Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/rnT-D71hKsFDJKjFEFYnlozS1Dg.roa
File: rnT-D71hKsFDJKjFEFYnlozS1Dg.roa (raw, json)
Hash identifier: AgdtDv7sgN51LaNxnC0HMX+MBlYlEKsyJBfZ7QzvWWQ=
Subject key identifier: AE:74:FE:0F:BD:61:2A:C1:43:24:A8:C5:10:56:27:96:8C:D2:D4:38
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019D06162C3EB358A79C0BBB92FA7819A66F
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/rnT-D71hKsFDJKjFEFYnlozS1Dg.roa
Signing time: Thu 19 Mar 2026 12:33:29 +0000
ROA not before: Thu 19 Mar 2026 12:33:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48635
IP address blocks: 85.92.132.0/24 maxlen: 24
85.92.139.0/24 maxlen: 24
85.92.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:16:2c:3e:b3:58:a7:9c:0b:bb:92:fa:78:19:a6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Mar 19 12:33:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae74fe0fbd612ac14324a8c5105627968cd2d438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:73:2a:75:81:a1:8f:ba:3f:5e:ec:27:45:
81:83:5f:1a:52:73:75:4d:92:9b:a5:18:64:40:64:
74:df:62:f6:9b:b4:d6:c0:f7:d2:6e:a8:17:5b:d2:
0d:48:7c:13:d7:ff:f2:03:1a:c6:e6:16:e5:aa:42:
bd:dc:4c:cf:5e:78:7f:cc:9e:78:e1:c0:70:3d:6c:
46:32:5f:b1:30:75:9e:40:1b:22:50:6f:b1:af:93:
66:70:87:e2:dd:d3:40:91:2d:2b:25:75:d4:9c:29:
68:5b:77:69:43:74:67:ac:8f:98:30:cb:08:93:a5:
73:dd:26:fa:c6:ed:cd:03:34:f0:ee:7a:18:1a:0c:
5f:51:5d:10:c3:3f:5d:9a:e2:71:90:20:13:5d:59:
ab:0f:98:37:bf:15:0d:e4:4b:6e:de:5d:76:7b:13:
7c:16:32:2b:c9:40:59:22:a1:c1:32:35:41:15:d7:
13:39:60:4c:ef:72:78:b4:68:e1:43:ae:04:0e:32:
4a:05:b6:b7:10:79:e1:2f:3a:4b:c8:94:83:1f:19:
53:d7:83:71:41:05:ac:c5:09:9b:ed:b6:7b:b4:7e:
fa:b1:0f:be:2f:7f:b1:76:2b:21:ba:1f:72:89:8b:
ef:e6:53:9c:9b:d0:a3:b8:01:42:66:8f:ee:82:56:
0e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:74:FE:0F:BD:61:2A:C1:43:24:A8:C5:10:56:27:96:8C:D2:D4:38
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/rnT-D71hKsFDJKjFEFYnlozS1Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.132.0/24
85.92.139.0/24
85.92.145.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:36:0c:47:37:b9:28:68:51:f0:2c:1f:d5:2a:43:ee:00:d0:
2e:51:22:0e:bf:b0:e5:95:e9:a7:61:e2:36:83:0c:5a:27:94:
18:a6:51:55:be:71:8f:cc:fa:c9:fb:fe:cd:c0:3c:f9:33:7a:
b1:eb:89:45:96:33:f1:f2:3b:c6:66:87:93:7d:e7:d1:d5:55:
f5:81:ae:b0:ef:da:93:f3:6a:eb:b8:3f:2d:e3:e4:0a:de:be:
19:11:47:47:f7:15:e8:3a:db:e2:30:90:2d:fc:e6:69:94:4a:
d6:a8:07:bf:c5:dd:66:8d:e8:55:4f:f6:dd:c6:c6:91:3d:e7:
5a:8a:51:d7:83:3b:ef:01:9f:a2:49:c9:06:16:f0:12:9f:9d:
7e:80:98:d3:35:ee:0e:47:62:64:70:f1:9b:fe:9a:9f:a4:87:
16:56:03:e6:4e:7e:fc:1e:41:42:2c:6b:eb:6c:0c:10:df:d6:
70:73:34:c3:b7:32:e6:ea:46:43:cb:47:c1:fc:fe:24:7e:0b:
ac:9b:0d:cc:04:44:e6:27:df:50:db:f6:c0:fe:78:6e:62:c6:
81:b3:93:7b:9c:5d:29:17:b0:22:e7:50:0f:d6:54:27:c5:e0:
5d:c1:4b:c0:46:09:fa:51:47:a3:f2:15:02:11:30:79:7f:77:
db:05:cc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:26:55 2026 by rpki-client