Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/93mM6QxMc1an-bwW3LgyZk3M8KU.roa
File: 93mM6QxMc1an-bwW3LgyZk3M8KU.roa (raw, json)
Hash identifier: pjNQiR78vQpJ1+nXELLCemTt02qTkznGGwvvqHeDahg=
Subject key identifier: F7:79:8C:E9:0C:4C:73:56:A7:F9:BC:16:DC:B8:32:66:4D:CC:F0:A5
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 019DB5B145CF834A805DD5F9FA7A528E6212
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/93mM6QxMc1an-bwW3LgyZk3M8KU.roa
Signing time: Wed 22 Apr 2026 14:56:26 +0000
ROA not before: Wed 22 Apr 2026 14:56:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214171
IP address blocks: 93.126.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:b1:45:cf:83:4a:80:5d:d5:f9:fa:7a:52:8e:62:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Apr 22 14:56:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7798ce90c4c7356a7f9bc16dcb832664dccf0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:45:f1:7d:25:58:70:d6:a5:49:4e:dc:14:
3f:09:59:bb:53:5e:ac:24:fa:0a:2b:62:af:37:16:
e0:a0:59:dd:1a:84:95:72:54:97:f7:ae:f9:63:50:
22:db:74:79:84:40:9b:aa:9d:65:c3:db:c7:a1:cc:
a9:f6:c2:c0:ed:6a:c5:a0:8f:c0:06:f8:69:2f:ab:
2e:67:98:42:e7:b1:52:b9:18:b3:cb:ed:f5:47:a1:
ed:7c:00:6e:30:99:f6:ea:8c:0f:76:51:cc:75:8f:
da:fb:d1:ff:e5:cd:57:ff:07:59:6f:5f:d2:be:d3:
b6:da:ec:8f:3d:36:e6:91:e2:52:17:d8:6a:05:14:
fb:11:14:8a:09:e6:52:ca:b9:52:4d:38:77:8c:9d:
b7:bc:77:de:2a:09:89:7d:01:f1:b7:e9:8a:85:a5:
d1:31:59:69:5c:03:39:a5:4a:1b:93:d3:8c:39:d2:
3e:6b:8c:4f:ae:3d:10:0b:2b:fc:ab:27:1a:59:cc:
8b:47:9c:b7:87:fe:5c:88:4b:44:23:7d:30:8c:89:
d8:3b:9a:45:9d:50:88:bf:03:3f:af:cf:5f:16:16:
a4:8a:f5:5d:fa:47:b7:7b:da:04:f2:b7:5f:ef:2a:
25:58:47:7e:a0:13:8c:27:58:7d:e9:06:aa:ab:e3:
c9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:79:8C:E9:0C:4C:73:56:A7:F9:BC:16:DC:B8:32:66:4D:CC:F0:A5
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/93mM6QxMc1an-bwW3LgyZk3M8KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.10.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:5c:7c:62:29:36:08:e0:2c:4c:2b:08:4d:08:70:4e:5a:3a:
8e:bc:8e:9c:7c:06:bb:c4:45:9c:7d:d3:56:d1:8e:83:78:98:
95:7a:32:48:36:89:f2:ba:03:04:6a:4b:05:be:f5:5a:ac:69:
d6:f4:c7:4d:da:d8:c1:88:7a:7a:1c:bd:56:bd:f2:42:ad:0d:
d3:c2:53:e3:7e:c6:aa:76:ff:6c:0e:c9:47:19:ab:35:5f:23:
aa:0f:5e:2d:ee:6c:ab:d6:27:5e:32:7c:78:99:b8:0c:f0:1d:
4e:fa:84:e6:8f:0f:75:be:1a:7c:7a:2b:55:a7:a7:82:c5:3f:
1f:16:ae:36:a0:dc:cc:e9:cb:ae:89:8c:c6:72:8c:f0:6a:81:
27:e9:03:02:7e:8b:48:59:ac:58:e9:06:56:e1:44:24:5c:d1:
6f:5c:29:8a:4b:55:76:32:2f:7a:00:8c:97:2d:15:1e:bd:51:
af:a1:a8:a0:e1:f2:ae:4e:13:f8:91:4b:f5:42:86:be:ae:05:
47:3a:05:c3:2e:78:89:68:9c:8f:83:28:77:2c:10:f4:95:70:
db:dc:b8:c2:3e:e3:12:86:cb:b4:64:a7:d6:9f:40:dd:78:16:
d6:07:56:00:41:4b:fe:ce:38:79:80:40:d9:55:2e:6b:40:02:
4d:0e:c1:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ21sUXPg0qAXdX5+npSjmISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNTNhY2NiOTRlMTBjZjhjMmMyOTY3OTA2N2VlMzkwOTlm
NDA0ZDMwHhcNMjYwNDIyMTQ1NjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzc5OGNlOTBjNGM3MzU2YTdmOWJjMTZkY2I4MzI2NjRkY2NmMGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouVF8X0lWHDWpUlO3BQ/CVm7U16s
JPoKK2KvNxbgoFndGoSVclSX9675Y1Ai23R5hECbqp1lw9vHocyp9sLA7WrFoI/A
BvhpL6suZ5hC57FSuRizy+31R6HtfABuMJn26owPdlHMdY/a+9H/5c1X/wdZb1/S
vtO22uyPPTbmkeJSF9hqBRT7ERSKCeZSyrlSTTh3jJ23vHfeKgmJfQHxt+mKhaXR
MVlpXAM5pUobk9OMOdI+a4xPrj0QCyv8qycaWcyLR5y3h/5ciEtEI30wjInYO5pF
nVCIvwM/r89fFhakivVd+ke3e9oE8rdf7yolWEd+oBOMJ1h96Qaqq+PJ6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPd5jOkMTHNWp/m8Fty4MmZNzPClMB8GA1UdIwQY
MBaAFINTrMuU4Qz4wsKWeQZ+45CZ9ATTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEt
NmMzOTUwMTk0MzcwLzEvOTNtTTZReE1jMWFuLWJ3VzNMZ3laazNNOEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEtNmMzOTUwMTk0Mzcw
LzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXX4KMA0G
CSqGSIb3DQEBCwUAA4IBAQBsXHxiKTYI4CxMKwhNCHBOWjqOvI6cfAa7xEWcfdNW
0Y6DeJiVejJINonyugMEaksFvvVarGnW9MdN2tjBiHp6HL1WvfJCrQ3TwlPjfsaq
dv9sDslHGas1XyOqD14t7myr1ideMnx4mbgM8B1O+oTmjw91vhp8eitVp6eCxT8f
Fq42oNzM6cuuiYzGcozwaoEn6QMCfotIWaxY6QZW4UQkXNFvXCmKS1V2Mi96AIyX
LRUevVGvoaig4fKuThP4kUv1Qoa+rgVHOgXDLniJaJyPgyh3LBD0lXDb3LjCPuMS
hsu0ZKfWn0DdeBbWB1YAQUv+zjh5gEDZVS5rQAJNDsFb
-----END CERTIFICATE-----
Generated at Wed May 13 15:06:56 2026 by rpki-client