Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/X-38Dcn5Sr1hS2PubyuiQRcFLEk.roa
File: X-38Dcn5Sr1hS2PubyuiQRcFLEk.roa (raw, json)
Hash identifier: quWY8BzYVuUN4cgePDcfO3N8jJ70kmqkmneXuYGz5aY=
Subject key identifier: 5F:ED:FC:0D:C9:F9:4A:BD:61:4B:63:EE:6F:2B:A2:41:17:05:2C:49
Certificate issuer: /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Certificate serial: 019CE2CC6108B2D232EA408322E8407BFDBC
Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/X-38Dcn5Sr1hS2PubyuiQRcFLEk.roa
Signing time: Thu 12 Mar 2026 16:06:10 +0000
ROA not before: Thu 12 Mar 2026 16:06:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211261
IP address blocks: 92.246.82.0/24 maxlen: 24
92.246.83.0/24 maxlen: 24
103.226.192.0/24 maxlen: 24
103.226.194.0/23 maxlen: 23
103.229.168.0/24 maxlen: 24
103.229.170.0/24 maxlen: 24
103.229.171.0/24 maxlen: 24
185.117.45.0/24 maxlen: 24
185.117.46.0/24 maxlen: 24
185.117.47.0/24 maxlen: 24
185.145.68.0/24 maxlen: 24
185.145.69.0/24 maxlen: 24
185.145.70.0/24 maxlen: 24
185.145.71.0/24 maxlen: 24
185.167.181.0/24 maxlen: 24
185.201.4.0/24 maxlen: 24
185.204.200.0/24 maxlen: 24
185.204.201.0/24 maxlen: 24
185.204.203.0/24 maxlen: 24
185.223.176.0/24 maxlen: 24
185.223.177.0/24 maxlen: 24
185.223.179.0/24 maxlen: 24
185.237.212.0/24 maxlen: 24
185.237.213.0/24 maxlen: 24
185.237.214.0/24 maxlen: 24
2a07:4640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:cc:61:08:b2:d2:32:ea:40:83:22:e8:40:7b:fd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Validity
Not Before: Mar 12 16:06:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fedfc0dc9f94abd614b63ee6f2ba24117052c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:bb:9f:19:7f:8a:ad:49:cd:5c:25:8e:89:
bf:05:b7:61:59:3b:dc:8b:7d:c5:04:58:dc:db:36:
92:6f:92:91:5f:28:15:90:14:2f:2a:dd:0b:a9:23:
39:c0:8b:6f:2e:f8:41:8f:fb:91:d2:3b:5c:f9:26:
b1:99:d8:04:f4:fc:9e:67:88:4b:31:dd:04:f8:4d:
7b:22:a9:e0:6a:3d:5f:0f:d4:86:6e:a0:69:b9:7b:
38:5c:15:0f:8f:35:8b:6b:00:74:e5:8a:25:a3:7d:
2b:3a:30:6e:8c:e0:f6:46:66:4f:53:3c:0d:2f:92:
7f:1d:77:46:65:26:e4:1a:48:38:ca:c9:da:bb:e5:
9f:06:7b:7e:0b:d7:f3:43:b0:dc:01:7d:89:9d:65:
7b:db:54:de:94:7a:2e:13:f6:55:76:50:34:81:8b:
76:24:40:2b:40:e8:30:f9:8d:ce:35:26:01:36:dc:
c7:0a:fd:31:6a:be:29:b8:86:db:20:08:5f:1e:b9:
b7:06:1d:e1:32:2a:7d:0f:d6:33:11:f0:33:69:9e:
15:af:76:24:4f:32:eb:8d:6d:66:97:14:af:d8:5c:
a7:2a:76:ba:0a:91:15:0e:c2:44:4d:53:d8:5c:43:
50:d3:13:54:ff:b4:ad:5f:3e:6f:3a:ca:f5:ef:a5:
70:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:ED:FC:0D:C9:F9:4A:BD:61:4B:63:EE:6F:2B:A2:41:17:05:2C:49
X509v3 Authority Key Identifier:
keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/X-38Dcn5Sr1hS2PubyuiQRcFLEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.82.0/23
103.226.192.0/24
103.226.194.0/23
103.229.168.0/24
103.229.170.0/23
185.117.45.0-185.117.47.255
185.145.68.0/22
185.167.181.0/24
185.201.4.0/24
185.204.200.0/23
185.204.203.0/24
185.223.176.0/23
185.223.179.0/24
185.237.212.0-185.237.214.255
IPv6:
2a07:4640::/29
Signature Algorithm: sha256WithRSAEncryption
c3:fd:48:31:46:97:fc:a4:40:5d:70:e1:6d:0b:8f:e9:72:c7:
8c:c6:40:b2:50:96:40:5c:78:13:07:c1:1a:24:99:1d:46:f4:
99:ad:8c:8f:61:69:dd:3a:9c:4f:21:ed:88:60:01:09:74:f4:
71:bd:d6:d2:a5:83:0e:fa:34:87:c4:27:f5:43:cc:23:76:c8:
6e:e6:1a:5f:39:05:23:ca:d8:ee:09:a8:eb:bd:15:9b:a9:7d:
8b:65:a6:c2:76:61:11:6e:cc:e5:94:8d:99:b5:ad:c7:0c:11:
17:79:29:a7:36:8a:b1:a1:16:f0:b7:f0:5e:c2:f1:b5:2e:36:
c0:a3:8d:ce:07:ce:20:54:c8:3d:73:14:2c:bd:9b:63:8d:90:
a9:0a:a0:ef:0e:bd:ff:1f:b8:a3:66:c2:0e:b1:0f:3f:2b:fd:
3b:24:b1:07:27:91:d2:25:df:35:8f:08:0c:35:4c:96:c2:39:
f2:76:a8:ee:42:46:0d:90:00:7b:9d:8e:30:2d:dc:f7:d4:fa:
5d:2c:cc:31:c3:dc:1c:80:94:c2:38:17:59:88:ef:61:fc:fc:
0e:8e:3a:34:fc:87:27:e9:ca:70:aa:a8:5f:85:c8:8e:4d:21:
24:2e:08:86:90:28:25:4e:f9:46:a2:72:be:67:4e:a2:32:35:
a0:91:e2:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 15 09:46:43 2026 by rpki-client