Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/Kh4_VoB6YEgaSwRCsMKIhi6qzp4.roa
File: Kh4_VoB6YEgaSwRCsMKIhi6qzp4.roa (raw, json)
Hash identifier: e0GnvRoQCozfmziXi7HSJRfK79f9SZF+NnjU+2fBto0=
Subject key identifier: 2A:1E:3F:56:80:7A:60:48:1A:4B:04:42:B0:C2:88:86:2E:AA:CE:9E
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01A085C3F64C7F4C12363D2C88119B84D763
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/Kh4_VoB6YEgaSwRCsMKIhi6qzp4.roa
Signing time: Wed 09 Sep 2026 10:43:27 +0000
ROA not before: Wed 09 Sep 2026 10:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39238
IP address blocks: 92.63.197.0/24 maxlen: 24
185.156.73.0/24 maxlen: 24
185.176.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:c3:f6:4c:7f:4c:12:36:3d:2c:88:11:9b:84:d7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Sep 9 10:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a1e3f56807a60481a4b0442b0c288862eaace9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cb:3d:cb:b9:a0:24:95:40:11:96:11:6b:a3:
5d:e9:64:a8:bf:dd:c0:05:4e:8c:ac:79:03:d7:fc:
a0:98:99:d7:80:99:9d:5f:c6:50:ee:27:fd:05:6f:
33:11:87:45:15:d4:6c:29:88:51:33:40:01:88:79:
06:9c:6b:2f:8a:e7:f0:63:54:21:29:00:12:43:a7:
a5:a0:9d:6f:c2:6f:7d:ac:b5:37:ab:13:3f:45:f9:
5e:af:34:8d:a4:b7:4e:2c:df:33:20:1d:42:26:28:
4a:25:a7:9f:6f:70:85:bd:c0:26:9a:d2:74:60:7a:
44:35:e4:58:ad:22:09:0e:65:ac:72:84:eb:eb:a6:
64:39:c1:bd:94:49:16:2c:4d:02:aa:a1:54:7b:59:
37:06:13:74:59:72:05:65:e9:78:33:d3:bc:90:e6:
a4:b1:6a:c1:a4:a7:2b:11:72:34:b4:75:ec:ed:b7:
29:8b:da:2a:40:47:bd:65:71:3a:90:40:ea:63:89:
4e:57:b9:3e:e8:2b:81:03:2d:e3:03:8b:ba:a8:99:
b2:3f:46:9e:03:7f:24:10:13:07:71:e8:de:9a:d5:
ff:c3:0d:1d:41:6c:e3:4f:18:ab:84:ff:d7:f1:50:
4e:57:13:5e:e4:0a:21:a6:92:ff:8e:e7:d0:7b:80:
30:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1E:3F:56:80:7A:60:48:1A:4B:04:42:B0:C2:88:86:2E:AA:CE:9E
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/Kh4_VoB6YEgaSwRCsMKIhi6qzp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.197.0/24
185.156.73.0/24
185.176.24.0/24
Signature Algorithm: sha256WithRSAEncryption
65:40:4c:ae:75:76:ca:e7:ed:69:cd:cf:54:ff:21:06:b6:6f:
4a:70:a7:e4:c7:6f:c1:de:c7:09:b1:68:8c:ee:13:e8:54:33:
f8:12:41:b8:a5:32:73:fc:8d:41:55:7e:7b:ba:5f:da:c8:1e:
1d:37:b2:74:fe:40:eb:f0:a4:05:9a:88:fa:3f:9f:fe:0d:91:
66:dc:ab:ac:de:89:80:61:37:d1:90:89:02:22:81:20:b4:3c:
c2:e3:76:68:31:7a:66:ad:95:e8:d7:7e:6a:33:10:ac:20:4e:
b0:45:9b:0f:36:d3:78:b1:a8:1d:0d:a3:24:90:d6:8e:76:69:
2e:6f:b1:e2:ec:13:ae:36:87:11:b4:a6:de:23:28:8f:81:d2:
0c:af:7c:39:5b:38:7d:82:61:51:8c:44:29:09:0b:27:19:7c:
04:de:c8:50:f4:25:01:4f:39:f0:77:4d:c1:41:4a:8c:55:ac:
8b:e4:b4:8a:be:76:bd:ef:32:f1:e2:ad:2d:b5:3b:26:9a:e7:
3b:86:ec:83:3c:f3:2d:32:72:f1:1d:4e:69:19:d6:9c:01:14:
1e:c0:aa:7b:44:0d:00:83:e5:b2:d8:4b:a8:e7:ff:0d:50:08:
dd:7b:b1:a0:37:5e:47:c2:d5:81:bc:37:4a:d1:25:34:1f:94:
1b:80:44:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:02:55 2026 by rpki-client