Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/wya558PIHgik2HyMit4xj4j_L1k.roa
File: wya558PIHgik2HyMit4xj4j_L1k.roa (raw, json)
Hash identifier: SJ62zMEvO9Yo1+2NTfsUVkoZy7DSc5bDTEAMMmEExNg=
Subject key identifier: C3:26:B9:E7:C3:C8:1E:08:A4:D8:7C:8C:8A:DE:31:8F:88:FF:2F:59
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 01A0F8140FBD1DA2F0BF4AED4CCE8FAABD1B
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/wya558PIHgik2HyMit4xj4j_L1k.roa
Signing time: Thu 01 Oct 2026 15:27:39 +0000
ROA not before: Thu 01 Oct 2026 15:27:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58291
IP address blocks: 92.60.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:14:0f:bd:1d:a2:f0:bf:4a:ed:4c:ce:8f:aa:bd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Oct 1 15:27:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c326b9e7c3c81e08a4d87c8c8ade318f88ff2f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:40:3e:1a:3d:e1:85:7a:95:ad:d6:aa:38:
81:7d:65:5c:d5:64:34:35:41:3a:3c:5f:d5:18:05:
ce:a7:92:1f:8a:31:97:d6:4f:e0:21:09:78:0c:76:
7a:8c:24:f7:8b:95:3a:93:ac:1a:a8:b8:80:cf:95:
22:4b:0c:65:b9:15:5a:c7:e5:0f:da:25:87:85:95:
55:57:36:7e:73:6f:bc:a7:c9:86:04:67:6b:8d:97:
34:81:98:56:a0:15:45:0c:54:89:37:aa:f3:88:2a:
15:b8:e6:d2:da:9c:eb:38:ab:27:a8:1e:ac:8f:ef:
c5:09:46:b0:a3:cb:19:9c:f1:2d:8a:7b:5b:11:98:
53:3c:98:3e:2c:19:58:cf:05:6e:64:4d:26:0a:4f:
09:32:8e:f3:b3:c5:26:83:d3:78:fc:65:23:20:d2:
b9:8d:86:ac:7d:95:0d:a8:61:50:f6:5d:0d:38:ee:
66:a0:86:c8:fc:95:2d:90:d5:57:59:b5:4d:2c:67:
80:2d:db:55:19:a1:bd:c5:6f:ed:a7:4a:c9:9d:1d:
e8:21:8f:b2:93:51:f3:9f:6a:40:e0:7e:3e:2e:87:
f5:a6:5e:62:fc:bf:b7:28:96:fb:6f:64:bd:b0:ed:
be:c0:f9:fb:d2:38:fa:2f:1d:8f:ab:16:21:bd:a6:
ec:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:26:B9:E7:C3:C8:1E:08:A4:D8:7C:8C:8A:DE:31:8F:88:FF:2F:59
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/wya558PIHgik2HyMit4xj4j_L1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.66.0/24
Signature Algorithm: sha256WithRSAEncryption
02:fb:63:fa:c7:3f:a5:4d:d0:df:c9:33:c2:f0:36:78:5a:fb:
4c:34:ee:fd:a2:1d:57:65:3d:a5:9b:94:ba:3a:f6:5c:b0:2c:
aa:42:a9:cf:bd:3f:c2:5f:e0:3d:e3:0b:67:c1:45:76:ff:4b:
a3:1d:9d:a9:8b:59:8b:3f:f7:4f:ce:fd:ab:7b:7d:f4:a5:54:
7b:61:31:aa:43:6c:23:7e:0e:f6:ef:d1:a4:d1:0c:ae:fd:bc:
b1:ca:5b:75:27:f1:4d:85:c6:6a:fc:e5:25:2c:e5:00:22:9c:
cb:82:01:8a:e3:c1:da:5d:a3:f9:f4:70:51:ff:86:cc:55:c1:
0a:85:9e:7f:b6:d3:10:db:81:8a:a0:1a:f2:38:ae:ea:2f:82:
78:8d:8b:9a:10:a6:07:ad:40:0d:c8:c8:b7:bc:77:8e:05:b1:
d9:2d:24:a3:8e:f3:c4:9e:1a:5c:c4:d9:71:42:62:2c:18:12:
77:bf:49:fe:1d:38:4b:61:ca:19:0b:6b:7a:85:a5:a4:a6:29:
72:37:30:bd:c9:a4:25:29:bd:e1:be:3c:57:79:72:9a:c6:1c:
d0:2e:68:b7:fc:ad:33:37:c2:9e:56:28:47:08:52:6f:24:e6:
2a:32:ff:a2:86:49:40:11:f1:f8:1e:4f:35:df:35:12:b8:e0:
11:6f:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:04 2026 by rpki-client