Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/92viBndBwEyRKhC0I3mDpQiUiDM.roa
File: 92viBndBwEyRKhC0I3mDpQiUiDM.roa (raw, json)
Hash identifier: 4f71bGLSodXj6Koub7BmQXOiZ1tFzM3q6rmeGeOzltg=
Subject key identifier: F7:6B:E2:06:77:41:C0:4C:91:2A:10:B4:23:79:83:A5:08:94:88:33
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F8DF5FF3E6E070FCDDDC5E29A939A67EA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/92viBndBwEyRKhC0I3mDpQiUiDM.roa
Signing time: Thu 23 Jul 2026 07:52:16 +0000
ROA not before: Thu 23 Jul 2026 07:52:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147208
IP address blocks: 151.242.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:f5:ff:3e:6e:07:0f:cd:dd:c5:e2:9a:93:9a:67:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 23 07:52:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f76be2067741c04c912a10b4237983a508948833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:94:9c:48:83:c1:71:b3:09:37:ab:3a:50:
c5:b5:5d:27:3e:32:44:a0:7f:79:76:67:d0:8a:17:
60:59:e8:2c:3c:82:49:4b:62:34:b7:a9:93:a3:65:
f1:8d:6a:32:44:a6:36:69:9b:70:b9:a2:38:52:86:
9b:6b:d6:b1:d4:9e:19:c6:7f:b0:27:04:aa:19:15:
ec:d6:0d:f9:0a:42:6e:07:e3:0c:34:cf:d9:f4:cc:
05:aa:79:36:ca:fe:56:93:37:6f:11:5f:db:9d:6d:
2f:c5:83:b5:3c:30:83:e4:83:d5:02:09:09:bb:2a:
b9:b2:99:ce:fa:80:6c:db:a1:76:a8:a8:50:44:32:
c9:4f:d8:4e:3f:2e:30:8a:da:ce:a7:15:55:63:2f:
1c:d8:f4:4d:08:61:4d:a2:95:05:63:3a:17:fa:c5:
ef:86:77:c7:23:00:0c:7d:1f:51:d2:52:7a:c2:a1:
f5:3b:27:2c:c3:cc:7f:a4:d9:b3:5c:43:53:28:fd:
fe:78:f0:a0:ab:57:3d:3b:81:5e:09:87:bc:b9:ae:
c6:db:f3:b9:f8:68:b9:cb:b0:27:5f:17:cf:f6:91:
dd:24:c3:6b:38:48:8d:9f:0f:df:7a:4f:17:ab:01:
2d:ae:7e:63:44:ee:d1:86:58:28:ca:f2:7d:5c:fd:
78:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6B:E2:06:77:41:C0:4C:91:2A:10:B4:23:79:83:A5:08:94:88:33
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/92viBndBwEyRKhC0I3mDpQiUiDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.192.0/24
Signature Algorithm: sha256WithRSAEncryption
73:b2:59:0a:c4:7d:a6:74:5c:dd:9c:71:3b:87:1d:63:a3:7e:
db:1d:92:4c:cb:55:88:65:2f:13:db:83:fc:41:0c:73:7a:9c:
3d:a9:7e:61:88:6b:87:6d:26:cc:ef:70:0a:a2:b8:7b:46:21:
4a:57:fa:9c:10:60:63:7d:ce:67:86:ac:20:e0:aa:f4:4c:7d:
b3:32:b3:65:49:8b:67:34:32:cb:12:8a:ab:01:fb:09:cf:bb:
f7:95:9c:80:4d:92:84:71:06:35:28:f2:5e:99:84:ee:f8:67:
75:f3:48:86:fc:60:bb:f6:8e:33:6b:9e:f5:27:a8:93:50:d4:
22:66:e4:99:d9:92:86:2e:90:9b:7c:d2:bb:76:03:a5:b4:37:
44:c0:38:3a:91:10:92:83:99:b6:fa:03:ec:c6:bd:f3:17:f9:
bc:19:0a:2f:69:c5:ed:b6:d9:94:b0:4a:4d:47:7f:ad:9e:8c:
7e:cb:61:7b:36:f6:f4:a0:9a:06:84:b7:e5:13:2c:d9:8a:f0:
11:10:4b:7c:37:fc:13:9d:2f:42:9b:8f:8e:10:90:80:2a:3d:
ce:37:4e:f7:8a:dc:0d:6a:23:4f:5a:e7:2a:0a:df:cf:22:c6:
9c:53:be:cb:bf:44:8b:e8:29:1b:73:1e:57:43:8b:4f:30:22:
bf:32:86:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:30 2026 by rpki-client