Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/PRlxCJLr7GqyLVY6uMS1lUVsx4c.roa
File: PRlxCJLr7GqyLVY6uMS1lUVsx4c.roa (raw, json)
Hash identifier: YZCxR1/bmcebEid+BkkITiaSUE7FvJzcllvtyBu9OQA=
Subject key identifier: 3D:19:71:08:92:EB:EC:6A:B2:2D:56:3A:B8:C4:B5:95:45:6C:C7:87
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 019F14EA700F8B01A8DF6E3E7C95A7EFE3FE
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/PRlxCJLr7GqyLVY6uMS1lUVsx4c.roa
Signing time: Mon 29 Jun 2026 19:45:36 +0000
ROA not before: Mon 29 Jun 2026 19:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 92.53.180.0/22 maxlen: 24
92.53.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:ea:70:0f:8b:01:a8:df:6e:3e:7c:95:a7:ef:e3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jun 29 19:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d19710892ebec6ab22d563ab8c4b595456cc787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:8e:79:70:e0:7f:68:bc:6e:d2:36:b4:09:
0f:ad:a1:42:de:08:0c:64:8a:b5:c8:af:57:f4:c4:
e7:2d:43:c0:d2:21:3f:03:c0:74:fb:28:b7:67:f4:
30:58:9b:14:18:f8:43:81:8c:e6:c0:bb:ab:85:f7:
ec:fc:df:4e:d0:e1:da:53:b2:b3:4b:bb:d0:9d:57:
6d:24:dc:72:6c:f5:a9:fb:82:4a:df:69:67:7e:ac:
d3:e6:17:b5:79:86:89:4e:d8:8f:96:a2:c0:d1:d1:
cb:f0:d8:a7:89:b8:30:00:ab:2f:59:1c:cc:2f:c5:
8e:37:08:ea:af:8f:ba:4e:90:87:f8:98:c6:cf:7a:
9f:74:24:da:b5:2a:cb:98:05:1d:47:29:00:e9:97:
7a:01:d0:af:04:7a:63:50:50:0e:fc:b9:78:c5:62:
b4:11:db:44:9f:16:ba:51:3e:0b:35:51:0e:94:2e:
2f:61:e7:43:08:c3:57:55:70:02:31:6d:6e:e5:af:
7b:72:c0:30:fb:10:84:a8:3a:66:e5:cb:8b:bd:3b:
ab:9f:3f:e4:34:5d:dd:6e:15:86:f3:13:a6:2f:c2:
69:41:3a:f2:7c:1c:95:f3:5f:cf:1e:b4:d9:d8:a1:
6b:1c:69:61:6f:f6:e1:78:8c:50:46:fa:08:63:8c:
bd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:19:71:08:92:EB:EC:6A:B2:2D:56:3A:B8:C4:B5:95:45:6C:C7:87
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/PRlxCJLr7GqyLVY6uMS1lUVsx4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.180.0-92.53.187.255
Signature Algorithm: sha256WithRSAEncryption
40:99:46:07:74:e7:70:7f:82:4e:bf:6d:e8:b2:32:b8:6d:94:
ea:e7:4b:fe:7f:24:b4:9f:4d:e6:ca:b7:d3:eb:94:d9:2a:57:
f8:5a:d9:f2:fa:d4:55:c4:d3:4a:53:f4:1a:f1:87:83:73:f4:
95:fb:93:e9:24:00:b9:f9:c8:d8:27:55:1a:ff:73:8e:84:a7:
0f:84:a0:6e:cf:91:bc:ff:8a:c3:e1:e3:05:55:20:cc:75:7d:
40:7f:a6:5e:70:41:ae:5c:15:84:8f:a5:a5:db:4f:81:95:da:
e4:1c:67:2e:83:70:c2:31:85:bd:01:fe:76:3d:20:60:2c:3a:
e9:cc:94:6a:6e:3d:1c:73:24:f7:a9:e2:43:06:f8:65:bb:84:
5c:69:a0:42:b1:83:f6:b2:6c:ed:68:12:1e:29:e4:2f:aa:cb:
10:cc:69:86:a4:27:f4:61:18:f1:a8:54:92:05:84:4a:c0:24:
a7:3b:e1:3c:76:94:06:79:95:a7:60:03:eb:7e:af:be:b6:1b:
e8:e1:0b:1a:e5:5a:87:c7:3f:27:63:e1:8b:83:27:5d:85:21:
92:ce:e9:bc:fa:29:05:c9:89:74:fb:34:72:0d:75:00:61:c3:
1e:1a:9b:46:da:94:50:01:9b:ae:2a:95:8a:ed:88:44:65:3b:
d9:ed:14:50
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ8U6nAPiwGo324+fJWn7+P+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjYwNjI5MTk0NTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDE5NzEwODkyZWJlYzZhYjIyZDU2M2FiOGM0YjU5NTQ1NmNjNzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDSOeXDgf2i8btI2tAkPraFC3ggM
ZIq1yK9X9MTnLUPA0iE/A8B0+yi3Z/QwWJsUGPhDgYzmwLurhffs/N9O0OHaU7Kz
S7vQnVdtJNxybPWp+4JK32lnfqzT5he1eYaJTtiPlqLA0dHL8NinibgwAKsvWRzM
L8WONwjqr4+6TpCH+JjGz3qfdCTatSrLmAUdRykA6Zd6AdCvBHpjUFAO/Ll4xWK0
EdtEnxa6UT4LNVEOlC4vYedDCMNXVXACMW1u5a97csAw+xCEqDpm5cuLvTurnz/k
NF3dbhWG8xOmL8JpQTryfByV81/PHrTZ2KFrHGlhb/bheIxQRvoIY4y9rQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFD0ZcQiS6+xqsi1WOrjEtZVFbMeHMB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEvUFJseENKTHI3R3F5TFZZNnVNUzFsVVZzeDRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJcNbQD
BAJcNbgwDQYJKoZIhvcNAQELBQADggEBAECZRgd053B/gk6/beiyMrhtlOrnS/5/
JLSfTebKt9PrlNkqV/ha2fL61FXE00pT9Brxh4Nz9JX7k+kkALn5yNgnVRr/c46E
pw+EoG7Pkbz/isPh4wVVIMx1fUB/pl5wQa5cFYSPpaXbT4GV2uQcZy6DcMIxhb0B
/nY9IGAsOunMlGpuPRxzJPep4kMG+GW7hFxpoEKxg/aybO1oEh4p5C+qyxDMaYak
J/RhGPGoVJIFhErAJKc74Tx2lAZ5ladgA+t+r762G+jhCxrlWofHPydj4YuDJ12F
IZLO6bz6KQXJiXT7NHINdQBhwx4am0balFABm64qlYrtiERlO9ntFFA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:07:56 2026 by rpki-client