Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xn0pdYcyRsOE9opGQb-dne7Sd5o.roa
File: xn0pdYcyRsOE9opGQb-dne7Sd5o.roa (raw, json)
Hash identifier: /7/3jgvN+s25Gq5EoJR4lPLROnjINu1LEhWRVzWGla8=
Subject key identifier: C6:7D:29:75:87:32:46:C3:84:F6:8A:46:41:BF:9D:9D:EE:D2:77:9A
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0DC568F1FFB4A99BFAF51752B061894D0
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xn0pdYcyRsOE9opGQb-dne7Sd5o.roa
Signing time: Sat 26 Sep 2026 06:10:55 +0000
ROA not before: Sat 26 Sep 2026 06:10:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 92.71.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:56:8f:1f:fb:4a:99:bf:af:51:75:2b:06:18:94:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 26 06:10:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c67d2975873246c384f68a4641bf9d9deed2779a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:23:8b:b9:80:77:45:b6:13:e1:d3:21:bc:b5:
ee:4d:87:55:79:9b:1f:f1:ad:05:51:49:8b:ef:da:
e3:04:8f:d1:b9:0f:8f:43:60:2f:41:3e:d7:a0:40:
0c:3e:94:7b:73:c5:b1:2e:a4:5d:6f:c2:02:c7:8a:
ee:2c:52:46:b2:e9:32:f5:69:b0:3b:c4:fc:61:9f:
79:17:83:00:1a:35:31:ce:d7:96:57:2a:43:5c:30:
f5:fe:53:c3:1f:5e:c5:5f:fd:e0:ab:fa:ce:8a:ad:
e8:4b:9b:18:e3:cd:00:ce:dd:50:e9:eb:3b:4a:15:
e5:72:94:3e:97:d5:66:80:f3:8f:d9:87:d3:f2:b6:
31:8d:72:1c:f9:97:ac:e3:48:46:46:31:2b:94:50:
69:c3:93:e9:20:bc:20:fc:34:1a:49:71:e5:ae:77:
5b:8f:9e:3d:84:40:3a:c9:9d:2b:e2:0e:c0:15:ef:
fd:b1:48:56:48:df:8d:60:b2:3f:07:01:8f:a7:e2:
40:2d:e6:1b:bd:0e:e4:df:9d:c2:d0:c3:1c:46:11:
c1:aa:be:9e:ec:7f:4f:0f:96:0d:7e:ea:98:46:2e:
46:7a:9b:f0:8b:be:0d:a8:c6:b2:05:08:26:2d:2e:
6c:d0:d8:7d:26:ff:4b:17:c2:56:df:e6:00:6c:fa:
7d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7D:29:75:87:32:46:C3:84:F6:8A:46:41:BF:9D:9D:EE:D2:77:9A
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xn0pdYcyRsOE9opGQb-dne7Sd5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.71.160.0/19
Signature Algorithm: sha256WithRSAEncryption
c6:c8:a3:2a:f9:63:87:f4:78:a1:74:e9:fb:11:7a:4d:89:29:
3a:92:49:e4:b5:93:64:0d:8a:eb:c1:cf:17:13:3d:92:df:c2:
bd:85:a0:68:8c:67:4e:57:96:6d:89:76:f5:bc:c6:d0:f0:c6:
cb:b1:90:4a:38:40:17:f2:4a:78:5f:e5:06:c2:8a:30:3f:e5:
89:d3:55:b5:96:ef:2d:22:16:35:6b:42:17:6f:2b:80:69:35:
59:99:b1:54:7b:8b:39:d1:b1:ff:c1:54:6f:f8:a6:0c:6d:b0:
8f:a7:9e:3d:50:26:43:d0:2c:0e:bb:92:d2:d7:42:85:8a:72:
2c:b4:6f:2a:88:f4:e6:49:c1:18:b1:dc:17:0f:3a:ac:c6:8c:
a9:c4:e1:f1:2e:39:cc:fe:9b:6a:d0:33:0e:ad:f0:cf:6c:af:
e1:e7:db:92:b0:f1:9f:e8:01:93:4f:1f:f3:73:da:8e:fa:4d:
3b:58:af:c5:f9:e8:ed:1e:5b:1b:95:ae:78:77:4b:9f:17:f7:
e3:9d:b5:eb:f8:df:70:39:69:4c:0c:60:76:9a:41:ce:29:ac:
6c:3c:fc:11:64:07:b5:1f:a5:f8:c6:ff:e5:11:1a:56:05:5a:
f0:31:2b:3f:cf:d9:64:f4:e2:51:21:b7:8e:c9:18:2d:a9:a8:
25:d5:7c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:59:08 2026 by rpki-client