Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/cC6SDRV9V0p2_NMV4sw_ptq5Hlo.roa
File: cC6SDRV9V0p2_NMV4sw_ptq5Hlo.roa (raw, json)
Hash identifier: jEMYUPIGrPy+Y+xLvCOsQ36XF8oj9iEL636o4Kzme40=
Subject key identifier: 70:2E:92:0D:15:7D:57:4A:76:FC:D3:15:E2:CC:3F:A6:DA:B9:1E:5A
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 019D33745F134D5B3F5136491EC9B1417517
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/cC6SDRV9V0p2_NMV4sw_ptq5Hlo.roa
Signing time: Sat 28 Mar 2026 07:59:17 +0000
ROA not before: Sat 28 Mar 2026 07:59:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22773
IP address blocks: 92.51.32.0/22 maxlen: 22
92.51.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:74:5f:13:4d:5b:3f:51:36:49:1e:c9:b1:41:75:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Mar 28 07:59:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=702e920d157d574a76fcd315e2cc3fa6dab91e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7b:1f:db:d3:53:9e:fe:a8:1b:72:57:71:fd:
66:dd:15:ff:be:29:77:1d:3b:db:1c:f4:5e:47:8b:
52:aa:a8:46:ea:f0:11:8e:47:92:ea:4b:65:b1:2f:
69:59:f9:db:7b:cd:6f:ca:c1:2b:46:99:09:c5:75:
74:96:9d:7f:4e:1e:c6:a7:6c:2e:63:01:19:67:8a:
e0:0f:1c:89:1f:df:fa:55:ff:b9:1b:00:17:d1:a1:
b4:5f:81:b9:aa:d7:28:2b:a5:a4:68:9f:11:19:1a:
4c:e5:42:20:c2:09:e4:ca:a9:ef:f7:6c:a9:a7:8c:
f1:35:c2:a5:4a:ed:7f:26:8f:44:36:5e:e9:ed:52:
81:c4:f9:c4:83:a1:07:1e:09:d6:2c:0a:d2:4c:d8:
9d:fa:44:35:fc:da:29:11:48:60:5d:58:7f:d4:c8:
8e:da:98:75:5d:e7:af:07:98:48:55:db:92:2a:42:
df:35:51:68:3d:4a:ca:72:d8:a3:9b:7e:13:90:5f:
f7:c3:45:3a:1c:7a:c3:20:37:37:91:c2:2e:bf:91:
ca:23:d6:2f:4d:20:36:92:fe:c1:cd:c3:5a:18:61:
96:b3:b9:c6:0f:f6:af:82:46:70:ea:20:c8:f7:40:
80:d8:b7:24:e2:d4:11:20:71:39:29:97:90:ca:8b:
a8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2E:92:0D:15:7D:57:4A:76:FC:D3:15:E2:CC:3F:A6:DA:B9:1E:5A
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/cC6SDRV9V0p2_NMV4sw_ptq5Hlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.32.0/22
92.51.40.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:4a:b8:e7:0d:ae:1b:12:28:7c:77:e5:d2:60:22:1e:bb:c5:
1d:2c:cd:8a:50:60:06:ef:e5:ce:c2:47:77:fb:10:5c:b4:78:
ba:ef:e2:80:ae:d1:e7:12:8a:48:36:df:72:b5:f6:3c:00:16:
bb:08:a0:72:f8:44:bb:cd:fb:68:af:78:9e:66:da:15:24:38:
06:c2:6d:6e:75:b5:1b:9b:37:04:ab:5b:49:db:ff:b1:73:af:
37:1e:a1:f0:6c:fb:e3:b4:f6:dc:73:cc:15:96:c9:cd:28:5d:
ae:a1:9f:7e:71:da:e3:ec:d8:78:25:a9:9e:ff:14:4b:7d:8f:
ca:14:fe:cb:39:e4:01:a5:dd:6d:8a:22:b4:76:bf:23:f7:4f:
0d:5f:30:a6:94:9e:14:a0:6c:ca:11:23:15:23:e5:e8:45:54:
fb:7d:d6:cc:46:6c:b4:9f:3c:8d:6e:a9:21:98:e0:cd:23:77:
95:9c:7e:74:11:bf:cc:4a:06:cd:6d:1d:58:fc:d1:1b:3d:7f:
5a:d8:c5:3c:84:e1:1b:33:b3:69:48:d5:d3:3e:db:a0:32:d4:
d8:31:d3:0f:c9:43:c1:a7:6a:d5:14:1f:a7:ea:a0:e6:33:da:
ee:72:c0:41:9c:cb:73:d4:ba:c1:a4:4a:00:8e:2c:4d:87:86:
02:b1:e6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 15:21:55 2026 by rpki-client