Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/CXJmlGHbIZOIyKnBko7VQEHqd4o.roa
File: CXJmlGHbIZOIyKnBko7VQEHqd4o.roa (raw, json)
Hash identifier: o+NP/tFbcAGsjItAyMWQO0moSnMgZcZGr37MuQciKpc=
Subject key identifier: 09:72:66:94:61:DB:21:93:88:C8:A9:C1:92:8E:D5:40:41:EA:77:8A
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019F394C37B34631D7D838A13C3602C6A250
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/CXJmlGHbIZOIyKnBko7VQEHqd4o.roa
Signing time: Mon 06 Jul 2026 21:18:44 +0000
ROA not before: Mon 06 Jul 2026 21:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 92.246.77.0/24 maxlen: 24
194.147.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:4c:37:b3:46:31:d7:d8:38:a1:3c:36:02:c6:a2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jul 6 21:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0972669461db219388c8a9c1928ed54041ea778a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:7e:f0:8c:8a:45:0b:91:f6:58:46:e7:50:
7d:b4:e4:10:a3:66:39:1b:87:f7:c9:b6:34:d0:fc:
fe:98:f9:dc:01:4b:9b:73:0f:34:ba:40:10:1f:f1:
ec:f4:ba:fc:0c:ab:1b:92:8d:05:8e:55:29:ab:a7:
6b:4c:81:55:c8:25:91:b4:c7:ef:21:47:a5:ef:24:
c6:e5:16:7f:b7:f6:2f:4e:58:83:0d:25:57:fd:0c:
cd:f3:c3:f6:07:56:ad:c0:1a:f7:b2:a4:85:8a:d2:
94:bb:df:ca:2e:fb:cb:97:7b:e2:50:d4:84:5b:97:
f2:2b:1c:e1:9d:21:9d:98:56:7e:4a:76:21:5d:73:
77:ff:b7:d7:5a:bf:34:aa:18:27:57:98:9a:17:11:
93:5d:73:bf:3c:de:21:35:c3:62:58:76:6b:62:ed:
52:34:d2:71:28:21:ed:8e:ec:93:fc:0e:e8:c9:ca:
e3:8b:b4:47:5b:d7:8f:dd:9d:7c:ad:23:c5:c1:d0:
5a:5c:2d:74:29:f4:11:51:1c:ee:f8:23:f8:33:36:
34:f4:d9:bc:a3:42:9e:92:9f:2d:17:b4:70:9f:59:
73:fa:70:38:a5:82:cd:74:66:55:54:5d:eb:a7:f9:
8e:96:e2:77:a5:c1:40:1d:cd:27:cc:9f:be:fe:0e:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:72:66:94:61:DB:21:93:88:C8:A9:C1:92:8E:D5:40:41:EA:77:8A
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/CXJmlGHbIZOIyKnBko7VQEHqd4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.77.0/24
194.147.88.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:de:27:1b:b0:2a:27:50:10:4a:39:5e:2c:bc:b2:47:33:09:
09:75:93:fb:ce:1d:0d:f6:53:c8:6e:3b:60:2d:60:3b:09:83:
02:15:08:4d:9c:13:55:89:68:1e:eb:a6:89:5e:33:a2:9b:fa:
be:ec:4e:8f:99:54:3a:7e:06:5e:1d:4a:58:ff:1d:05:c1:76:
34:9d:c2:b2:7e:0c:cc:32:f8:74:7b:d5:9c:50:68:3c:1c:fa:
8b:ba:ef:88:d8:3d:e6:39:81:42:e6:6c:27:b1:85:81:4f:c7:
3d:97:bd:34:ce:01:41:24:27:c9:28:81:25:6b:6a:23:1a:94:
70:97:a4:35:ce:52:17:d3:84:ed:dd:86:67:1c:b8:7a:a3:33:
46:08:a0:af:68:42:93:d0:a7:3d:40:e8:1f:df:71:59:35:21:
d8:d0:b9:73:c3:8b:b6:ac:fd:d6:46:79:e5:0f:a8:b8:fc:d9:
40:e9:d3:61:54:cd:2e:dc:99:72:c7:11:4d:e3:57:a1:ea:92:
5c:93:19:22:7e:8b:78:15:63:2e:e1:e1:b1:6c:21:41:bd:c1:
f8:8c:9e:aa:51:1b:34:5c:74:9d:9a:53:fb:84:29:29:dc:a5:
30:d9:c0:fe:c4:56:e5:d3:17:be:4f:bf:8e:85:98:44:40:b4:
8e:32:ad:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:37:04 2026 by rpki-client