Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/SAA7qyjcW84McQBC6YBfHzblJfA.roa
File: SAA7qyjcW84McQBC6YBfHzblJfA.roa (raw, json)
Hash identifier: dbjWwV6RFntCa8n+N5y1CE7UmL5X6zdxSBIazMuF9gY=
Subject key identifier: 48:00:3B:AB:28:DC:5B:CE:0C:71:00:42:E9:80:5F:1F:36:E5:25:F0
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 019E64E25CFB4C5D6E89A7141CDA7FF81221
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/SAA7qyjcW84McQBC6YBfHzblJfA.roa
Signing time: Tue 26 May 2026 15:23:37 +0000
ROA not before: Tue 26 May 2026 15:23:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216246
IP address blocks: 92.246.138.0/24 maxlen: 32
217.144.184.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:e2:5c:fb:4c:5d:6e:89:a7:14:1c:da:7f:f8:12:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: May 26 15:23:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48003bab28dc5bce0c710042e9805f1f36e525f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:25:bc:60:6f:1c:0b:13:0f:b0:c8:6a:01:5d:
80:1e:93:86:bb:96:e4:98:86:f7:90:17:e6:94:30:
ad:57:16:46:ec:a9:96:8c:6b:38:13:2a:bc:e7:c3:
0a:2d:23:45:b9:10:56:c2:ba:fc:b3:67:e0:da:14:
b2:aa:f2:40:aa:3b:4c:c6:2b:68:b6:22:c1:95:b1:
c1:26:77:19:1c:8e:24:0b:b7:f2:44:a9:ab:3c:11:
93:ea:3f:fa:1b:80:e9:0c:ff:fa:cf:c9:a1:64:82:
f5:13:a5:64:33:c5:a6:2f:9f:56:4a:7d:84:61:e9:
93:39:a0:0d:11:cb:80:97:68:39:e7:ba:ad:21:f7:
70:d0:8f:20:0c:41:21:af:7e:83:46:8b:7a:d8:3a:
b6:c3:30:f2:5a:55:28:d9:37:7d:8d:44:9d:7f:d4:
fc:43:8b:01:8b:10:39:26:bb:a6:36:71:3d:77:9e:
c7:9a:5a:3d:0a:db:3f:99:b3:eb:5e:5d:3c:d3:74:
69:3c:46:ca:69:77:0e:7e:65:75:41:ad:72:20:7d:
f3:20:f4:d7:25:14:2a:65:00:d8:ef:a8:45:a1:af:
ee:7a:64:a4:bd:66:b7:74:0d:c4:08:20:60:66:75:
d8:3d:91:a9:fc:fe:af:42:89:45:7c:31:6d:59:1f:
b4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:00:3B:AB:28:DC:5B:CE:0C:71:00:42:E9:80:5F:1F:36:E5:25:F0
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/SAA7qyjcW84McQBC6YBfHzblJfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.138.0/24
217.144.184.0/24
Signature Algorithm: sha256WithRSAEncryption
04:36:13:00:0e:3f:b2:5c:1b:96:94:15:3b:b0:c1:5f:52:5b:
36:36:b3:72:46:e9:24:7a:d6:27:08:dd:63:d7:f7:20:00:de:
fd:76:29:3f:e4:d6:06:6b:ac:09:76:2e:e8:a2:84:a5:26:b4:
5e:56:18:79:9d:1a:25:2a:02:bf:55:e3:83:de:2c:0c:f2:35:
e9:48:93:83:a2:22:e2:6e:fa:d3:18:82:ce:0e:1b:e3:eb:ab:
ec:b5:02:88:f7:19:87:71:08:3c:fb:d2:a2:20:bb:d9:d9:97:
a2:a1:2f:64:87:52:e6:ae:46:d6:47:be:2b:dc:2b:fa:f5:16:
d0:f6:6f:f9:31:d3:0f:04:ed:20:99:bf:03:89:80:84:44:b8:
ea:bc:ec:c8:94:98:ca:a9:96:06:2d:95:26:ed:66:05:0d:59:
48:54:d7:8e:f6:0e:48:0a:84:8f:11:29:12:f1:6a:69:1c:63:
b9:eb:de:64:0e:7b:88:99:7e:ec:ae:5d:d9:8f:a9:01:74:f6:
0f:98:7c:f7:8b:66:7c:d3:6a:bc:0e:b2:0a:15:3a:07:b7:ec:
7e:58:ab:cb:d0:ad:b3:f6:a4:22:78:06:72:50:0f:e3:4d:72:
51:ef:e6:0d:55:7f:23:96:04:68:96:00:f4:ec:e3:31:c8:cb:
80:8f:dc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:14 2026 by rpki-client