Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/lh0U2VbssLYHQuI_GeDtu-78fs8.roa
File: lh0U2VbssLYHQuI_GeDtu-78fs8.roa (raw, json)
Hash identifier: argvv+35DPV6sAk39FUkOQj04x5r0LiO2lKQbHUbgZU=
Subject key identifier: 96:1D:14:D9:56:EC:B0:B6:07:42:E2:3F:19:E0:ED:BB:EE:FC:7E:CF
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 019E87147C3953DF192624B6CB6F6C7FE756
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/lh0U2VbssLYHQuI_GeDtu-78fs8.roa
Signing time: Tue 02 Jun 2026 06:45:27 +0000
ROA not before: Tue 02 Jun 2026 06:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 92.44.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:14:7c:39:53:df:19:26:24:b6:cb:6f:6c:7f:e7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jun 2 06:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=961d14d956ecb0b60742e23f19e0edbbeefc7ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:cf:01:37:e0:2c:e8:97:ae:24:35:0e:14:
e1:98:73:c2:03:20:a0:cc:0d:49:1f:8e:c1:7d:58:
12:95:3b:40:c5:da:d1:c7:29:1c:19:4f:07:92:3c:
11:77:ff:80:6a:ad:5c:ab:4c:ab:a2:ba:e3:ae:b6:
6e:41:cd:a4:4e:85:70:08:8a:d3:10:e1:34:69:d0:
39:29:42:e0:16:ec:57:ad:80:10:32:f0:a1:82:e9:
44:c6:ab:1f:7a:f7:61:96:a3:40:02:cb:b8:86:11:
74:fe:c6:63:2f:ca:0d:bd:24:e0:a0:97:2c:78:11:
1d:01:7e:a2:9c:62:da:8c:8e:21:6a:05:0d:d5:11:
22:b4:79:2b:bb:8b:bf:03:91:d0:f6:13:9e:1b:16:
82:f6:8c:be:fd:08:e4:72:c3:ce:2c:84:c3:2c:0e:
32:c6:9c:ca:e7:e6:91:28:01:16:ca:bc:5d:47:6f:
80:2b:1e:62:c8:1d:f1:e2:30:54:3b:19:7b:e4:02:
d6:dd:69:34:d9:a9:07:55:f5:4c:a9:a4:d4:04:3e:
67:04:81:72:86:01:81:eb:36:04:9b:68:54:a3:82:
30:f7:87:93:d4:92:49:35:1a:54:14:e7:ff:c6:d8:
84:bd:3d:01:56:c1:f6:33:e4:9e:36:76:fc:10:e4:
f6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1D:14:D9:56:EC:B0:B6:07:42:E2:3F:19:E0:ED:BB:EE:FC:7E:CF
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/lh0U2VbssLYHQuI_GeDtu-78fs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.44.1.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e8:bf:c6:f1:ce:0a:21:01:79:7e:8e:3a:3a:b1:9e:31:8b:
21:fc:bf:52:02:7e:c8:30:79:cf:a8:af:5e:04:a1:fc:82:87:
6b:32:be:bb:cd:0f:4f:84:e8:c4:82:22:76:e5:91:98:0e:95:
8c:a1:fc:e2:e0:7d:8b:95:65:f1:53:d7:90:e9:92:08:54:41:
49:4c:17:24:0b:c5:1e:ac:32:be:d8:3d:a8:b0:10:66:a0:06:
b2:ce:b6:50:c9:16:1c:8f:70:41:0b:94:00:09:5a:d4:82:e3:
02:08:f4:e9:ea:ab:93:37:8e:f4:d1:a6:66:f6:33:ea:54:46:
fe:78:ef:92:7f:a4:2f:a8:57:6c:ee:68:5e:4e:57:dd:de:7b:
5e:13:e7:82:89:3f:30:5e:90:09:c6:af:d7:0b:61:cc:61:fe:
eb:49:b8:a4:d0:4b:9e:ca:ed:e8:27:9c:1c:62:59:a9:2c:2f:
ba:87:bd:78:17:42:ff:e9:a0:f8:0a:73:55:a9:f5:e2:e9:d2:
0d:34:7a:16:5f:21:24:d0:7b:67:58:63:38:3f:a4:49:5d:a6:
f0:86:ce:fe:72:1d:0c:e5:e1:c0:73:f2:c9:e6:4b:44:6d:6e:
70:22:89:63:36:0a:ea:fe:a9:f0:1e:6e:0e:a5:d0:a8:f4:bc:
9b:21:e0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:11 2026 by rpki-client