Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/xMWnV7ol9l_wC_K2pCVvOegFcOM.roa
File: xMWnV7ol9l_wC_K2pCVvOegFcOM.roa (raw, json)
Hash identifier: wuyIQgfX1EXhzZlkZ7KFL4OhLtwA6X9esaNzluB3laQ=
Subject key identifier: C4:C5:A7:57:BA:25:F6:5F:F0:0B:F2:B6:A4:25:6F:39:E8:05:70:E3
Certificate issuer: /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial: 01A09FE6A2A6FEDC96AAB53CE217F0A19F92
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/xMWnV7ol9l_wC_K2pCVvOegFcOM.roa
Signing time: Mon 14 Sep 2026 12:31:27 +0000
ROA not before: Mon 14 Sep 2026 12:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219062
IP address blocks: 94.229.92.0/24 maxlen: 24
94.229.93.0/24 maxlen: 24
94.229.94.0/24 maxlen: 24
94.229.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:e6:a2:a6:fe:dc:96:aa:b5:3c:e2:17:f0:a1:9f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Validity
Not Before: Sep 14 12:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4c5a757ba25f65ff00bf2b6a4256f39e80570e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:72:56:9a:e0:a1:b5:ee:3a:7c:ab:76:1d:
ec:6b:54:23:40:bd:e4:6c:89:d6:9c:d1:ac:9b:98:
23:99:c3:88:3b:0f:9c:b4:95:d4:43:25:36:52:99:
ea:84:53:be:f7:e6:3d:1f:94:5e:9c:12:63:ab:23:
2c:e0:40:30:44:1f:62:67:53:4b:fb:7c:c6:ae:21:
53:02:65:56:db:da:17:34:35:b0:69:7e:01:b3:cc:
bc:9e:7b:be:59:7e:ca:dc:97:67:f0:93:1a:3a:e4:
34:d6:7b:7b:b9:47:df:65:3a:44:42:4a:a0:b0:34:
6e:2e:0e:68:b8:d5:2d:09:a2:69:d8:7b:9d:bd:c9:
d3:0f:a4:91:63:6c:60:28:06:82:32:8e:5d:0b:6d:
e7:3d:95:0a:3d:a6:2c:ac:e7:b4:ef:35:4e:9f:7c:
7e:1b:19:df:a4:16:53:bd:54:7b:9a:28:88:1a:86:
38:5c:98:ac:7c:4f:52:c6:01:77:90:22:68:cc:f6:
7d:68:07:51:08:f8:45:09:69:6b:27:fc:ca:84:d9:
e9:7c:6f:d2:dd:9c:e7:0c:36:d6:e2:af:46:e0:6d:
6f:67:5a:43:3f:e7:55:89:19:9f:68:66:07:44:27:
53:f8:41:fa:c5:64:e6:d6:f5:26:e6:57:d0:8c:56:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C5:A7:57:BA:25:F6:5F:F0:0B:F2:B6:A4:25:6F:39:E8:05:70:E3
X509v3 Authority Key Identifier:
keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/xMWnV7ol9l_wC_K2pCVvOegFcOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.92.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:c8:74:bd:80:51:30:98:9a:64:82:5c:94:7b:dd:eb:38:c1:
c9:f0:bb:66:df:4c:4c:2b:b0:b7:e6:e9:b3:0e:1f:2c:75:cd:
27:1c:02:76:49:e3:c6:de:5f:6c:fd:65:01:bc:e9:73:ca:94:
7e:d4:44:59:f8:53:18:3b:27:4a:aa:3f:8d:8e:5b:65:fa:fd:
92:14:2a:de:c1:4e:9a:b8:b7:bb:c9:72:fd:26:fd:a9:69:06:
68:9f:9a:35:b5:9b:22:9e:dd:63:2f:d2:ca:20:9d:88:f4:3a:
2b:6b:e3:29:45:94:f6:0c:51:05:45:f0:98:c1:5a:07:f5:5e:
35:64:d2:86:97:c7:b3:fd:a2:8d:04:34:f8:af:90:b0:ab:d6:
cd:db:08:3c:6d:79:29:dc:08:d8:9a:01:22:b9:50:19:94:73:
cc:80:09:e1:7c:6f:41:72:42:f3:17:8f:2f:8c:fd:df:12:95:
c2:13:e3:76:b1:b9:87:8a:25:c8:08:ab:44:9a:c4:d9:b3:0e:
e6:7c:e7:4e:09:ac:9a:75:92:d1:53:41:ae:8b:e2:6b:23:f6:
41:f8:d7:ea:9c:63:57:ca:44:96:c8:b2:76:63:f5:13:11:31:
d8:16:a5:16:33:79:ca:47:56:51:11:db:a7:07:49:45:48:dd:
9f:49:ee:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:49 2026 by rpki-client