Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/mAlFWGCll4OiLGvJR7T8i7Xmb6U.roa
File: mAlFWGCll4OiLGvJR7T8i7Xmb6U.roa (raw, json)
Hash identifier: 351HLyl6DEHcQwgJ6zlv/UC5Hq9LIwyYLDbTba6u2og=
Subject key identifier: 98:09:45:58:60:A5:97:83:A2:2C:6B:C9:47:B4:FC:8B:B5:E6:6F:A5
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A1D41DEC9766B8A4B4FEAF86033400E73C
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/mAlFWGCll4OiLGvJR7T8i7Xmb6U.roa
Signing time: Fri 13 Nov 2026 08:54:53 +0000
ROA not before: Fri 13 Nov 2026 08:54:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44589
IP address blocks: 93.119.207.0/24 maxlen: 24
93.119.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:1d:ec:97:66:b8:a4:b4:fe:af:86:03:34:00:e7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Nov 13 08:54:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9809455860a59783a22c6bc947b4fc8bb5e66fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:1b:55:90:36:24:bc:7a:52:8a:d1:d5:9a:
50:43:28:94:69:5f:f2:62:7f:f4:35:83:1e:c7:38:
a0:5a:f7:60:8f:58:fb:c5:d4:26:84:6d:ad:da:19:
0d:ab:bd:8b:5b:24:0a:a7:56:5a:26:89:32:b5:9a:
9c:9b:af:e7:1f:8f:30:22:db:f8:06:e4:87:fe:b6:
72:8d:f9:ac:a5:b5:f3:69:e9:89:cb:65:01:62:f7:
7c:cb:db:df:e6:10:a9:40:12:50:54:3e:9b:93:34:
42:d2:74:d4:85:73:e5:64:5e:38:23:8f:33:a1:16:
52:6a:96:55:9a:98:84:69:9d:05:0b:67:da:50:e9:
fd:76:74:69:a3:f5:80:88:75:26:ab:8d:04:8d:9a:
5a:10:c5:c5:94:9c:d7:b7:ac:b9:d4:55:69:23:ae:
4f:eb:4f:87:d2:4a:c6:8e:f1:7a:e6:79:76:26:22:
6e:b3:d5:9a:53:e7:f5:df:63:3b:cd:b2:b0:59:0d:
5f:c2:83:21:5e:d3:7f:73:60:16:31:4e:94:44:32:
ea:a9:cc:9c:c5:32:35:23:08:64:fb:1a:16:09:d1:
d9:5a:cc:dd:e8:6a:a8:0b:12:69:1b:ac:8b:62:e1:
04:42:e8:4b:74:4b:99:4c:ce:95:d1:29:4d:30:97:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:09:45:58:60:A5:97:83:A2:2C:6B:C9:47:B4:FC:8B:B5:E6:6F:A5
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/mAlFWGCll4OiLGvJR7T8i7Xmb6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.207.0/24
93.119.238.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:a2:24:2c:5e:a5:11:bd:c9:91:9b:c2:0f:a8:ae:9b:cb:5c:
81:c2:61:8f:31:85:09:b1:63:9b:ed:e6:75:80:9b:38:eb:84:
a2:0e:05:2c:65:49:5c:89:b3:09:06:48:14:7e:1b:6b:e8:a9:
23:9a:8c:88:02:69:ac:21:62:53:c7:d3:37:c8:a1:73:8e:33:
e5:2a:4a:73:7b:65:8a:5d:fd:1c:d8:2b:17:e1:69:60:0d:ea:
f2:c6:1a:cf:21:3e:c5:cd:6c:ea:d9:f1:29:8f:8c:9b:0c:4c:
ce:50:3f:d6:17:79:2c:ee:75:8f:19:bd:d8:d2:17:40:1b:bb:
33:27:7b:5c:72:1d:81:5f:16:4b:30:73:cb:bb:bf:52:1e:a4:
1a:a3:e5:6c:25:ba:bc:bb:dc:1f:db:cf:98:a8:c5:7c:2c:1e:
0c:eb:ed:c7:43:9c:ed:7a:61:b9:fd:a5:5e:b7:82:b1:84:5b:
b5:bf:1a:3e:df:f6:fe:7b:5b:bd:d7:80:72:b6:0a:a0:ac:85:
e0:3b:e7:55:7f:8e:47:80:ee:35:5d:67:0c:29:e3:76:a7:67:
39:d7:1d:31:e1:55:bf:b3:b5:7d:dd:9a:ac:94:90:9d:37:1d:
ba:3a:ab:24:46:b0:0a:13:8c:23:9f:08:95:77:5e:15:3e:c3:
78:3d:fc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:03:51 2026 by rpki-client