Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/aSNIB2ueyzJAD1d6v1Df1vzO51U.roa
File: aSNIB2ueyzJAD1d6v1Df1vzO51U.roa (raw, json)
Hash identifier: +sI8sxEreFMeUdQzwXP9AUp5CG/5PGt7OWXNm0iPlsc=
Subject key identifier: 69:23:48:07:6B:9E:CB:32:40:0F:57:7A:BF:50:DF:D6:FC:CE:E7:55
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A145E149F269EEA311138D60E7CAA3D4C4
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/aSNIB2ueyzJAD1d6v1Df1vzO51U.roa
Signing time: Fri 16 Oct 2026 18:02:34 +0000
ROA not before: Fri 16 Oct 2026 18:02:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 92.71.160.0/19 maxlen: 19
212.189.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 05:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:e1:49:f2:69:ee:a3:11:13:8d:60:e7:ca:a3:d4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 16 18:02:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=692348076b9ecb32400f577abf50dfd6fccee755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:3c:98:bf:c7:d8:07:12:b9:a4:fd:09:6f:
de:a7:87:14:01:09:68:53:7a:57:1d:bb:72:ad:28:
28:ed:f5:6f:34:ee:d2:ff:84:5d:6c:b3:45:fe:7e:
87:49:a7:1f:3d:09:0c:2c:04:f4:27:ca:0d:75:22:
8c:b8:71:f4:f2:5b:49:2f:9f:b2:c0:70:20:5b:69:
89:86:92:98:73:a3:e1:67:6d:1c:ca:86:00:aa:3d:
34:4b:d7:2f:c9:65:95:66:44:43:23:5e:73:a0:52:
14:3b:e1:e7:7b:43:ae:5b:ed:82:e0:41:c3:9d:72:
dc:4c:30:98:c3:82:a5:3b:93:26:df:a1:d8:be:f9:
39:39:5b:0b:ba:fa:c9:ff:9e:5c:8d:9c:4f:cf:02:
5e:d3:59:84:f2:95:d0:68:b8:22:ea:80:02:5c:8a:
bc:28:7a:71:2b:8a:ce:be:2d:6b:17:c1:0f:4d:70:
14:cb:ea:33:54:27:bb:fd:e6:d1:19:6b:13:92:4d:
93:dd:34:80:3a:0b:9a:e3:0e:a8:dc:8f:75:97:42:
c6:4e:b1:4b:cf:ef:5d:9e:fc:48:11:8b:98:33:30:
c9:cc:8b:f3:73:ca:b4:52:f3:c4:8b:a4:90:93:de:
92:92:76:8b:e7:4d:b6:7a:90:47:cb:ee:67:1f:72:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:23:48:07:6B:9E:CB:32:40:0F:57:7A:BF:50:DF:D6:FC:CE:E7:55
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/aSNIB2ueyzJAD1d6v1Df1vzO51U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.71.160.0/19
212.189.32.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:17:ea:02:2f:0c:60:86:ca:72:29:63:d6:6a:0b:d6:bc:74:
a6:d0:00:78:5e:70:32:de:d9:0c:ad:cc:a1:70:06:ca:af:9a:
8a:27:a6:f6:6b:76:e7:9d:78:59:0f:4f:b7:66:48:10:57:4c:
aa:2d:96:ab:cc:57:1c:8c:e8:3e:59:b1:49:0e:ba:e4:1b:90:
89:bc:ca:69:13:e3:3f:61:16:75:41:88:fe:a5:8f:7f:2a:3e:
f1:12:b8:13:9d:f2:0e:50:39:b2:97:07:45:7e:7e:6e:0e:da:
52:6e:c3:7a:5f:20:d7:db:2a:b0:d0:09:24:fc:cf:99:9f:66:
ce:ea:a4:06:ba:91:9d:96:63:65:db:2c:17:9e:a0:74:ab:4c:
eb:e1:7f:56:fc:92:b8:a5:4e:bc:12:9f:28:1b:31:c5:a8:89:
a7:4e:e9:c9:d9:ba:26:2e:72:2b:77:9e:13:f8:0d:d1:22:9b:
db:03:84:af:3e:52:1e:60:52:97:85:4a:2d:a6:88:e0:bb:c7:
cd:22:b0:34:0a:fd:06:be:89:54:a1:28:ef:d0:c6:aa:04:fc:
33:ec:54:d6:b3:8c:7a:1e:20:df:19:87:d2:4f:f5:c5:f2:cb:
74:7d:b7:67:03:06:b7:e4:f4:e0:7a:5f:fa:1a:15:f8:0c:5b:
6e:fc:29:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:25 2026 by rpki-client