Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/w2M7ZO1dLsPXEXnbznAAUQ-XIfI.roa
File: w2M7ZO1dLsPXEXnbznAAUQ-XIfI.roa (raw, json)
Hash identifier: 4VINIiUV7yY6OIe+1sXkEnrpHE6L3HL3/9SzG6fzfmI=
Subject key identifier: C3:63:3B:64:ED:5D:2E:C3:D7:11:79:DB:CE:70:00:51:0F:97:21:F2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CD87142C52063E0E146FBFD6AF2AB7276
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/w2M7ZO1dLsPXEXnbznAAUQ-XIfI.roa
Signing time: Tue 10 Mar 2026 15:50:27 +0000
ROA not before: Tue 10 Mar 2026 15:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205731
IP address blocks: 85.93.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:71:42:c5:20:63:e0:e1:46:fb:fd:6a:f2:ab:72:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 10 15:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3633b64ed5d2ec3d71179dbce7000510f9721f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:ff:5d:0f:3f:41:86:c8:1e:db:73:cd:86:
73:4d:7c:4a:9b:89:76:db:2a:a7:d9:7a:de:49:9d:
9e:74:88:74:ad:93:91:c7:9f:bf:7e:b8:15:ed:90:
9b:ad:2e:22:09:93:78:74:22:4b:c4:2d:cd:44:d7:
16:94:3c:d5:11:f6:fb:1b:69:98:c8:c9:15:51:f9:
2f:57:94:89:15:8d:e8:86:4b:7b:84:37:8a:db:c2:
f5:7a:e6:56:20:55:47:8c:e5:63:19:49:eb:cf:51:
6d:56:a6:17:58:9d:f4:e6:c0:f8:f0:d0:ab:e0:21:
17:bf:bd:f3:0b:53:e2:ba:89:b7:8c:0e:e0:ba:ae:
ac:c6:29:e6:3c:66:d1:89:6e:df:60:c0:fa:9c:2e:
70:c1:f5:83:16:73:e0:89:2d:11:52:8a:13:e8:57:
01:72:68:7d:69:3e:4f:4d:a2:3e:86:c4:83:10:76:
73:4a:ac:b0:03:01:66:80:85:80:b9:49:e7:3a:da:
0a:b4:f9:6c:19:8a:68:e9:f5:13:12:44:5a:64:36:
b9:d5:df:a6:f5:b9:5a:69:f5:0a:5f:db:b6:c0:29:
cf:fb:57:30:ad:73:80:31:ad:9f:6b:2a:c5:c9:45:
2b:54:5f:fe:23:86:2f:e4:f7:82:aa:40:5a:81:18:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:63:3B:64:ED:5D:2E:C3:D7:11:79:DB:CE:70:00:51:0F:97:21:F2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/w2M7ZO1dLsPXEXnbznAAUQ-XIfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.23.0/24
Signature Algorithm: sha256WithRSAEncryption
72:eb:64:aa:89:03:e1:24:d5:e6:a4:90:62:19:96:33:e3:2e:
45:8a:ef:75:e2:67:99:fd:8a:a8:fd:95:ef:87:54:9f:51:98:
a0:2b:24:b2:cc:e0:4f:a8:7e:56:e4:9c:06:08:cb:dc:d2:46:
bb:c1:eb:f8:d6:e4:d9:b1:5c:83:9e:36:8a:d9:79:3b:2f:0f:
96:81:e9:d4:e5:83:92:3c:10:82:40:fe:e7:b0:da:b9:e0:e3:
c6:07:b1:22:c8:d6:45:2b:7f:04:a1:3d:99:04:29:aa:e2:ed:
5a:b7:76:5c:4c:c1:5c:1c:c3:5c:de:32:21:45:06:05:85:76:
e4:8a:69:41:27:d1:4e:10:8a:78:29:29:7f:1a:af:70:53:c9:
38:db:f4:2d:b5:8f:6a:ff:46:7d:84:3b:e8:c9:9a:75:fc:17:
55:72:6e:b4:39:71:38:d6:42:eb:7d:cb:45:8d:ee:fb:df:59:
6b:5d:d6:4f:34:8e:5b:c1:64:c6:6b:f7:3b:df:0d:ff:39:7c:
78:01:aa:b1:2e:df:20:32:12:3f:6e:3d:e7:68:f9:e3:46:30:
a1:48:bb:3e:4b:c7:30:46:1f:92:27:a5:1d:02:45:21:45:83:
f7:0f:04:6c:c1:a0:8f:5d:5f:fd:e1:6f:f5:41:08:1d:b3:68:
82:14:ec:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:46:36 2026 by rpki-client