Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/dCE2fA2T7JJJftADurwqnINg4Xk.roa
File: dCE2fA2T7JJJftADurwqnINg4Xk.roa (raw, json)
Hash identifier: l0uqVxXQwge535nKbCJaHwwjDYSKYXonosppxPWkUPs=
Subject key identifier: 74:21:36:7C:0D:93:EC:92:49:7E:D0:03:BA:BC:2A:9C:83:60:E1:79
Certificate issuer: /CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Certificate serial: 01A0C3C83A55214BAB4797C2FEF1B86EDA84
Authority key identifier: 8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/dCE2fA2T7JJJftADurwqnINg4Xk.roa
Signing time: Mon 21 Sep 2026 11:44:34 +0000
ROA not before: Mon 21 Sep 2026 11:44:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212855
IP address blocks: 93.157.140.0/24 maxlen: 24
157.173.77.0/24 maxlen: 24
2001:67c:f8c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:c8:3a:55:21:4b:ab:47:97:c2:fe:f1:b8:6e:da:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Validity
Not Before: Sep 21 11:44:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7421367c0d93ec92497ed003babc2a9c8360e179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:d5:9b:01:c5:2c:8a:16:fb:4f:d0:1f:62:
e6:a7:f6:14:e6:59:4d:d2:29:0e:72:43:90:0f:df:
0b:d4:85:f2:d6:49:86:16:f9:2c:90:1c:53:b7:c1:
cd:d7:0a:f7:a2:48:42:1e:80:79:0c:90:14:f8:c8:
e0:0d:e4:34:86:27:67:6f:a9:1b:0f:a7:8c:f1:bd:
cc:9f:f8:13:3b:49:39:ed:29:6f:36:ce:8b:56:df:
5c:92:c4:9b:15:35:be:15:f0:df:24:fa:bd:92:37:
15:43:21:0c:3c:c8:5f:4d:19:d3:62:a8:f1:51:e4:
ae:32:f2:58:3b:e1:21:26:69:95:7e:23:48:e8:2b:
fa:1e:08:2a:06:d4:66:2c:b1:4f:60:de:fd:e0:93:
39:18:2c:83:09:e6:23:cf:df:12:46:44:6b:6d:51:
da:4c:e5:ca:3a:55:6f:53:f1:aa:66:c4:56:61:d6:
9b:91:c0:fc:24:2d:78:c0:93:fe:8e:a2:27:67:cf:
d3:a0:86:fa:84:ef:73:0e:79:1e:4c:84:32:a9:7f:
76:13:7f:5f:8c:d9:74:c5:d3:0a:44:80:e7:df:ce:
dc:10:f0:d3:04:ee:f0:26:86:a2:50:84:9e:80:46:
f1:78:46:49:29:2f:63:27:b3:d5:01:a0:6d:8b:1a:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:21:36:7C:0D:93:EC:92:49:7E:D0:03:BA:BC:2A:9C:83:60:E1:79
X509v3 Authority Key Identifier:
keyid:8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/dCE2fA2T7JJJftADurwqnINg4Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.140.0/24
157.173.77.0/24
IPv6:
2001:67c:f8c::/48
Signature Algorithm: sha256WithRSAEncryption
70:a1:8e:32:27:35:58:cb:ec:f0:c3:24:0c:3a:cb:68:32:a6:
c1:9f:be:03:9c:21:c3:d3:9d:4b:9b:bc:0a:ce:1a:ab:8b:8f:
9b:95:bf:5f:61:83:ff:56:c7:a6:41:b2:60:b0:4c:06:e4:d7:
e9:79:57:7d:62:02:75:1d:93:fb:cb:3a:6d:6b:65:84:02:97:
18:55:b3:3f:32:b4:f3:2b:6e:05:c3:bb:70:70:4d:9f:15:1e:
bc:9c:bd:42:e1:65:c3:34:ae:79:75:f6:56:28:4e:5a:e3:47:
ff:b6:ca:99:95:59:eb:70:5d:1c:c3:6c:1e:45:98:01:ea:2a:
2d:f1:5d:71:43:c7:df:c3:97:97:21:0e:4b:f7:98:b7:c3:2f:
b5:36:4c:9d:07:8f:c3:6f:40:51:65:05:3d:b9:3a:57:bd:17:
4d:d8:c4:c3:1a:0e:19:30:26:72:0d:08:5b:bc:f8:82:c3:d9:
ff:08:55:79:17:be:9d:3f:94:3e:7d:3f:f3:bd:1b:9f:60:15:
a1:ff:39:df:f2:3d:e0:23:3a:61:fc:54:f1:2d:16:2c:3c:5f:
df:1e:71:c9:d2:8e:6c:ff:e6:67:e4:ad:48:cf:d6:32:c7:e0:
a7:84:33:60:e6:d2:a2:b7:e4:fe:0c:c6:b8:9f:60:b7:2d:27:
0c:bf:91:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:07:02 2026 by rpki-client