Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/PChmMikyZo9DqcoxqYgfS9Hx-Yw.roa
File: PChmMikyZo9DqcoxqYgfS9Hx-Yw.roa (raw, json)
Hash identifier: ahpY54VR2fvsYJbt343bir68wVfXsUrZtfHtm2rKFEg=
Subject key identifier: 3C:28:66:32:29:32:66:8F:43:A9:CA:31:A9:88:1F:4B:D1:F1:F9:8C
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 019F1CE342DCEBC8E22CBD0C5943BAB51168
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/PChmMikyZo9DqcoxqYgfS9Hx-Yw.roa
Signing time: Wed 01 Jul 2026 08:54:43 +0000
ROA not before: Wed 01 Jul 2026 08:54:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215179
IP address blocks: 93.92.199.0/24 maxlen: 24
94.125.14.0/24 maxlen: 24
109.71.176.0/24 maxlen: 24
109.71.177.0/24 maxlen: 24
185.42.61.0/24 maxlen: 24
195.191.147.0/24 maxlen: 24
213.108.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:e3:42:dc:eb:c8:e2:2c:bd:0c:59:43:ba:b5:11:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jul 1 08:54:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c2866322932668f43a9ca31a9881f4bd1f1f98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:b5:96:46:31:78:b9:c1:25:35:bb:a6:72:
f9:02:b6:c4:2c:d8:ed:ad:64:b0:a4:3f:f4:f7:75:
80:70:de:c2:a2:44:ab:3e:68:9d:b5:a4:22:20:ab:
01:e1:5f:8c:c0:d3:43:6b:ef:d4:0e:18:57:ef:a7:
8e:30:4c:9d:48:df:0e:1e:c9:36:6b:f1:cf:3d:8c:
7e:e4:69:cd:22:ce:f9:80:1e:af:df:24:e1:75:eb:
22:88:6b:3c:6e:a5:32:a3:01:c4:80:df:2d:98:93:
b5:9c:5b:2a:4a:05:f5:68:1f:3e:9d:4b:31:31:58:
84:72:39:09:c8:71:d1:73:73:9f:be:b6:26:06:55:
9f:15:15:47:ae:1d:40:9f:e3:d8:83:34:8b:78:08:
fc:de:19:c8:e2:c8:62:d5:d3:a3:f0:90:ef:90:57:
38:28:58:2c:4d:77:e6:5d:3f:7b:8c:fd:c2:d9:c3:
34:13:81:d6:7b:2c:e4:8a:51:40:50:2a:67:d4:74:
b3:46:44:4c:cc:d5:91:fd:73:8a:ca:1f:e2:ec:67:
d0:ae:d8:3d:bd:95:05:86:d7:fb:1f:60:42:a9:cf:
6b:45:ee:53:c9:97:fb:45:bf:e6:70:e7:00:c1:ca:
f6:91:18:88:fb:91:05:76:28:4f:b7:e8:b4:c1:b8:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:28:66:32:29:32:66:8F:43:A9:CA:31:A9:88:1F:4B:D1:F1:F9:8C
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/PChmMikyZo9DqcoxqYgfS9Hx-Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.199.0/24
94.125.14.0/24
109.71.176.0/23
185.42.61.0/24
195.191.147.0/24
213.108.39.0/24
Signature Algorithm: sha256WithRSAEncryption
03:5b:56:87:93:e9:5a:ad:0b:24:75:4a:b9:c0:db:fe:28:a8:
1d:55:04:09:5e:fe:33:2f:0e:4e:37:c1:fa:16:a2:72:cb:a2:
2a:fa:82:b9:b0:38:f0:bf:0a:3c:18:93:e9:7a:bc:9f:4a:03:
fe:75:7a:38:b6:50:56:50:a3:16:cb:80:e4:74:03:63:66:07:
26:f2:6b:8f:74:f6:cb:f5:8e:f8:0f:95:eb:8d:db:2b:0f:41:
93:f6:1f:1c:d4:52:62:f3:e2:67:a2:72:15:95:a1:70:e2:c9:
df:8c:6f:60:11:1f:27:86:4f:73:56:68:13:1a:c5:47:6f:c5:
91:7d:a4:7d:56:9f:1a:8b:f6:7b:79:07:e4:26:a6:ca:fb:3c:
51:17:af:cd:00:c2:72:77:bc:56:69:f3:1e:47:fa:a7:60:22:
8c:51:11:d0:b0:e3:22:f0:63:4a:26:b0:73:bc:57:79:6d:81:
fa:6a:05:0f:9f:3f:f9:84:95:fa:65:ab:c0:5e:85:13:46:22:
1a:4d:ba:19:77:41:92:4c:d5:06:34:4d:e2:b2:30:cf:89:1c:
dc:87:76:76:ec:53:c5:0f:19:12:31:e5:e8:af:20:64:bc:8e:
2a:d7:f2:12:39:ae:99:1e:8a:07:5b:3e:ae:40:71:11:ee:df:
58:19:19:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:30 2026 by rpki-client