Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/pe6SimYP6o2XDFFmpY-wO0p4kd4.roa
File: pe6SimYP6o2XDFFmpY-wO0p4kd4.roa (raw, json)
Hash identifier: DO3dJUNt2bxLV7u0cSp3tB8Jr2qZvvBLvtswnAFN4BA=
Subject key identifier: A5:EE:92:8A:66:0F:EA:8D:97:0C:51:66:A5:8F:B0:3B:4A:78:91:DE
Certificate issuer: /CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Certificate serial: 019F8F2155F036F7F01EE86496C78B1A08F5
Authority key identifier: 68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/pe6SimYP6o2XDFFmpY-wO0p4kd4.roa
Signing time: Thu 23 Jul 2026 13:19:14 +0000
ROA not before: Thu 23 Jul 2026 13:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 185.92.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:21:55:f0:36:f7:f0:1e:e8:64:96:c7:8b:1a:08:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Validity
Not Before: Jul 23 13:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5ee928a660fea8d970c5166a58fb03b4a7891de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:77:b8:54:09:5c:80:d2:e4:e0:90:74:f7:
fc:5c:08:c1:35:c4:ae:73:ec:0e:6a:18:5d:98:98:
6b:ca:fe:a5:e7:87:8b:9e:39:24:72:47:e0:92:c4:
83:8a:00:24:94:d7:5b:41:8e:35:c2:de:9a:45:aa:
ab:f4:86:79:38:00:51:5b:4c:bc:55:e4:57:74:52:
0e:8f:20:ed:c6:23:42:06:fb:26:63:55:77:da:81:
38:f1:01:3e:5c:85:71:63:ea:cc:46:1e:3d:74:78:
f6:4d:b6:18:12:45:9d:4a:7b:87:5d:62:fd:f0:4a:
9a:5a:b1:12:e6:3d:c8:74:24:de:23:13:5a:f8:60:
0e:17:ef:c7:fd:0d:4f:0d:2c:8f:46:28:07:7c:a7:
13:71:7e:84:61:fa:1f:82:ad:ed:2f:b1:e6:3f:86:
15:ce:69:a4:b6:97:ea:1a:e9:1b:1f:01:e5:31:6a:
82:ac:92:92:eb:0a:82:6d:c3:d0:7a:41:a7:a5:7e:
1e:14:fe:01:c0:50:42:64:a3:bd:31:ca:97:e4:42:
9c:b6:5c:35:41:3e:58:02:f0:56:54:b8:4e:e7:43:
8b:94:96:ef:ab:84:1e:e8:12:28:0b:36:7d:ae:54:
cf:3d:9a:c1:da:b2:2b:d1:66:e5:3e:cd:dc:0b:bd:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EE:92:8A:66:0F:EA:8D:97:0C:51:66:A5:8F:B0:3B:4A:78:91:DE
X509v3 Authority Key Identifier:
keyid:68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/pe6SimYP6o2XDFFmpY-wO0p4kd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:66:d1:3c:52:8d:ee:ab:d6:53:59:3e:ab:19:44:70:49:11:
e3:0b:76:84:17:7d:e8:03:87:9b:88:81:48:f5:2f:aa:75:b0:
e2:72:52:d0:f9:c8:c6:e3:2d:d8:19:c8:01:1e:ac:36:e5:0e:
1e:ed:cd:8d:54:25:69:bb:87:a9:62:c3:c5:32:07:fd:29:a3:
dd:b9:aa:d8:57:bf:12:cc:3c:55:9c:3c:1c:9a:c0:17:d2:4c:
4c:8f:9e:11:b4:54:a6:ca:5e:24:73:a5:1e:ab:89:16:8f:21:
39:06:e2:ca:b5:49:8a:da:86:ff:7f:0d:7d:e0:48:0f:d3:b0:
4a:7d:b4:35:af:a2:ab:42:4b:36:04:c3:7c:16:dc:7f:0b:b3:
2c:59:6f:01:97:54:0f:1d:9c:14:2d:99:3a:17:d3:3b:fe:d7:
59:a1:5b:b4:9a:09:eb:5a:5c:8b:60:c5:62:0d:8e:b5:ec:d4:
1a:1b:f9:83:39:4d:9b:99:e9:d9:98:13:a3:ae:04:09:bb:42:
54:ad:a0:95:e3:f9:d2:84:3b:12:62:f0:5f:5b:90:cb:13:a5:
81:31:99:04:ba:2d:90:68:2d:61:9b:fa:5c:1a:6c:9c:79:09:
dd:91:dd:9f:42:74:58:e0:44:24:46:59:fe:85:a9:99:ef:8f:
58:4c:e6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:38 2026 by rpki-client