e:3a:
63:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1E:96:E2:BD:99:52:64:96:47:7A:CF:00:84:84:6A:2A:32:4E:70
X509v3 Authority Key Identifier:
keyid:FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/9h6W4r2ZUmSWR3rPAISEaioyTnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.202.0/24
Signature Algorithm: sha256WithRSAEncryption
46:80:00:3e:9c:ae:14:c8:28:6e:8e:42:1b:3c:4d:25:57:af:
d2:3e:50:88:93:ca:d0:18:b1:2e:4a:73:f1:c6:3e:f8:44:c0:
df:4f:c8:d8:93:fc:02:0e:5d:a5:fd:95:d4:b7:11:9d:77:ba:
bf:49:27:a2:15:ae:57:3e:19:15:67:6c:76:5a:93:fe:4c:46:
fe:2f:4f:ba:6e:6a:23:35:e6:82:79:f6:a1:1b:0e:ea:d0:ff:
28:76:17:28:ba:81:99:45:d7:91:88:48:42:0f:62:4c:a4:c0:
73:dc:1f:b3:e3:df:a4:b0:2a:91:61:35:e1:ac:aa:4e:5c:c6:
52:81:db:29:30:28:bb:d3:13:8b:5e:a5:a7:a6:fe:02:5f:c4:
d1:87:03:82:a6:63:3f:e5:46:6e:66:2f:62:87:ba:e7:5b:dc:
58:7c:d6:e5:fc:3b:16:6f:58:ae:62:93:4b:77:cc:ea:4b:eb:
cc:10:79:d5:fc:11:0f:a6:02:97:b1:54:3b:5c:77:90:3d:12:
70:b8:ef:5f:5e:cf:8f:3c:37:f5:90:c5:7d:77:85:cd:4e:31:
a9:9b:25:9e:21:da:61:d5:38:c0:65:f2:d0:33:9a:95:2d:ea:
34:8b:f4:c3:c8:3a:60:4e:f0:c0:07:12:ed:9f:f8:88:51:9b:
fe:af:ae:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:27:49 2026 by rpki-client