Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/xOQzIz75lAWdGvsczpzw-mOsx48.roa
File: xOQzIz75lAWdGvsczpzw-mOsx48.roa (raw, json)
Hash identifier: plurgHJiRi0HXi8YT7nPx4/38GnV4aGxFs5z0lgHBMQ=
Subject key identifier: C4:E4:33:23:3E:F9:94:05:9D:1A:FB:1C:CE:9C:F0:FA:63:AC:C7:8F
Certificate issuer: /CN=e75d03ef750832b2bccee90097a97e9bae56d542
Certificate serial: 019F1857556C960831F55F228E15476FBFE8
Authority key identifier: E7:5D:03:EF:75:08:32:B2:BC:CE:E9:00:97:A9:7E:9B:AE:56:D5:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/510D73UIMrK8zukAl6l-m65W1UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/xOQzIz75lAWdGvsczpzw-mOsx48.roa
Signing time: Tue 30 Jun 2026 11:43:24 +0000
ROA not before: Tue 30 Jun 2026 11:43:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197675
IP address blocks: 92.255.68.0/22 maxlen: 24
2a04:3480::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/510D73UIMrK8zukAl6l-m65W1UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/510D73UIMrK8zukAl6l-m65W1UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/510D73UIMrK8zukAl6l-m65W1UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:57:55:6c:96:08:31:f5:5f:22:8e:15:47:6f:bf:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e75d03ef750832b2bccee90097a97e9bae56d542
Validity
Not Before: Jun 30 11:43:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4e433233ef994059d1afb1cce9cf0fa63acc78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:1e:bc:79:85:25:0a:b0:2a:52:79:d8:ac:
a1:0f:eb:a4:8e:19:fc:8d:74:e5:a8:77:e9:40:dd:
36:2c:31:41:c0:db:e1:40:74:54:22:33:2d:7e:b9:
81:94:1e:74:e0:81:d9:c7:24:13:2f:7c:11:d2:54:
13:61:74:03:25:cd:90:1e:7a:22:67:aa:3a:1e:46:
82:e9:6b:de:d7:1d:57:4d:11:a8:f2:a0:f4:62:7c:
4d:e3:84:06:29:69:1d:89:1d:65:c9:2d:b4:e6:2d:
3c:22:37:37:42:5f:04:9b:20:5e:87:2b:29:9e:54:
87:c6:77:85:0b:b4:1b:48:c2:ef:46:ff:bd:d8:ea:
f8:d3:50:08:be:62:0f:b2:cf:5c:d6:a6:48:39:38:
0d:bc:26:84:33:6a:2c:ac:e5:39:38:49:76:73:60:
c1:a2:a0:2e:12:58:ed:bc:37:a0:2d:c7:b6:3a:bc:
4e:68:1a:24:f0:95:9b:b8:86:92:b3:fc:a8:de:f0:
6e:f4:f7:9b:7b:4e:47:5f:11:f2:9f:c4:98:b2:6a:
9c:81:69:98:87:7f:3a:0f:ae:aa:1b:f8:ef:9c:9e:
6f:8a:ec:58:8b:03:2a:03:be:bd:9a:39:66:d8:b9:
f2:c7:6f:12:15:fd:f8:92:af:ae:94:76:c5:34:91:
f3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E4:33:23:3E:F9:94:05:9D:1A:FB:1C:CE:9C:F0:FA:63:AC:C7:8F
X509v3 Authority Key Identifier:
keyid:E7:5D:03:EF:75:08:32:B2:BC:CE:E9:00:97:A9:7E:9B:AE:56:D5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/510D73UIMrK8zukAl6l-m65W1UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/xOQzIz75lAWdGvsczpzw-mOsx48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/510D73UIMrK8zukAl6l-m65W1UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.255.68.0/22
IPv6:
2a04:3480::/32
Signature Algorithm: sha256WithRSAEncryption
a8:27:a4:ee:35:13:b0:b7:4c:73:d9:9f:c6:bd:ab:8d:02:6a:
29:23:74:3f:38:9b:37:22:08:70:bf:b3:d9:87:2a:32:5f:7f:
fa:10:ae:5b:4b:91:a6:b4:37:36:4e:47:d2:b3:b1:45:ed:43:
ab:c4:bb:dc:14:a1:d7:de:64:84:b4:b7:a5:79:95:17:16:be:
a1:7c:b3:3e:40:b9:ab:30:16:51:4e:f7:72:2b:19:f1:f4:96:
5d:83:29:6c:f6:d8:d4:e2:0b:10:68:a6:64:28:da:5a:87:43:
be:b8:d2:8c:bc:c2:39:00:20:ec:d4:12:03:15:31:b5:99:bf:
49:cb:91:fb:b3:ff:a9:5e:e4:3f:fd:93:16:7b:a3:ca:a7:c6:
e1:e7:1a:2a:41:8e:2f:eb:23:b5:32:50:02:4f:4a:bf:ae:00:
5c:73:56:ba:e9:01:35:19:2f:06:b4:0a:86:c6:c3:56:23:78:
33:fe:75:38:02:56:7f:22:62:ce:a5:69:7a:e4:87:36:c3:fe:
f8:e4:d6:ea:dd:67:0e:f9:ca:ca:2f:b4:d8:a8:a6:5d:ba:02:
7e:0e:88:61:1c:b7:ef:ac:c6:c9:b0:36:b3:61:15:97:a6:2b:
72:71:f5:af:03:3e:6c:ab:6e:7c:60:37:c4:32:56:43:f0:fa:
2a:e5:07:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:32 2026 by rpki-client