Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/A-534__P92ZR5tsCDWBRvcXdEL8.roa
File: A-534__P92ZR5tsCDWBRvcXdEL8.roa (raw, json)
Hash identifier: knxFd1juTpjx1NZdpjcHXEcAs0zXPdp0cn2Qq8B6dkg=
Subject key identifier: 03:EE:77:E3:FF:CF:F7:66:51:E6:DB:02:0D:60:51:BD:C5:DD:10:BF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A03DCEA62B619C31A18911CBED55AA9ACF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/A-534__P92ZR5tsCDWBRvcXdEL8.roa
Signing time: Wed 26 Aug 2026 11:22:28 +0000
ROA not before: Wed 26 Aug 2026 11:22:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199458
IP address blocks: 45.92.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:ce:a6:2b:61:9c:31:a1:89:11:cb:ed:55:aa:9a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 26 11:22:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03ee77e3ffcff76651e6db020d6051bdc5dd10bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ab:a8:63:93:1e:ef:22:72:7e:5a:86:44:54:
34:f7:70:16:81:e9:b2:95:f0:a5:f2:9a:23:50:32:
56:cc:7f:f9:a4:8b:a3:be:07:e1:5f:03:29:5c:2f:
ab:c0:61:0c:b6:6f:21:dc:3f:44:fb:a0:4d:6b:e7:
36:8e:0d:a9:c9:4e:68:6c:75:44:21:1e:b9:9d:71:
b6:92:14:b0:f9:1a:30:90:2d:c6:25:45:2f:33:88:
7b:51:19:4e:ff:bb:c3:2e:28:20:4e:e7:b9:d8:d3:
fd:57:7c:22:1a:28:e7:a2:2b:78:d4:8c:59:c5:94:
dd:f8:c6:28:38:05:2c:ea:4b:c5:41:e6:8b:7e:46:
00:03:6c:89:bc:84:f5:bf:a3:86:1b:d9:eb:9d:af:
b2:73:23:ad:12:d7:51:3b:21:e7:7f:92:3a:3c:bd:
da:95:dc:56:eb:d3:28:51:31:6e:49:a9:e3:4d:29:
9e:ff:ac:21:7a:1c:79:a4:9c:3b:6d:e2:8e:8e:1c:
14:6a:fd:71:37:44:b5:32:af:27:74:44:6c:c2:d9:
f1:7e:f9:2d:16:89:d5:fb:e9:26:f3:c6:23:90:36:
19:90:88:b8:4c:8c:4a:13:29:5b:e9:a7:5f:a8:7e:
7f:93:6d:2a:5a:f7:99:cc:71:54:fb:56:4c:71:4a:
86:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EE:77:E3:FF:CF:F7:66:51:E6:DB:02:0D:60:51:BD:C5:DD:10:BF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/A-534__P92ZR5tsCDWBRvcXdEL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.171.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:7c:58:a5:01:0d:bf:8e:40:84:58:5d:ce:ac:6e:6d:73:24:
83:e8:f4:3b:e5:18:ca:9f:2a:d1:3a:0c:0d:cc:6d:27:f5:bf:
83:7d:bc:99:5c:47:3b:8f:0d:38:15:c2:8d:14:aa:bf:5d:9f:
38:c6:1c:b1:bd:b1:e4:7c:28:bc:63:b4:02:ee:9e:a9:44:68:
50:5d:36:5c:97:3a:bf:8a:1f:db:8a:01:ea:ed:18:d1:f2:d7:
14:4e:97:a8:04:06:d9:02:cb:1c:be:c4:2c:f7:4b:fe:04:67:
46:75:88:b4:9c:90:47:f7:ed:42:61:9b:2f:d6:c3:5f:f0:d8:
7f:15:4e:95:31:55:03:25:59:33:a9:cc:37:37:b8:86:c5:f1:
6d:e2:24:ca:ba:79:c8:a0:65:27:46:36:f7:6a:04:4e:96:cd:
0a:72:7c:8f:e0:ca:76:97:79:64:49:ed:ef:80:b8:d0:be:8e:
79:4b:35:36:a6:81:89:35:d6:38:7c:33:79:31:01:02:1c:ea:
11:2f:06:74:ae:2a:fc:af:78:ba:f4:73:aa:c9:e9:1b:5a:ba:
11:44:49:a7:52:be:d4:22:44:47:f5:25:f7:31:c7:a6:9a:10:
9e:6f:03:a2:f2:94:0f:28:bf:7f:c1:fe:61:5f:01:ff:f4:7f:
2d:31:1c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:51 2026 by rpki-client