Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/psPWwnT647exV4ggiJz8vloBaHU.roa
File: psPWwnT647exV4ggiJz8vloBaHU.roa (raw, json)
Hash identifier: P5hGKQcqsDsWZRv7ouHrUVvJ+SAHh8mal8JYlkQ7E8E=
Subject key identifier: A6:C3:D6:C2:74:FA:E3:B7:B1:57:88:20:88:9C:FC:BE:5A:01:68:75
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 019D0036E14E9C6811AEB6817929396268B9
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/psPWwnT647exV4ggiJz8vloBaHU.roa
Signing time: Wed 18 Mar 2026 09:11:29 +0000
ROA not before: Wed 18 Mar 2026 09:11:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205031
IP address blocks: 92.235.48.0/21 maxlen: 21
92.235.48.0/24 maxlen: 24
92.235.49.0/24 maxlen: 24
92.235.50.0/24 maxlen: 24
92.235.51.0/24 maxlen: 24
92.235.52.0/24 maxlen: 24
92.235.53.0/24 maxlen: 24
92.235.54.0/24 maxlen: 24
92.235.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:36:e1:4e:9c:68:11:ae:b6:81:79:29:39:62:68:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Mar 18 09:11:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6c3d6c274fae3b7b1578820889cfcbe5a016875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:d5:ae:76:23:d6:73:47:61:d7:47:f4:be:
4b:a7:d1:73:f8:21:91:16:69:d9:cc:26:08:e6:73:
da:e9:35:3a:1a:87:32:d9:80:aa:a9:8b:f5:f5:9a:
77:b7:70:82:93:5f:69:61:5a:f6:46:8f:f2:8b:36:
f7:45:6c:3e:ef:12:32:d9:59:71:72:71:0a:e3:6e:
fe:60:84:ad:52:d7:20:a4:86:4d:e8:c5:d4:5e:cb:
97:01:35:7e:f6:96:0f:70:b4:f7:23:9d:14:2c:4a:
7c:77:5e:1e:3d:1c:b1:c0:c8:fb:82:9c:a0:3e:55:
81:1f:95:ab:86:02:33:ba:5f:2a:f1:1f:98:53:7b:
3f:2b:a8:17:37:2b:e1:b7:e6:7e:0c:2f:18:e8:a7:
7b:66:bc:43:d5:c9:21:d9:15:1c:d4:b4:d9:d3:05:
94:ff:9a:b5:6b:c9:37:7d:90:48:99:86:11:6c:3d:
81:0f:b9:2e:ff:a7:d5:fa:f8:71:8d:26:61:cf:ff:
7a:db:d5:14:82:48:78:df:9a:22:c6:c7:72:0c:78:
c8:dd:50:e3:41:00:4e:c9:f5:8c:f4:50:64:35:9a:
49:55:1c:11:8d:b0:02:29:ce:92:ee:35:5c:c4:b2:
b2:d0:c5:f9:6c:0b:64:93:60:1a:54:02:f9:1f:a2:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C3:D6:C2:74:FA:E3:B7:B1:57:88:20:88:9C:FC:BE:5A:01:68:75
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/psPWwnT647exV4ggiJz8vloBaHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.235.48.0/21
Signature Algorithm: sha256WithRSAEncryption
14:e8:fb:1b:44:c8:38:09:0a:78:d1:59:07:ee:bc:aa:2a:a6:
0c:4d:d7:36:8b:08:d6:ca:a9:9c:fa:8d:7a:8b:99:de:53:32:
41:11:87:1f:a0:a9:91:7b:bb:21:d8:62:01:b3:00:7f:16:c0:
d9:f1:b0:aa:a7:00:ba:da:7e:f6:c4:ba:17:2a:ce:42:4c:eb:
7b:4e:d9:02:35:16:85:c8:f3:f4:9f:da:d8:8b:6d:07:25:bb:
0e:e9:5a:cb:09:d5:bd:b2:8b:0e:5f:4f:d4:bd:4b:d0:43:b1:
82:84:18:1e:54:b5:d5:05:21:49:97:7c:a9:a8:97:35:4e:89:
b5:bd:d2:ac:76:2c:07:3a:ab:ae:0d:49:a5:da:9c:2d:1d:a8:
c9:9b:91:78:a8:6c:d5:38:d9:78:7c:9e:5e:c3:a4:f7:05:17:
70:1d:40:70:7c:0f:84:1f:02:fa:ff:51:eb:52:ba:a4:d2:4d:
ea:a1:e5:0a:1d:f4:e7:ec:a8:7d:4a:2b:46:fb:9b:a1:d0:cc:
ae:f2:f3:ad:cd:82:49:10:e5:45:b0:44:ab:a0:b9:aa:67:62:
19:66:21:ba:40:93:ad:e2:a1:33:6a:c3:ef:15:c8:c5:76:ae:
e9:49:e7:73:99:e2:16:0f:e8:7b:43:2f:2d:c4:35:fe:6e:5f:
e0:94:cf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:49 2026 by rpki-client