Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/St9rz-xyo7-Laj1xYaFvZty7Wm4.roa
File: St9rz-xyo7-Laj1xYaFvZty7Wm4.roa (raw, json)
Hash identifier: koP8D2YesC9Rv6HO62IIxZT+4EeqzpYD0J9A6+kv2Q8=
Subject key identifier: 4A:DF:6B:CF:EC:72:A3:BF:8B:6A:3D:71:61:A1:6F:66:DC:BB:5A:6E
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0F196B4BE5D8CCB580B8B84A4C9073EC7
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/St9rz-xyo7-Laj1xYaFvZty7Wm4.roa
Signing time: Wed 30 Sep 2026 09:13:00 +0000
ROA not before: Wed 30 Sep 2026 09:13:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 263812
IP address blocks: 92.71.6.0/24 maxlen: 24
92.71.9.0/24 maxlen: 24
92.71.12.0/24 maxlen: 24
92.71.23.0/24 maxlen: 24
92.71.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:96:b4:be:5d:8c:cb:58:0b:8b:84:a4:c9:07:3e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 30 09:13:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4adf6bcfec72a3bf8b6a3d7161a16f66dcbb5a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:55:9e:47:53:54:17:23:08:da:2b:c8:05:
19:59:9d:15:2d:6e:09:5c:49:f2:91:5c:a5:54:d0:
e5:78:7d:27:ef:10:b5:eb:2e:bd:30:7f:ef:64:d8:
e5:2e:e5:5d:c2:55:95:4d:e9:f9:60:e1:52:74:54:
86:82:b7:bb:5a:1b:09:13:85:23:da:5c:34:98:67:
ba:00:ef:30:96:2f:ee:d9:d4:2e:53:5d:57:4f:56:
0c:14:70:27:15:5d:76:c3:d6:8b:ad:0f:37:f8:04:
dc:c1:54:71:6f:11:6e:56:54:32:57:0d:7a:78:22:
5c:72:4e:3b:3f:41:5b:bb:f9:9d:30:68:41:bf:3c:
2b:fe:05:01:26:b6:01:d0:6e:e7:df:77:69:a7:38:
80:5d:82:5a:c9:9a:90:1a:af:7e:07:51:2c:10:0b:
38:54:56:bb:da:63:3f:c3:12:7c:01:77:a9:4a:c1:
27:a3:2c:74:43:7d:03:61:90:ce:1e:6a:3a:d2:59:
d7:54:a5:2b:0d:35:6a:53:ad:bd:9a:0d:22:9c:4c:
9b:c5:13:ce:f5:76:c3:2e:2a:7e:f2:d7:29:b7:53:
c9:5e:40:5e:6d:8b:89:b5:1b:e7:aa:95:d2:9f:5f:
b5:6d:ec:e1:c4:b9:40:b1:ca:54:11:92:7f:7c:0e:
5a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DF:6B:CF:EC:72:A3:BF:8B:6A:3D:71:61:A1:6F:66:DC:BB:5A:6E
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/St9rz-xyo7-Laj1xYaFvZty7Wm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.71.6.0/24
92.71.9.0/24
92.71.12.0/24
92.71.23.0/24
92.71.61.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f2:1f:6a:f7:1a:a1:fe:59:e1:de:a2:09:73:80:df:74:bb:
b2:81:cb:34:c4:d9:00:40:41:72:6a:56:b7:2a:a8:87:30:02:
73:31:b9:37:92:60:82:36:5c:83:15:c2:07:58:8d:8a:76:47:
99:f5:b6:ed:50:b8:23:a1:98:09:1e:73:b3:b5:f6:74:c8:11:
0f:30:ab:3f:23:e8:14:5e:11:1a:c7:e8:e0:85:6e:a8:ff:dc:
f9:0b:ea:61:d2:95:f7:6f:19:9d:60:93:cf:ef:08:45:88:2f:
38:4b:0d:f4:1b:fe:f2:4f:d6:03:f5:37:69:f2:33:95:12:f5:
99:79:be:c3:0f:96:97:79:64:62:b9:f1:7b:0b:87:b2:c1:24:
65:74:55:33:a2:39:ba:01:65:7d:fa:e6:36:71:a9:9a:40:59:
d5:9f:c6:19:88:30:f4:c0:5c:8f:fc:ba:61:d1:03:f3:7c:41:
98:6e:0c:44:22:c1:b2:41:88:36:4b:d0:b2:63:f6:c8:3e:3d:
9d:54:5d:b6:67:22:e9:71:10:6c:08:ae:4e:a4:32:da:a9:da:
95:90:05:13:b4:fd:cb:7d:5d:b5:a3:38:6b:61:d6:65:06:84:
dc:54:c4:b7:c7:92:7d:4a:ce:ec:ae:c3:95:1d:25:e9:f1:25:
39:65:0a:f7
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaDxlrS+XYzLWAuLhKTJBz7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwOTMwMDkxMzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWRmNmJjZmVjNzJhM2JmOGI2YTNkNzE2MWExNmY2NmRjYmI1YTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdRVnkdTVBcjCNoryAUZWZ0VLW4J
XEnykVylVNDleH0n7xC16y69MH/vZNjlLuVdwlWVTen5YOFSdFSGgre7WhsJE4Uj
2lw0mGe6AO8wli/u2dQuU11XT1YMFHAnFV12w9aLrQ83+ATcwVRxbxFuVlQyVw16
eCJcck47P0Fbu/mdMGhBvzwr/gUBJrYB0G7n33dppziAXYJayZqQGq9+B1EsEAs4
VFa72mM/wxJ8AXepSsEnoyx0Q30DYZDOHmo60lnXVKUrDTVqU629mg0inEybxRPO
9XbDLip+8tcpt1PJXkBebYuJtRvnqpXSn1+1bezhxLlAscpUEZJ/fA5awwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFErfa8/scqO/i2o9cWGhb2bcu1puMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvU3Q5cnoteHlvNy1MYWoxeFlhRnZadHk3V200LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAXEcGAwQA
XEcJAwQAXEcMAwQAXEcXAwQAXEc9MA0GCSqGSIb3DQEBCwUAA4IBAQB08h9q9xqh
/lnh3qIJc4DfdLuygcs0xNkAQEFyala3KqiHMAJzMbk3kmCCNlyDFcIHWI2KdkeZ
9bbtULgjoZgJHnOztfZ0yBEPMKs/I+gUXhEax+jghW6o/9z5C+ph0pX3bxmdYJPP
7whFiC84Sw30G/7yT9YD9Tdp8jOVEvWZeb7DD5aXeWRiufF7C4eywSRldFUzojm6
AWV9+uY2camaQFnVn8YZiDD0wFyP/Lph0QPzfEGYbgxEIsGyQYg2S9CyY/bIPj2d
VF22ZyLpcRBsCK5OpDLaqdqVkAUTtP3LfV21ozhrYdZlBoTcVMS3x5J9Ss7srsOV
HSXp8SU5ZQr3
-----END CERTIFICATE-----
Generated at Sun Oct 11 03:27:10 2026 by rpki-client