Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/0rYh00huvnBQKkQwlK1vCqkvoBk.roa
File: 0rYh00huvnBQKkQwlK1vCqkvoBk.roa (raw, json)
Hash identifier: nYPeZfJ/Ihf6kd7dZ2qej/vMGmICd+Z5Zk5jSeYL7ps=
Subject key identifier: D2:B6:21:D3:48:6E:BE:70:50:2A:44:30:94:AD:6F:0A:A9:2F:A0:19
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 01A17747431E0D9786BB01A6F4015CBE3BEF
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/0rYh00huvnBQKkQwlK1vCqkvoBk.roa
Signing time: Mon 26 Oct 2026 08:15:21 +0000
ROA not before: Mon 26 Oct 2026 08:15:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136809
IP address blocks: 92.60.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:47:43:1e:0d:97:86:bb:01:a6:f4:01:5c:be:3b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Oct 26 08:15:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2b621d3486ebe70502a443094ad6f0aa92fa019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6e:8d:35:53:81:8d:e0:4f:64:8c:a7:62:fe:
a7:78:b5:de:c4:2f:ab:36:51:6b:7b:61:f2:2d:80:
62:61:4e:8f:25:eb:bb:97:41:37:9b:ca:fd:91:e2:
24:67:7d:0d:05:09:be:6d:45:9e:a6:c2:80:20:df:
25:01:b1:27:5d:6c:6d:fd:c6:37:6a:a1:4a:40:80:
11:ed:dd:34:23:53:ad:fd:0b:75:51:d6:3c:88:91:
77:59:f4:5f:67:32:d1:aa:5b:90:0a:e0:e6:cf:ab:
a1:8f:3e:20:11:3d:3c:e4:f2:dc:e9:3e:74:4f:38:
b4:fe:45:eb:ef:59:60:37:1e:ec:cd:d9:4b:54:f1:
75:53:26:e3:db:8d:51:f5:55:35:29:41:12:8d:69:
11:aa:07:89:42:a8:40:00:d3:41:e7:25:c3:bb:2f:
d4:1d:8d:f7:74:cd:e6:8b:c2:97:12:95:e8:07:1a:
5f:cc:ee:f0:00:42:70:58:7b:bd:c4:c5:a1:40:73:
be:97:13:12:17:6e:a6:49:e3:2e:26:d9:dd:fe:ac:
4e:bb:df:a6:b3:29:90:15:b8:eb:2a:ad:04:27:ab:
e4:2d:89:ad:e8:c8:ce:4e:a7:0f:6a:f5:b1:f8:b7:
ef:91:6e:67:fe:2f:36:be:d7:c6:20:c5:1f:d6:c4:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B6:21:D3:48:6E:BE:70:50:2A:44:30:94:AD:6F:0A:A9:2F:A0:19
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/0rYh00huvnBQKkQwlK1vCqkvoBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.76.0/24
Signature Algorithm: sha256WithRSAEncryption
19:30:6d:fd:3f:be:6f:46:0c:85:11:46:01:e4:2a:eb:22:49:
75:ce:67:44:94:14:2a:d0:57:7f:0a:e7:ea:e7:d7:51:7f:d7:
c7:f9:c1:76:8f:6c:e0:5b:e1:f2:c2:9b:80:76:9c:d3:61:6f:
3b:2f:99:8e:6f:b9:58:7e:44:c9:ae:a4:a3:e1:75:4a:75:a0:
55:ee:d3:25:81:36:10:cb:0c:dc:95:49:6f:62:6e:14:7d:0e:
e3:9b:58:db:2f:90:17:02:d7:8f:eb:61:f3:80:4c:36:c8:2e:
e4:ef:eb:77:cd:07:b8:08:83:43:7d:03:d4:e5:1a:a7:97:64:
43:5d:ad:d0:7c:f8:a9:7f:6e:c6:3c:5f:3e:c2:ce:40:72:11:
31:03:6b:2f:07:03:cb:86:f0:3b:02:c0:b1:84:cf:cd:59:fd:
f4:27:6b:6b:f6:d8:c3:4d:5d:a0:ab:d6:9e:36:91:52:30:16:
ca:30:97:b0:d4:1e:4d:59:04:6c:fa:9a:bb:a8:33:63:cc:d8:
60:6b:67:eb:76:8e:af:97:d4:99:b2:9d:79:06:34:cd:99:a3:
67:d4:8f:f6:0c:bf:50:72:be:41:51:b9:56:d5:89:63:cd:0e:
ee:75:6f:fd:e0:4c:5a:ed:0b:ef:4d:e8:3b:12:f4:8c:da:3f:
32:af:48:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:17:47 2026 by rpki-client