Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/KB0iYAc-uUGiF8_mzc3TY9q4IWs.roa
File: KB0iYAc-uUGiF8_mzc3TY9q4IWs.roa (raw, json)
Hash identifier: Ta7P1Abj7EX1TmcQ5xeFTxPDkJ6jb+ctLFuSwx56mYk=
Subject key identifier: 28:1D:22:60:07:3E:B9:41:A2:17:CF:E6:CD:CD:D3:63:DA:B8:21:6B
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01A0CD7E78AD0003E55D0C6D4E214DCFB958
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/KB0iYAc-uUGiF8_mzc3TY9q4IWs.roa
Signing time: Wed 23 Sep 2026 09:00:12 +0000
ROA not before: Wed 23 Sep 2026 09:00:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 92.243.74.0/24 maxlen: 24
92.243.75.0/24 maxlen: 24
176.98.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:78:ad:00:03:e5:5d:0c:6d:4e:21:4d:cf:b9:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Sep 23 09:00:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=281d2260073eb941a217cfe6cdcdd363dab8216b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:04:00:20:56:d9:0a:db:df:d1:20:35:80:fc:
aa:06:6c:32:c9:53:a7:57:85:58:83:3f:f0:93:a5:
74:0f:98:e9:5a:56:dc:d4:d2:c1:19:96:bc:3c:d4:
78:23:58:4d:a2:d2:07:a8:a1:d6:22:96:f8:e2:84:
00:42:45:5f:ce:55:56:8e:bf:95:44:86:5b:aa:b1:
da:c9:56:54:3f:07:87:b8:6f:3a:10:e5:6b:74:3c:
51:1f:9b:24:25:fc:75:32:8a:b2:06:56:b3:ec:93:
e5:c2:8a:35:87:c1:a0:47:ac:96:96:08:ec:5c:f0:
80:22:4f:15:65:39:15:99:c9:d4:21:61:e9:e0:da:
b3:3b:1f:b4:bd:6e:1a:08:cb:1d:67:43:64:ff:a2:
01:81:5a:54:ec:a6:e2:77:6d:88:e3:3c:5c:7f:f9:
6a:32:68:77:2e:a4:56:d5:a1:5f:7c:d9:28:a9:db:
66:35:6b:68:4b:2e:db:ac:04:2c:4f:73:71:ef:b4:
ca:63:fa:83:96:6c:05:aa:8c:4c:81:ab:97:63:86:
65:80:f1:33:88:86:53:69:c0:c8:4d:6d:21:85:7d:
22:7c:90:17:fb:0b:4c:fa:63:3c:8e:df:cd:11:48:
22:42:ca:b3:7e:61:94:00:fd:fc:45:e7:9f:88:f2:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1D:22:60:07:3E:B9:41:A2:17:CF:E6:CD:CD:D3:63:DA:B8:21:6B
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/KB0iYAc-uUGiF8_mzc3TY9q4IWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.74.0/23
176.98.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:f1:17:df:15:86:af:a9:be:e2:71:4e:97:e4:22:4b:88:28:
f9:ff:af:01:23:e5:d9:ee:13:51:22:88:81:f0:b9:2c:d7:76:
f8:40:4a:3d:53:c1:d4:b1:b2:d4:42:67:07:a0:e3:5b:cc:69:
7e:04:b4:f0:10:80:83:e1:ef:a2:f8:fc:ff:36:21:e3:0b:b0:
71:41:1d:9a:a4:12:bb:40:2d:73:14:3d:55:ed:de:c7:b8:15:
38:9a:39:f8:02:1b:e5:f5:c0:57:dc:98:a8:62:14:42:ec:59:
4f:2f:c1:9e:49:47:da:d9:5a:13:85:e9:4a:70:d1:ea:79:c8:
41:77:75:b9:10:e3:24:9e:16:40:bb:77:08:00:1a:17:96:11:
36:d7:10:d9:8c:30:fa:b5:a9:22:9d:14:ef:9b:8f:b5:2f:22:
30:41:9c:db:31:eb:8a:65:d2:41:da:49:cb:21:1b:81:20:cd:
b7:4e:5b:d8:04:c8:7f:c8:ac:e3:a8:87:81:54:1c:4a:ef:19:
fd:8c:36:77:1a:64:0b:4d:23:5b:bd:13:0d:6c:a0:c9:46:7b:
54:09:44:31:43:92:94:b7:9e:95:11:fd:bc:eb:cd:82:fc:c4:
d0:70:79:66:4b:24:f4:ec:2a:db:81:18:76:d0:bb:f1:3c:49:
ee:ec:f1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:40:09 2026 by rpki-client