Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/0pCRSIeQHC7YaWamG206JyNwoeI.roa
File: 0pCRSIeQHC7YaWamG206JyNwoeI.roa (raw, json)
Hash identifier: jcRtiwnugKUIWBPGSky6TfPaJBIGB0rP3CB843wuTFM=
Subject key identifier: D2:90:91:48:87:90:1C:2E:D8:69:66:A6:1B:6D:3A:27:23:70:A1:E2
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019EF940CF726E09C205F6640F9ACD88BCDC
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/0pCRSIeQHC7YaWamG206JyNwoeI.roa
Signing time: Wed 24 Jun 2026 10:50:34 +0000
ROA not before: Wed 24 Jun 2026 10:50:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204154
IP address blocks: 92.118.10.0/24 maxlen: 24
132.243.28.0/23 maxlen: 23
2a0c:5d00:3009::/48 maxlen: 48
2a0c:5d00:ff07::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:40:cf:72:6e:09:c2:05:f6:64:0f:9a:cd:88:bc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jun 24 10:50:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d290914887901c2ed86966a61b6d3a272370a1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dc:9c:b3:4c:1a:9a:c6:95:d7:82:96:4f:3f:
df:d4:3a:cc:31:cf:fb:01:f8:a0:69:f5:05:d5:f3:
67:af:de:da:65:3a:e6:e6:84:43:89:99:d1:6e:6d:
73:47:de:d2:ab:e5:97:98:46:2c:7c:0a:4d:2a:f7:
50:2d:b6:97:d5:e3:14:6c:b9:c8:75:5a:10:3b:ed:
52:1a:ee:43:5d:28:0a:3c:67:d0:2e:71:57:83:57:
f2:20:e6:4b:a5:7f:fe:ba:09:74:f5:83:e9:6c:1b:
0f:4c:75:d9:1e:a2:de:9d:a4:44:a9:41:25:cc:85:
88:6c:c0:03:0c:cc:d2:ab:90:0d:35:31:3c:1d:93:
3d:32:78:f3:67:82:7b:d8:2d:59:7f:95:a2:c6:20:
e4:53:68:e8:04:08:18:84:e5:eb:f2:6a:1b:2b:94:
f6:45:15:85:63:a8:ed:aa:ba:e9:8c:df:29:76:2b:
78:5b:6e:9f:95:e3:b7:2c:36:d9:9e:79:ef:48:da:
62:26:28:c7:0f:d5:42:4b:af:d4:c0:37:0c:ca:d0:
c6:1e:f6:38:d5:88:6f:a1:b9:9c:3a:cc:71:78:6f:
ec:07:f4:53:c5:c8:d8:a8:f0:9a:5e:21:2f:ac:32:
35:28:fb:57:35:68:57:47:56:a4:53:da:49:be:19:
16:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:90:91:48:87:90:1C:2E:D8:69:66:A6:1B:6D:3A:27:23:70:A1:E2
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/0pCRSIeQHC7YaWamG206JyNwoeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.10.0/24
132.243.28.0/23
IPv6:
2a0c:5d00:3009::/48
2a0c:5d00:ff07::/48
Signature Algorithm: sha256WithRSAEncryption
93:e6:a7:da:11:fd:43:b2:7f:7a:6b:b0:17:64:e3:42:48:c3:
65:a7:2a:4b:1c:84:b0:ce:a1:5e:46:0f:bc:21:9f:cb:a0:49:
ad:89:3e:a3:c0:e4:67:7c:f2:8a:9a:52:0c:ae:1b:c9:27:00:
5f:b2:0c:2e:f8:78:26:29:df:59:90:0c:81:d5:d7:27:35:4f:
19:d2:71:d4:63:3f:58:bb:97:42:58:ff:0b:8f:70:98:f2:78:
4d:d0:ca:f6:1e:bc:1e:a2:bc:91:36:5b:86:6e:da:34:3c:b2:
4a:dd:a9:e1:d9:bb:31:6c:49:b9:f3:de:62:ad:a2:77:9c:46:
83:7e:22:29:4e:16:c9:3c:2b:e0:49:d0:53:d7:f9:87:15:fa:
e2:c3:62:ce:96:2c:f5:7e:2b:f9:6c:fe:29:c4:5c:3e:a8:6f:
ec:87:1d:a9:06:9b:8a:fc:2f:6d:f8:3f:e7:f1:7c:ca:00:99:
21:9d:0d:d7:6f:4c:77:8e:f7:14:cc:e7:51:44:cc:9e:67:82:
8b:c0:ff:f3:bf:08:4a:af:e8:05:68:ac:3b:cf:33:75:23:57:
96:c0:22:74:e1:4b:e6:95:3c:c4:fb:01:6c:b8:69:36:42:7a:
8b:ae:77:81:49:4b:a0:c4:54:51:c2:97:14:e4:a5:99:75:8c:
ff:db:c5:9a
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ75QM9ybgnCBfZkD5rNiLzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjYwNjI0MTA1MDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjkwOTE0ODg3OTAxYzJlZDg2OTY2YTYxYjZkM2EyNzIzNzBhMWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dycs0wamsaV14KWTz/f1DrMMc/7
AfigafUF1fNnr97aZTrm5oRDiZnRbm1zR97Sq+WXmEYsfApNKvdQLbaX1eMUbLnI
dVoQO+1SGu5DXSgKPGfQLnFXg1fyIOZLpX/+ugl09YPpbBsPTHXZHqLenaREqUEl
zIWIbMADDMzSq5ANNTE8HZM9MnjzZ4J72C1Zf5WixiDkU2joBAgYhOXr8mobK5T2
RRWFY6jtqrrpjN8pdit4W26fleO3LDbZnnnvSNpiJijHD9VCS6/UwDcMytDGHvY4
1YhvobmcOsxxeG/sB/RTxcjYqPCaXiEvrDI1KPtXNWhXR1akU9pJvhkWfwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFNKQkUiHkBwu2GlmphttOicjcKHiMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvMHBDUlNJZVFIQzdZYVdhbUcyMDZKeU53b2VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAXHYKAwQB
hPMcMBgEAgACMBIDBwAqDF0AMAkDBwAqDF0A/wcwDQYJKoZIhvcNAQELBQADggEB
AJPmp9oR/UOyf3prsBdk40JIw2WnKkschLDOoV5GD7whn8ugSa2JPqPA5Gd88oqa
UgyuG8knAF+yDC74eCYp31mQDIHV1yc1TxnScdRjP1i7l0JY/wuPcJjyeE3QyvYe
vB6ivJE2W4Zu2jQ8skrdqeHZuzFsSbnz3mKtonecRoN+IilOFsk8K+BJ0FPX+YcV
+uLDYs6WLPV+K/ls/inEXD6ob+yHHakGm4r8L234P+fxfMoAmSGdDddvTHeO9xTM
51FEzJ5ngovA//O/CEqv6AVorDvPM3UjV5bAInThS+aVPMT7AWy4aTZCeouud4FJ
S6DEVFHClxTkpZl1jP/bxZo=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:58 2026 by rpki-client