Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/95b229-8c06-4744-9d72-fc075d3778bd/1/0sKQ6lhJjOfA8m4MnsDvoZK8mfU.roa
File: 0sKQ6lhJjOfA8m4MnsDvoZK8mfU.roa (raw, json)
Hash identifier: pRrSriyn66y2vAXuLnClWani4xncpO1hF4wIQyYy3So=
Subject key identifier: D2:C2:90:EA:58:49:8C:E7:C0:F2:6E:0C:9E:C0:EF:A1:92:BC:99:F5
Certificate issuer: /CN=4179698393d0eb0daf69ffd97f787d7b88237221
Certificate serial: 01A07B95E63672BA346A2DF6688D1B83487F
Authority key identifier: 41:79:69:83:93:D0:EB:0D:AF:69:FF:D9:7F:78:7D:7B:88:23:72:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/95b229-8c06-4744-9d72-fc075d3778bd/1/0sKQ6lhJjOfA8m4MnsDvoZK8mfU.roa
Signing time: Mon 07 Sep 2026 11:16:56 +0000
ROA not before: Mon 07 Sep 2026 11:16:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 193.239.4.0/23 maxlen: 23
193.239.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/95b229-8c06-4744-9d72-fc075d3778bd/1/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/95b229-8c06-4744-9d72-fc075d3778bd/1/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:95:e6:36:72:ba:34:6a:2d:f6:68:8d:1b:83:48:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4179698393d0eb0daf69ffd97f787d7b88237221
Validity
Not Before: Sep 7 11:16:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2c290ea58498ce7c0f26e0c9ec0efa192bc99f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:2b:cc:8d:21:29:5f:c0:2f:70:95:09:91:
bc:24:81:a7:86:eb:0c:11:2a:ea:53:87:1e:47:51:
77:c3:b4:de:db:94:31:46:9f:d4:ce:38:b5:34:f0:
e7:49:55:fd:b0:0c:47:95:4b:d7:6f:f8:ae:d7:00:
98:a2:9a:cd:ed:aa:e1:3c:9d:95:91:56:f6:31:8e:
66:20:48:5e:e2:fa:0c:1d:d9:05:bd:eb:e3:0e:bb:
25:e7:7c:c0:30:c2:b4:c3:df:c1:2d:b6:13:03:d9:
37:79:8e:e7:6f:5a:5d:da:0c:84:c0:a7:1b:2e:01:
85:85:7e:df:72:6f:82:b4:fc:bd:0c:a9:6a:fb:d0:
38:00:fb:19:90:22:81:3a:e4:0e:bc:e4:9e:69:6a:
4e:e5:4b:9d:ee:e3:9f:32:66:87:fe:0f:22:77:e5:
be:32:00:86:2b:ca:f3:81:e8:2a:6d:4e:f0:76:83:
70:bf:4a:db:21:25:53:dd:9a:ee:d4:3e:77:c1:b7:
a4:d4:0b:7d:1f:fa:d5:57:4d:12:bb:22:2f:0b:f1:
1b:e2:45:57:c7:34:0b:9b:3c:b4:5f:4d:a8:b1:b9:
65:9e:96:db:91:ed:6f:51:d4:b4:8e:b8:f0:84:00:
6f:b9:f9:96:ea:d8:27:5f:27:f8:e0:7e:5f:e3:f7:
fc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C2:90:EA:58:49:8C:E7:C0:F2:6E:0C:9E:C0:EF:A1:92:BC:99:F5
X509v3 Authority Key Identifier:
keyid:41:79:69:83:93:D0:EB:0D:AF:69:FF:D9:7F:78:7D:7B:88:23:72:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/95b229-8c06-4744-9d72-fc075d3778bd/1/0sKQ6lhJjOfA8m4MnsDvoZK8mfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/95b229-8c06-4744-9d72-fc075d3778bd/1/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:6a:2a:26:75:2a:f2:c1:23:91:2c:f6:d8:ca:5f:30:fc:5b:
b1:1e:d4:65:98:6a:b6:4b:05:ac:f9:a9:85:4f:4c:bd:e1:04:
b4:f6:49:ee:2c:00:bc:d8:d8:d8:4e:39:fa:f1:3a:5f:e3:97:
f4:05:76:e7:46:fa:db:eb:80:5e:15:1c:37:ec:f6:97:87:34:
85:a7:36:4f:4f:c7:bf:97:cd:04:1a:08:6c:78:e8:00:66:6e:
2d:02:ca:da:74:ea:3b:10:1e:39:35:a3:7f:cb:99:77:46:b4:
66:1c:b6:45:dc:39:6f:1b:b0:3c:0d:df:99:9c:09:24:de:7c:
ef:23:f0:2b:21:e4:a9:e9:0b:b5:e3:85:b2:01:2f:85:cf:06:
5a:02:33:0b:85:c3:71:fd:4c:88:23:69:b9:95:fb:44:1d:03:
04:04:eb:8c:04:d7:bd:6e:b5:6b:7b:cc:e8:72:63:d3:ba:41:
78:34:b3:9a:5f:2c:42:a0:08:b7:1d:3f:02:26:5d:9a:43:0c:
0a:a1:9e:01:09:92:df:6a:ac:b3:8e:9e:7c:9f:77:47:3d:62:
ab:cb:1f:d6:5b:16:a8:ec:a2:d7:43:b4:68:86:a7:c5:57:64:
f0:be:68:9e:52:67:91:99:90:96:16:ea:d5:08:9c:d5:3f:5b:
33:b4:5f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:02:23 2026 by rpki-client