Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/92jnCRTmyHwWgBE2FNIC9lqdtNM.roa
File: 92jnCRTmyHwWgBE2FNIC9lqdtNM.roa (raw, json)
Hash identifier: Koz1vyOIuMOsIRYLbY4WctdiijIc3sezeHxyNYFY+sQ=
Subject key identifier: F7:68:E7:09:14:E6:C8:7C:16:80:11:36:14:D2:02:F6:5A:9D:B4:D3
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A121DEDC0C06449CA2F23C647FB4283723
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/92jnCRTmyHwWgBE2FNIC9lqdtNM.roa
Signing time: Fri 09 Oct 2026 18:13:35 +0000
ROA not before: Fri 09 Oct 2026 18:13:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152726
IP address blocks: 87.82.255.0/24 maxlen: 24
212.135.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:de:dc:0c:06:44:9c:a2:f2:3c:64:7f:b4:28:37:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 9 18:13:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f768e70914e6c87c1680113614d202f65a9db4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:34:cc:59:d3:34:ae:b9:bb:d8:ee:5f:de:
52:62:2b:48:67:89:cc:40:fc:11:10:be:a9:41:a4:
61:2b:01:53:89:dd:ff:da:fd:e0:8e:99:b6:06:fc:
53:2b:18:3b:ad:aa:2b:c0:e3:a5:83:6d:25:18:db:
2b:23:21:eb:10:3f:eb:32:a4:f1:a8:84:e9:5d:32:
2e:89:a0:66:74:95:f3:03:3c:83:78:b5:f1:a8:e4:
61:79:92:c7:98:5a:e0:a7:3d:6b:aa:df:96:f3:ee:
89:ae:4e:e4:2b:b0:2a:33:9a:0f:b8:e7:5b:05:96:
e3:d9:96:ba:8c:7b:e5:58:f5:16:c5:bd:d0:4d:8c:
f8:73:e9:b0:0b:f1:c3:78:ab:9a:9b:35:2b:c5:29:
88:d5:f0:2a:2c:8e:4f:73:91:f3:1f:28:3e:35:8a:
bb:4b:c5:fa:6a:80:44:17:fa:b1:fb:53:69:6e:2d:
f8:91:2b:b1:b2:da:46:ed:34:a3:a8:e5:82:01:12:
46:e6:f8:7f:50:3a:aa:79:2a:0c:fe:ef:80:14:24:
1f:3d:2c:41:d7:07:e3:65:22:ab:50:e9:5f:7d:61:
4b:41:4d:39:69:5a:c5:68:f4:a3:29:29:11:b4:f5:
62:8a:cd:23:df:56:20:cc:ba:7c:5f:28:19:cb:74:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:68:E7:09:14:E6:C8:7C:16:80:11:36:14:D2:02:F6:5A:9D:B4:D3
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/92jnCRTmyHwWgBE2FNIC9lqdtNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.255.0/24
212.135.192.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:69:12:a7:02:3e:aa:e0:c6:68:31:f1:64:d6:8f:0a:8a:50:
8d:d9:67:59:8e:f0:4d:a5:e2:f5:39:4c:f4:51:df:66:83:4e:
e9:e3:2c:40:9c:e2:46:3c:c5:4a:ba:ab:8e:3e:76:08:a4:4c:
ec:f9:fa:d0:0b:e7:9b:24:d7:f3:d3:c1:24:10:3b:50:a7:81:
b5:5b:f1:ca:c8:87:7b:66:c8:8b:ce:97:d1:76:5d:54:c1:3d:
e9:9c:d3:e3:7e:4f:d7:4b:95:c0:81:01:52:ba:04:8f:77:bc:
75:94:d7:c6:12:46:7f:0f:f3:c9:4e:9b:00:d4:71:5f:98:28:
46:19:e1:18:18:4d:85:3a:bd:a1:5b:d6:51:45:79:c0:38:bd:
1a:63:f2:5a:76:fe:13:eb:b6:de:b5:05:ea:b5:77:39:19:b0:
53:1d:4a:89:cd:a7:da:5f:5f:c6:e8:cf:ca:45:08:13:87:d0:
9e:03:ea:b0:ed:17:34:17:33:c5:ab:13:d2:d4:b3:0a:bf:51:
4d:ee:7c:24:6b:87:d9:c1:aa:f2:a5:8c:26:df:58:e2:bf:46:
31:32:48:f7:ae:14:a7:b6:d3:57:17:c3:dd:ea:01:a1:d8:c7:
98:a2:c7:17:33:f3:f6:e9:d8:e4:40:81:d3:38:a5:b4:9e:45:
c7:87:9e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:34 2026 by rpki-client