Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/_VZhh8EatAxv_Q0OdxEzAgY-osQ.roa
File: _VZhh8EatAxv_Q0OdxEzAgY-osQ.roa (raw, json)
Hash identifier: Z4BRdK3qjreVOU9M3pBqxQuJx602M0bhwpUVpyEzqew=
Subject key identifier: FD:56:61:87:C1:1A:B4:0C:6F:FD:0D:0E:77:11:33:02:06:3E:A2:C4
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01A1BC35DBA5A6069561114074AD430CAC15
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/_VZhh8EatAxv_Q0OdxEzAgY-osQ.roa
Signing time: Sun 08 Nov 2026 17:30:08 +0000
ROA not before: Sun 08 Nov 2026 17:30:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 92.119.200.0/24 maxlen: 24
92.119.201.0/24 maxlen: 24
92.119.202.0/24 maxlen: 24
92.119.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bc:35:db:a5:a6:06:95:61:11:40:74:ad:43:0c:ac:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Nov 8 17:30:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd566187c11ab40c6ffd0d0e77113302063ea2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:ba:3b:46:88:05:e9:14:2e:b9:94:94:28:
43:df:a9:02:d3:3c:c7:82:29:72:a0:23:68:20:6e:
32:99:bd:a2:9a:d7:06:4d:fc:74:91:d8:43:f6:07:
e7:6f:04:8e:c5:80:f8:8a:24:9d:8e:c5:76:cf:f5:
38:d5:13:75:f4:ee:29:55:ef:09:79:1b:45:6f:f1:
11:fb:6a:a8:2f:9b:cc:4b:97:86:04:ff:fd:e2:36:
b0:7a:3b:e8:25:d3:8c:83:dc:d3:71:49:fd:6b:00:
05:60:50:c8:9a:32:37:b2:3a:24:e2:11:d3:20:b8:
47:06:b5:ad:25:6e:2f:e5:e4:2f:78:2e:c6:4d:14:
6c:5c:f2:9d:d2:54:61:3e:04:4e:d8:b9:3a:37:8b:
77:39:e9:d6:f6:79:fe:ca:5a:7c:35:36:ae:14:5a:
52:fd:1b:cd:1c:e4:72:6b:b4:b7:62:2a:0c:10:7a:
01:c6:17:6b:5e:f3:41:ca:af:65:1a:0b:ff:a8:2d:
45:23:04:68:a7:24:1f:76:3d:72:07:2e:1e:6b:66:
d9:6c:7f:f6:b3:c7:36:b6:2e:70:40:7e:08:e1:b8:
53:c2:5e:e0:20:d5:9b:08:8a:7a:af:cb:6e:ec:59:
41:91:d7:f8:22:d1:d7:e6:05:18:a4:a1:c8:51:2d:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:56:61:87:C1:1A:B4:0C:6F:FD:0D:0E:77:11:33:02:06:3E:A2:C4
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/_VZhh8EatAxv_Q0OdxEzAgY-osQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.200.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:ed:71:af:08:a4:3c:e0:a1:f5:3e:cc:28:fc:94:ef:80:9e:
15:1f:59:9f:be:60:d0:81:ee:b9:83:a8:8e:88:bd:31:4e:41:
89:51:f2:85:62:dc:b3:c7:71:26:9d:3a:57:df:88:69:67:b1:
6c:21:1d:cb:1d:7c:ad:2e:3f:0a:36:ab:f2:e5:b6:1d:8a:3a:
d8:03:5f:00:ec:29:2b:45:ae:6b:05:2c:b9:80:1f:c2:86:c0:
1b:6d:b7:68:05:82:c1:0c:c2:57:44:89:cd:10:c9:ee:66:07:
8d:82:54:89:e2:7f:b0:80:16:c9:51:83:a3:f8:d8:1d:0d:f7:
56:64:6c:a0:e5:f3:25:7d:78:9d:24:d9:bf:ac:bc:6d:15:2d:
59:fe:de:e5:46:a7:62:fd:2f:ad:89:cb:4a:b5:d4:2d:ae:95:
b2:2e:d6:52:83:68:b6:44:52:6d:14:62:d4:b2:f0:03:2f:27:
7d:d2:7d:6f:6a:b2:4f:3f:54:19:09:9c:34:32:1b:a8:9a:6a:
67:04:8c:0f:e0:41:1c:c4:a7:d1:8d:f0:05:a3:69:ef:67:e7:
b6:dd:10:ab:bd:07:8b:ac:bf:90:2f:b8:d5:79:92:0e:38:b0:
9d:ab:af:48:b4:57:a1:62:b9:d5:42:9f:ff:7e:9a:27:2a:f6:
f7:fa:00:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:47:44 2026 by rpki-client