Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/98S5CngjPeYhcytHMcStOY7UiWs.roa
File: 98S5CngjPeYhcytHMcStOY7UiWs.roa (raw, json)
Hash identifier: 9B550UK9MkTSiNEqVQHa8rL/aW+ilOhqpL+pqjjvUvI=
Subject key identifier: F7:C4:B9:0A:78:23:3D:E6:21:73:2B:47:31:C4:AD:39:8E:D4:89:6B
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A1716F1EDA2B38768D2191ACD41372D58E
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/98S5CngjPeYhcytHMcStOY7UiWs.roa
Signing time: Sun 25 Oct 2026 05:01:10 +0000
ROA not before: Sun 25 Oct 2026 05:01:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211056
IP address blocks: 94.184.14.0/24 maxlen: 24
94.184.15.0/24 maxlen: 24
94.184.19.0/24 maxlen: 24
94.184.20.0/24 maxlen: 24
94.184.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:6f:1e:da:2b:38:76:8d:21:91:ac:d4:13:72:d5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Oct 25 05:01:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7c4b90a78233de621732b4731c4ad398ed4896b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9d:c0:cd:d2:5c:d9:d1:d8:63:5a:aa:9f:1f:
64:11:c2:e3:51:82:70:a3:87:9e:18:0b:1a:9d:9c:
ef:ea:4d:bf:ca:fa:db:4d:37:3a:78:ae:73:3a:51:
80:1b:93:6b:b7:c3:44:da:eb:04:0e:33:d8:86:fc:
83:17:ce:c8:76:21:c6:69:3c:f7:b9:ab:ac:31:19:
01:f7:b8:60:83:f1:e8:f6:5e:65:e8:72:ca:65:79:
ec:a4:8d:34:9a:0f:c9:17:14:93:c4:78:3a:fa:2d:
00:22:5b:7a:a8:17:b3:9c:f9:b4:3e:b5:74:f7:34:
51:ca:92:c7:a0:14:20:af:0f:6b:6b:1e:c2:b7:da:
ef:83:6f:02:25:80:53:d4:6e:d2:18:90:b3:46:94:
68:6e:ac:61:fe:d6:aa:b5:cf:97:8a:52:33:12:29:
f2:fe:6f:2f:86:06:51:80:ca:9a:cd:6e:48:4d:47:
dd:f3:f9:29:79:68:f2:57:66:80:b4:96:c5:3a:3e:
a9:b3:5d:79:4b:77:d9:e6:40:18:ba:c2:d8:a1:87:
ef:06:e8:92:e6:ee:b0:1b:ab:87:41:bd:1b:bb:95:
5f:5c:1f:1c:f0:29:26:13:68:1f:1f:8f:62:41:34:
ef:5a:ed:6b:55:98:9c:ca:dd:b6:d8:a2:62:fb:93:
ee:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C4:B9:0A:78:23:3D:E6:21:73:2B:47:31:C4:AD:39:8E:D4:89:6B
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/98S5CngjPeYhcytHMcStOY7UiWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.14.0/23
94.184.19.0-94.184.20.255
94.184.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e9:40:d1:75:18:ef:00:09:50:0d:90:f7:84:00:86:b7:76:
3e:7e:c6:d9:b2:d4:9a:c8:96:16:8f:3d:dc:1a:ba:67:59:e5:
d7:09:c9:76:39:5f:4b:d2:c5:ad:73:20:46:73:61:39:96:84:
63:34:af:f1:67:ec:05:03:1e:f5:de:d0:34:3a:50:66:fc:72:
dc:da:c1:3a:c1:74:b1:5f:54:ab:45:58:4e:7b:c5:d5:13:78:
e3:46:de:4b:a7:03:d3:2c:1c:9a:a5:86:a2:81:93:04:2f:f0:
e3:47:62:ab:b8:86:a7:e2:b1:5e:7b:07:50:fe:89:d9:09:6a:
28:3f:e3:d3:9c:41:35:22:57:f5:2a:13:7c:3e:31:58:8c:0d:
74:0b:df:64:65:b5:14:37:42:7e:05:f9:de:17:c8:b3:3d:df:
6f:cb:d7:e1:1b:84:47:be:18:aa:e6:cd:78:fd:e4:a4:6e:80:
a4:ed:5d:e7:63:75:11:67:92:ff:36:d8:5a:dc:25:3b:ed:99:
7b:26:4c:88:28:51:e6:46:65:c4:7f:c5:3c:62:63:f6:ef:ab:
75:1a:70:d3:a9:31:4a:0c:22:84:e3:03:a0:10:8a:f8:ca:8a:
cd:d4:3c:c7:9e:79:9b:ca:72:e1:df:b1:1b:29:59:2d:2d:61:
ff:70:da:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:39 2026 by rpki-client