Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/93CL9mQGEWax1QikLQ6V9ExiTNk.roa
File: 93CL9mQGEWax1QikLQ6V9ExiTNk.roa (raw, json)
Hash identifier: RmcpnnrpcyJuZnzhTJ77WNEZVKMgPMNB4opHx2SyWD0=
Subject key identifier: F7:70:8B:F6:64:06:11:66:B1:D5:08:A4:2D:0E:95:F4:4C:62:4C:D9
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019D1EEC86E16BF1C4E10B921B64BBFB640F
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/93CL9mQGEWax1QikLQ6V9ExiTNk.roa
Signing time: Tue 24 Mar 2026 08:18:30 +0000
ROA not before: Tue 24 Mar 2026 08:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 85.239.145.0/24 maxlen: 24
85.239.148.0/24 maxlen: 24
92.62.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1e:ec:86:e1:6b:f1:c4:e1:0b:92:1b:64:bb:fb:64:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Mar 24 08:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7708bf664061166b1d508a42d0e95f44c624cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9b:b3:d9:e9:79:8b:ce:66:da:e7:2d:ee:41:
43:e0:0e:bd:df:c2:62:cb:c4:6b:b4:be:90:e6:c7:
a7:fd:d4:10:35:0d:d2:2f:d2:d9:0a:05:76:0c:c4:
7e:c7:ff:0c:eb:ea:33:f4:50:89:dc:90:62:6f:e2:
bf:6c:32:33:48:22:1f:f1:86:a8:f2:ba:ba:ca:ac:
57:94:52:0b:a5:05:b8:26:72:7a:8e:ef:f2:c0:12:
b2:84:19:7e:a6:12:6c:5e:1a:2a:24:31:36:cb:7a:
c3:25:23:a9:ad:70:15:05:40:60:71:7e:f7:f3:49:
c3:02:84:09:5e:61:64:fb:6d:84:57:de:4c:0e:a3:
ab:82:c2:89:90:12:72:6a:45:de:a2:4b:04:6a:b5:
77:a7:b2:74:83:c5:e3:6b:be:53:c1:85:66:c5:e5:
8a:e7:4f:b2:f0:66:c8:f0:9d:38:b6:8c:1c:0d:e9:
ec:3e:24:ba:32:8c:56:43:07:b7:af:98:aa:4d:54:
a3:40:e7:7c:79:60:92:b2:05:5c:48:96:be:3b:2f:
21:6d:80:a8:4c:01:9f:14:c0:2e:37:57:24:f9:d0:
f9:ac:c6:f2:2c:85:29:77:33:85:26:52:33:57:81:
53:d6:3b:15:95:53:89:4f:ae:9b:6b:f5:dc:e6:43:
3f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:70:8B:F6:64:06:11:66:B1:D5:08:A4:2D:0E:95:F4:4C:62:4C:D9
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/93CL9mQGEWax1QikLQ6V9ExiTNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.145.0/24
85.239.148.0/24
92.62.253.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:4a:32:a9:39:63:73:d1:e1:14:7a:aa:f7:b5:82:6a:95:cb:
14:37:23:87:29:d5:72:35:53:16:03:96:6b:9e:3a:2d:e3:cc:
e8:d5:57:05:50:f4:d4:f0:78:a9:d1:03:0c:05:c0:5f:93:45:
93:94:d4:d5:8e:3e:31:3e:a6:e1:60:df:22:df:58:be:af:62:
da:11:63:ad:0c:30:01:b6:4b:bd:45:76:fe:0c:bb:80:f9:f8:
9e:94:03:82:22:e8:e8:fa:54:f5:da:e9:49:ce:a7:bc:df:13:
c7:c1:1e:6a:db:f0:e4:8f:4e:2d:af:e5:09:29:c3:64:5f:32:
95:14:60:5b:7e:8f:10:a8:06:80:ad:c1:bf:f8:1b:76:01:94:
d7:36:18:15:b5:5b:03:5b:c9:54:4c:50:ab:8d:ba:6b:f8:06:
ab:66:8e:81:ae:da:41:23:cc:2b:c8:21:9d:9a:8c:d8:4d:1c:
3c:e2:1f:c1:20:4a:1c:e5:2e:da:64:91:9f:d2:3a:97:6e:76:
6e:0b:49:4d:02:13:0d:f7:5d:9d:cd:82:aa:a7:e6:14:d9:d7:
07:56:ab:94:ed:04:54:9b:cf:8c:de:c7:ab:74:44:9c:04:5d:
30:19:6e:00:fa:b0:8a:b5:c8:e5:ba:87:32:49:82:f9:3f:81:
87:a4:be:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:27 2026 by rpki-client