Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/krYA9kCbMaHNSI3OQFVP_J6sn6E.roa
File: krYA9kCbMaHNSI3OQFVP_J6sn6E.roa (raw, json)
Hash identifier: uK1oHX4C6jvDu53+JOAVxyEHJ3sWepsMqM595b4yrqQ=
Subject key identifier: 92:B6:00:F6:40:9B:31:A1:CD:48:8D:CE:40:55:4F:FC:9E:AC:9F:A1
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019E83B265E75AF357FE592BAA818FF6E8FD
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/krYA9kCbMaHNSI3OQFVP_J6sn6E.roa
Signing time: Mon 01 Jun 2026 14:59:27 +0000
ROA not before: Mon 01 Jun 2026 14:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153034
IP address blocks: 216.236.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:b2:65:e7:5a:f3:57:fe:59:2b:aa:81:8f:f6:e8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Jun 1 14:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92b600f6409b31a1cd488dce40554ffc9eac9fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:0a:68:97:14:62:97:fa:4f:c8:52:66:9c:
bc:86:58:87:24:40:56:90:84:0e:2e:a2:5d:cf:35:
a3:ce:6e:00:cd:ac:86:70:45:66:3d:b7:20:4f:15:
88:55:7e:53:7f:47:f5:a2:b5:c3:74:41:d8:fa:ed:
c8:90:56:d1:9e:6f:f6:01:0e:5c:e6:c8:3c:99:e1:
fe:56:1b:af:59:7f:fd:8f:a3:71:ac:bb:1f:5e:8e:
1e:6b:34:19:c1:d3:cc:d9:20:11:a5:ad:31:7f:31:
ad:27:5a:f3:c6:e5:d3:91:81:0a:e2:62:3e:95:5e:
4d:e7:b8:e2:ca:af:49:2f:e6:0b:df:76:2e:83:8e:
b4:2c:d0:6c:45:c7:d6:84:8a:a7:b0:df:a3:eb:3b:
f1:3a:00:8e:30:b3:1f:d6:80:a3:76:20:d0:8e:06:
d6:6d:ff:39:9e:f0:75:05:ed:e9:23:17:1a:96:73:
c5:74:67:09:a5:1a:c7:04:f4:23:f3:0d:da:8b:9a:
aa:f0:39:30:f8:82:7a:1c:cd:26:26:1d:a5:7b:8f:
8f:a7:58:e9:1f:2e:ea:3c:76:c0:f4:30:38:b6:04:
b7:01:6f:e9:79:03:fd:a4:c1:ba:b7:67:75:a4:d5:
81:2f:18:58:c4:05:96:ca:f4:98:ce:a9:af:82:24:
b5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B6:00:F6:40:9B:31:A1:CD:48:8D:CE:40:55:4F:FC:9E:AC:9F:A1
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/krYA9kCbMaHNSI3OQFVP_J6sn6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.236.48.0/24
Signature Algorithm: sha256WithRSAEncryption
00:65:78:11:38:3d:f4:28:9f:80:e3:6f:9b:1c:32:38:f2:be:
ac:22:a4:c5:51:a8:ed:a7:8b:5e:8c:8c:90:ae:a7:fd:94:70:
ec:99:7d:06:8b:98:c7:28:de:59:41:5a:d4:cf:9d:d8:6d:c7:
87:0f:7a:fd:40:e5:34:31:8b:c4:67:ea:a7:af:a9:4b:3f:81:
ff:bb:47:c8:92:30:a2:75:fe:c1:59:c8:8f:ad:a1:a1:9c:5d:
89:ae:9c:6f:4d:1f:ed:48:92:17:6a:8c:81:fa:7c:85:15:c2:
b6:df:0f:98:91:63:31:48:b3:73:fb:17:c5:3f:b6:6d:5d:ca:
14:f7:c5:59:d6:44:83:d2:5f:3a:f8:19:e9:fb:f9:e3:4a:3f:
9e:04:32:48:45:00:ea:b9:21:69:37:1b:f7:05:69:7b:6a:97:
68:7d:11:08:7b:0d:c8:07:b0:f5:4d:c3:db:62:a0:00:62:c1:
b9:f5:9b:3c:9e:d1:cd:d3:9e:70:06:c3:2d:a4:33:f6:9b:7e:
0e:9c:46:0b:a7:e2:12:08:2d:2b:3d:ee:7d:da:23:9c:d3:7b:
67:d8:62:27:1a:ed:42:2b:7c:61:7e:89:d8:ec:c0:52:e9:8e:
2d:34:d1:a4:44:a1:ef:ff:19:ed:0d:b2:d4:ac:0a:39:6e:1e:
d6:d6:a8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:35 2026 by rpki-client