Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/u08NEvufIyYOw5wjByrYL3KDftg.roa
File: u08NEvufIyYOw5wjByrYL3KDftg.roa (raw, json)
Hash identifier: +kuBshu076KXzQxN7e8+v+U/mTU0N1n8TG4+SUR96MM=
Subject key identifier: BB:4F:0D:12:FB:9F:23:26:0E:C3:9C:23:07:2A:D8:2F:72:83:7E:D8
Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89
Certificate serial: 019DB8EEBD294449EBA58DAEEED5C18AE19B
Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/u08NEvufIyYOw5wjByrYL3KDftg.roa
Signing time: Thu 23 Apr 2026 06:02:26 +0000
ROA not before: Thu 23 Apr 2026 06:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198540
IP address blocks: 92.83.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b8:ee:bd:29:44:49:eb:a5:8d:ae:ee:d5:c1:8a:e1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89
Validity
Not Before: Apr 23 06:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb4f0d12fb9f23260ec39c23072ad82f72837ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:fd:7b:c7:81:56:61:91:c0:ca:64:74:56:
e4:64:fd:8a:e0:f6:77:b5:3e:9d:26:93:92:2c:d6:
e7:43:46:6b:7d:86:6b:0d:f8:14:38:a4:cd:22:8a:
a2:d1:57:7e:36:ad:5e:e9:45:f7:22:f2:9a:95:cd:
89:f9:6d:19:a3:8a:51:08:90:0b:b9:11:96:6d:53:
6f:f5:03:52:f0:20:e5:6b:ba:e4:0b:6e:8a:db:a2:
75:87:50:8e:fb:51:55:f1:04:02:6b:bc:ff:9d:31:
86:5c:fe:a8:4c:20:0b:11:0e:ce:05:aa:43:19:f7:
f2:51:14:7b:95:b9:29:fb:50:71:8a:63:94:0a:c7:
8a:5a:72:6d:4e:1c:1d:06:ab:69:c7:3a:2a:45:fe:
6b:dc:2a:7a:8d:81:bf:0d:bf:ad:84:c2:0f:30:c5:
35:82:2d:05:d2:7c:c1:33:ee:36:8a:ca:a8:16:a5:
6c:4c:74:9c:0c:d6:ad:ff:3e:f9:98:6d:63:7e:8c:
92:f1:40:4d:15:db:a4:a9:78:7a:74:9b:e8:50:a8:
23:76:d9:6b:6f:b0:aa:c7:f2:1e:d5:19:99:03:69:
2b:09:69:4e:7b:6b:1b:63:39:8c:ae:0d:20:9e:eb:
a2:9d:78:9e:ff:08:a3:30:67:50:bc:39:06:87:f4:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4F:0D:12:FB:9F:23:26:0E:C3:9C:23:07:2A:D8:2F:72:83:7E:D8
X509v3 Authority Key Identifier:
keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/u08NEvufIyYOw5wjByrYL3KDftg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.83.65.0/24
Signature Algorithm: sha256WithRSAEncryption
45:3d:8f:7f:c0:95:5d:43:a7:93:bc:ee:bd:56:a3:61:56:bf:
61:6e:45:50:4a:76:c3:43:15:1f:aa:e5:1c:a4:9e:97:23:99:
3f:6f:ce:cf:51:30:5f:74:a3:c2:fa:6b:de:a5:89:e4:b0:25:
13:aa:ff:b3:a6:cf:26:3c:f0:54:eb:4f:db:e3:8b:f8:32:6b:
17:80:af:cb:92:21:4b:08:94:80:1d:41:88:5c:fb:d2:07:16:
9e:83:aa:8e:1e:53:be:13:55:34:95:e5:a2:dd:8c:cc:11:48:
a1:f1:41:17:1b:3c:b9:7e:c7:f6:b1:ba:7c:9f:a1:80:f7:f2:
a3:42:45:1d:b0:ee:aa:a1:e3:31:ad:1e:78:78:c8:62:55:8f:
d8:dc:4a:bc:6e:a8:ca:c9:9b:7f:01:f2:16:47:6e:04:fe:1b:
18:10:ee:90:fc:e5:8d:48:c9:a1:bb:a3:91:42:b6:23:bd:3e:
da:c9:fb:17:65:ef:46:28:1f:09:1d:b3:b2:17:a3:72:e6:8b:
ae:a9:7d:c7:63:fc:8c:a1:2b:9f:6d:85:30:5e:58:07:d0:c6:
e0:26:3d:56:f2:2e:34:6a:4d:8c:90:36:12:61:91:9f:44:60:
6d:de:62:de:d1:73:b0:3d:8d:70:f2:24:1a:82:29:99:02:e9:
c0:94:92:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:38:32 2026 by rpki-client