Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/D31LDaiFUxCIEk0Ck2_Zc83-R90.roa
File: D31LDaiFUxCIEk0Ck2_Zc83-R90.roa (raw, json)
Hash identifier: aLcJxNTZmQZRz5aNXkDx5xs2ilX8NDzgHn3D9fxSAwo=
Subject key identifier: 0F:7D:4B:0D:A8:85:53:10:88:12:4D:02:93:6F:D9:73:CD:FE:47:DD
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01A0A066D01FEF20397A2DB87E95DAB46E55
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/D31LDaiFUxCIEk0Ck2_Zc83-R90.roa
Signing time: Mon 14 Sep 2026 14:51:27 +0000
ROA not before: Mon 14 Sep 2026 14:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197666
IP address blocks: 93.89.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:66:d0:1f:ef:20:39:7a:2d:b8:7e:95:da:b4:6e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Sep 14 14:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f7d4b0da885531088124d02936fd973cdfe47dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:db:6b:f1:4e:77:a3:41:5e:eb:5f:cf:28:
cc:37:08:0d:00:6a:74:e8:1e:04:9a:88:1b:ae:6d:
29:ed:8e:a8:8b:5c:97:89:5e:47:a0:c8:71:e6:e2:
22:9a:8c:d8:02:97:d4:a3:36:af:42:c4:9f:2b:0a:
18:95:e5:06:40:d7:fd:92:02:cd:2c:a8:e1:17:c0:
47:2c:0c:37:0a:df:36:b0:6c:8e:77:d8:c2:6d:63:
db:39:4a:e8:65:cb:9f:ab:9c:0e:38:c7:83:ec:7a:
7d:55:aa:d1:8f:e0:6d:5d:bc:88:ed:78:26:d5:89:
bf:bf:39:6f:c4:da:39:1c:3d:26:a8:19:77:aa:93:
17:cd:9e:7f:eb:e3:02:7d:17:bc:fb:bb:db:0c:dc:
3a:a2:21:8f:c3:9f:f8:bb:45:4f:95:9d:19:76:81:
5b:64:ad:20:ce:20:85:bd:74:ad:73:e2:81:34:c9:
ea:e0:bb:a7:c3:36:be:8f:ac:d0:0b:68:cd:e1:57:
93:2d:c5:3a:5f:f4:d0:16:cf:18:d5:5b:0d:9b:53:
73:1a:21:04:2c:05:f0:7b:3e:0b:51:55:01:59:bf:
92:82:06:20:55:00:1f:b6:69:e5:e5:c8:4f:c2:cd:
d2:40:52:54:8b:2a:b3:d8:96:a8:7c:39:8c:24:87:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7D:4B:0D:A8:85:53:10:88:12:4D:02:93:6F:D9:73:CD:FE:47:DD
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/D31LDaiFUxCIEk0Ck2_Zc83-R90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.220.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d0:74:bf:80:6a:16:10:94:c1:f8:3a:84:5c:2f:e5:67:6b:
e7:31:28:78:91:6f:40:5a:22:40:0b:f6:bf:a3:70:9e:74:a0:
2b:bc:ae:c9:fd:44:62:a5:1d:2a:c8:8b:b7:9d:69:56:ca:b2:
d3:26:92:25:8f:80:49:7b:5f:93:ca:d3:89:c2:34:ef:81:09:
8d:db:7d:d1:9d:c6:79:1c:3f:20:d1:ce:3e:97:58:29:3b:90:
e3:48:82:b1:31:98:f2:fa:fd:8d:9c:40:44:46:65:84:12:c9:
4e:75:db:4e:64:95:41:de:08:b5:52:23:3a:c2:f6:18:fa:4c:
ca:61:03:11:af:f3:33:2b:c9:70:93:a4:70:d3:13:75:ae:7f:
e6:36:4d:6c:e8:30:24:28:94:cb:cf:74:6b:03:04:ca:52:c6:
95:c4:31:62:fd:81:c8:ca:62:ee:81:6f:92:f2:57:a1:4c:79:
3f:8e:34:80:5e:2c:2f:02:78:85:14:a2:ad:02:5d:6b:66:f9:
19:fb:d5:ef:ad:08:2b:62:92:ef:a4:2c:84:21:3b:7f:2a:f9:
66:6e:88:ed:c9:9d:3b:55:e1:b4:67:3e:4a:37:2e:46:23:f6:
5d:3a:f1:7f:d9:37:9f:5b:dc:90:91:3b:8b:e1:e0:e8:a9:c7:
48:67:c6:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCgZtAf7yA5ei24fpXatG5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjYwOTE0MTQ1MTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjdkNGIwZGE4ODU1MzEwODgxMjRkMDI5MzZmZDk3M2NkZmU0N2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ7ba/FOd6NBXutfzyjMNwgNAGp0
6B4Emogbrm0p7Y6oi1yXiV5HoMhx5uIimozYApfUozavQsSfKwoYleUGQNf9kgLN
LKjhF8BHLAw3Ct82sGyOd9jCbWPbOUroZcufq5wOOMeD7Hp9VarRj+BtXbyI7Xgm
1Ym/vzlvxNo5HD0mqBl3qpMXzZ5/6+MCfRe8+7vbDNw6oiGPw5/4u0VPlZ0ZdoFb
ZK0gziCFvXStc+KBNMnq4Lunwza+j6zQC2jN4VeTLcU6X/TQFs8Y1VsNm1NzGiEE
LAXwez4LUVUBWb+SggYgVQAftmnl5chPws3SQFJUiyqz2JaofDmMJIe50QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA99Sw2ohVMQiBJNApNv2XPN/kfdMB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvRDMxTERhaUZVeENJRWswQ2syX1pjODMtUjkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVncMA0G
CSqGSIb3DQEBCwUAA4IBAQBd0HS/gGoWEJTB+DqEXC/lZ2vnMSh4kW9AWiJAC/a/
o3CedKArvK7J/URipR0qyIu3nWlWyrLTJpIlj4BJe1+TytOJwjTvgQmN233RncZ5
HD8g0c4+l1gpO5DjSIKxMZjy+v2NnEBERmWEEslOddtOZJVB3gi1UiM6wvYY+kzK
YQMRr/MzK8lwk6Rw0xN1rn/mNk1s6DAkKJTLz3RrAwTKUsaVxDFi/YHIymLugW+S
8lehTHk/jjSAXiwvAniFFKKtAl1rZvkZ+9XvrQgrYpLvpCyEITt/KvlmbojtyZ07
VeG0Zz5KNy5GI/ZdOvF/2TefW9yQkTuL4eDoqcdIZ8a1
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:40:09 2026 by rpki-client