Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/lT8g993Bxf2r56xryKVz3Gn2MqI.roa
File: lT8g993Bxf2r56xryKVz3Gn2MqI.roa (raw, json)
Hash identifier: BQ+3zdZrTBskCesss29fkofrkGv1Jg+ciuIiHwMM094=
Subject key identifier: 95:3F:20:F7:DD:C1:C5:FD:AB:E7:AC:6B:C8:A5:73:DC:69:F6:32:A2
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01A0AA3AAEB60F1258DB935BBC72E9C26EE7
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/lT8g993Bxf2r56xryKVz3Gn2MqI.roa
Signing time: Wed 16 Sep 2026 12:39:27 +0000
ROA not before: Wed 16 Sep 2026 12:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56409
IP address blocks: 92.118.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:3a:ae:b6:0f:12:58:db:93:5b:bc:72:e9:c2:6e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Sep 16 12:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=953f20f7ddc1c5fdabe7ac6bc8a573dc69f632a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:55:3d:44:65:04:fb:fc:fc:43:c5:67:d7:
9b:d2:8b:48:70:4f:15:54:53:53:4d:83:d1:1a:39:
a8:c5:c2:34:9b:01:1e:ef:b4:f2:76:a6:a4:27:fb:
26:90:96:96:d3:64:d3:59:23:2a:55:da:71:b3:6d:
fb:65:3b:5a:83:ef:56:79:26:db:5d:74:2b:b8:09:
93:63:a3:08:83:b3:08:1f:ac:08:58:60:3e:ee:55:
52:fb:59:56:1d:c6:35:7b:76:c3:d6:f4:66:33:ec:
be:92:cb:81:43:5c:6d:82:9f:cd:b5:9d:d2:a6:dd:
25:3c:0c:29:a6:2d:7c:db:2a:a6:14:8a:07:ad:ff:
86:e3:b9:0c:64:73:29:a9:94:fc:2a:a9:14:82:ad:
55:b8:6a:ad:11:e5:7e:32:97:ca:9b:e4:55:0d:23:
12:41:19:e8:8a:d5:10:6f:a5:b1:d4:a4:12:91:93:
81:9c:be:f0:70:1a:c4:0f:54:eb:63:e6:99:ee:13:
e6:d5:cb:fb:1c:3c:b2:52:d0:5d:aa:76:35:a6:5d:
e3:df:5d:b0:87:a8:89:49:48:8f:2f:f2:2d:31:86:
e4:47:1a:fa:65:ad:4e:51:1b:ba:54:a1:8b:dd:66:
63:04:61:81:e4:20:5f:7e:49:19:c1:8a:ae:fb:88:
58:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3F:20:F7:DD:C1:C5:FD:AB:E7:AC:6B:C8:A5:73:DC:69:F6:32:A2
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/lT8g993Bxf2r56xryKVz3Gn2MqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.171.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:84:72:02:f9:f9:eb:27:f3:ea:63:c7:e8:09:71:4f:77:f4:
2e:c6:86:8f:83:11:a0:be:09:31:8c:2d:21:68:05:05:ea:0a:
bf:11:29:83:c7:fc:64:11:de:a0:dc:19:99:ce:cb:4b:2c:0e:
6d:25:04:5a:99:69:22:6c:66:d0:ee:5c:75:5b:9e:6d:0c:2e:
bf:0d:7c:81:33:4d:c5:af:3e:94:90:44:90:dc:c1:89:14:ff:
7e:7f:88:d8:ad:8d:70:5e:8c:dd:18:1a:73:60:c4:b5:48:a9:
4e:45:7d:b2:a6:5a:1a:f1:3f:ad:a9:a0:7c:34:c2:18:45:a0:
79:7c:bc:3e:be:a4:ae:2c:5b:18:a7:1a:bb:09:a9:85:2b:93:
c3:9c:19:8c:bf:e7:54:be:18:5e:48:ee:6f:81:53:74:a1:c8:
a5:11:cc:02:f2:e9:dd:0a:ce:b4:03:11:16:02:82:c6:bf:e2:
5f:03:ce:48:7a:95:98:5c:54:a3:ac:e3:b2:2e:a2:b1:d7:40:
2c:09:38:76:2c:76:23:c0:da:35:ca:79:b3:70:d1:2d:4f:72:
97:04:5a:28:c2:5e:c0:47:46:0b:0f:73:69:e5:6d:06:38:0c:
32:81:23:6a:90:39:ba:bd:12:8e:2e:b5:2f:85:43:10:2b:ca:
bc:09:a3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:29:49 2026 by rpki-client