Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/rDgB1WWhxRGF3eFkqX4VjqEkOcY.roa
File: rDgB1WWhxRGF3eFkqX4VjqEkOcY.roa (raw, json)
Hash identifier: ifAnSGVO73NRoAKq59gXyGui7/GMr2OJw5wHm+/+JP8=
Subject key identifier: AC:38:01:D5:65:A1:C5:11:85:DD:E1:64:A9:7E:15:8E:A1:24:39:C6
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 019FFD1CC070A3755AB67E6155F86A58CCC5
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/rDgB1WWhxRGF3eFkqX4VjqEkOcY.roa
Signing time: Thu 13 Aug 2026 21:52:27 +0000
ROA not before: Thu 13 Aug 2026 21:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5396
IP address blocks: 92.60.67.0/24 maxlen: 24
92.60.68.0/24 maxlen: 24
92.60.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:1c:c0:70:a3:75:5a:b6:7e:61:55:f8:6a:58:cc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Aug 13 21:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac3801d565a1c51185dde164a97e158ea12439c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:8e:d9:82:7c:b2:d3:21:f0:86:a4:cc:fe:
30:a4:da:f8:72:2c:44:b9:04:ca:2d:e5:be:76:a9:
a0:21:05:0a:19:1b:4e:ee:0d:8b:fc:29:b7:1c:0d:
cf:88:21:e4:9b:8b:64:14:f0:b0:e3:aa:11:81:0b:
0d:f4:31:a1:99:17:a3:7c:ef:75:c0:ff:63:e2:6d:
2d:f2:05:b6:4d:3e:ca:a1:1f:90:6a:a9:0a:da:d0:
47:f2:23:ad:53:03:70:f8:54:0d:ad:75:8a:9c:f5:
5e:74:b6:42:1e:3d:f6:67:da:ef:88:3f:5c:42:91:
16:6f:fc:41:85:b9:c0:7b:d6:f1:51:39:21:77:4d:
19:8f:33:05:e8:7d:10:6c:89:80:13:47:19:aa:0e:
09:dc:ce:fa:b0:5c:54:07:44:ab:80:60:5d:03:52:
8d:3f:d9:c9:fc:ae:e6:f0:68:69:c6:13:b5:fb:eb:
29:91:8d:de:26:99:86:e7:12:ff:5e:ad:4f:1f:b0:
04:48:f0:d5:f2:8b:a3:d0:8e:11:bd:c1:af:43:cb:
f1:95:1a:fe:69:4f:10:63:f0:b1:f1:9b:c3:2f:73:
cb:d4:4e:a2:52:e9:ca:5c:2b:c1:8a:35:a1:d0:8f:
07:2e:66:8a:ba:62:39:2c:1a:91:0a:42:6d:91:ce:
7f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:38:01:D5:65:A1:C5:11:85:DD:E1:64:A9:7E:15:8E:A1:24:39:C6
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/rDgB1WWhxRGF3eFkqX4VjqEkOcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.67.0-92.60.68.255
92.60.71.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:54:42:50:39:05:94:14:dc:29:87:17:9f:6a:fb:ee:df:b8:
be:0a:84:71:a1:f3:f9:e2:fd:36:9b:ae:39:a9:2b:df:15:f3:
74:ef:a4:31:96:c0:7c:ea:71:8b:92:e1:e5:00:c4:a2:8c:4c:
71:65:d0:9f:fe:65:b8:c8:9f:2b:61:20:e9:8f:c9:25:bd:51:
98:0f:0b:ad:46:26:a8:a5:ff:10:c4:40:fd:cf:38:f4:d6:fd:
5a:92:ce:58:96:47:15:ab:01:61:c9:f7:a3:fc:0d:b2:93:02:
83:97:cc:9f:af:9d:71:64:c5:84:37:8f:5d:71:15:2c:7e:45:
2e:99:d6:06:20:35:9c:79:c3:21:c1:97:41:14:db:90:c6:e0:
2e:39:7b:8d:d1:45:d4:f7:49:39:d1:e0:fa:c8:74:b4:92:de:
d5:55:2c:5e:01:d5:66:c8:b1:a8:cc:24:ec:c8:ff:af:76:fa:
0d:01:a7:f9:93:0d:d8:0b:35:24:36:3d:a5:20:a5:d2:e7:a3:
1a:91:8c:89:f0:ef:d5:64:71:47:93:04:5f:f3:f2:b2:3e:5b:
a9:5e:0c:a0:e4:84:77:fd:88:13:45:f2:be:51:46:c7:b9:32:
c3:ff:bb:3d:6c:26:4b:54:18:5c:f4:9d:18:fe:0a:66:1c:f0:
89:ee:7b:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 9 23:09:49 2026 by rpki-client