Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/v1Q2qC8UBwAnyw6r_QaTLexPeCw.roa
File: v1Q2qC8UBwAnyw6r_QaTLexPeCw.roa (raw, json)
Hash identifier: xTBwt3bpiNR38wa6RHvtrOY5Y6eQTG4EPi8pths90SE=
Subject key identifier: BF:54:36:A8:2F:14:07:00:27:CB:0E:AB:FD:06:93:2D:EC:4F:78:2C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019F8A13B29297DD338D1EB08E9668BC3787
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/v1Q2qC8UBwAnyw6r_QaTLexPeCw.roa
Signing time: Wed 22 Jul 2026 13:46:14 +0000
ROA not before: Wed 22 Jul 2026 13:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 93.113.179.0/24 maxlen: 24
93.114.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:13:b2:92:97:dd:33:8d:1e:b0:8e:96:68:bc:37:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 22 13:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf5436a82f14070027cb0eabfd06932dec4f782c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:7c:fe:34:3b:aa:35:dd:dd:cb:41:46:63:
a0:d0:08:91:86:df:61:0b:ca:e8:89:4e:da:5e:98:
25:e7:13:aa:9f:b2:5a:e3:21:41:47:bf:74:34:9a:
98:f9:42:83:b3:95:0f:1c:e8:29:1a:10:19:1e:89:
88:97:06:b2:1f:54:78:c2:25:9b:16:dc:f1:49:4c:
5d:a4:e0:70:46:1d:ca:24:a4:32:e5:7a:b0:d5:b6:
41:7f:e5:c3:d8:64:67:78:97:cd:20:38:da:db:c5:
ec:45:f4:d5:34:1b:77:64:e6:92:6b:f3:f7:77:67:
a0:ad:8a:86:5a:2f:e2:8b:ab:83:9d:37:ce:bf:c9:
0f:7f:7c:e6:43:cf:7c:55:44:44:dc:b6:9f:60:34:
6a:cd:d7:07:ef:91:58:54:48:e4:7a:01:0e:88:da:
6d:b2:11:bd:81:dc:7e:75:db:31:f7:fc:3a:1c:f4:
1b:f6:8b:ba:9d:a0:4f:99:88:9b:18:04:06:aa:96:
3f:da:e4:97:17:a5:e6:47:94:a3:6f:2b:81:55:b3:
cb:04:1e:3f:1f:12:92:91:14:67:12:8b:0e:2d:36:
63:2b:91:ec:7c:78:22:10:d8:2c:29:7f:09:75:3d:
3e:d8:72:57:ae:28:8a:3d:b3:0c:31:c1:51:0f:f4:
28:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:54:36:A8:2F:14:07:00:27:CB:0E:AB:FD:06:93:2D:EC:4F:78:2C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/v1Q2qC8UBwAnyw6r_QaTLexPeCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.179.0/24
93.114.89.0/24
Signature Algorithm: sha256WithRSAEncryption
54:20:f8:1f:0e:ee:16:aa:3e:4d:f3:f0:4f:9c:e2:26:36:3c:
56:2e:1b:0f:2d:7b:3a:af:a3:30:9c:da:fa:a8:4e:ed:31:86:
88:8b:4a:f5:e8:69:b4:2d:50:a2:b7:71:78:bd:4d:2b:51:5e:
bd:2c:fd:bb:b8:88:46:60:85:15:7c:4b:ca:1a:5b:a5:6e:e8:
83:0f:92:09:58:e9:79:bb:cc:31:28:fc:b3:83:f8:44:e4:71:
2a:b3:79:66:70:78:cb:33:b0:a6:3b:8d:44:98:eb:4b:a4:04:
01:53:40:f9:db:c7:39:8a:90:ae:ca:a1:38:58:0c:7e:09:44:
45:c9:fc:ae:6e:9d:09:9c:47:ab:0c:4a:d2:b7:6b:4d:77:d0:
d4:7e:ea:e7:5c:d9:67:79:0a:d8:42:e1:fb:31:1e:67:87:59:
95:50:c3:45:b7:c5:46:3f:1a:a2:7c:cc:a4:68:0d:b5:50:10:
27:d7:ea:5e:dc:08:ed:a8:b3:8a:35:0a:c3:b5:21:74:0c:49:
ee:42:ff:a1:63:b4:08:b3:38:4b:01:93:f7:a9:42:69:47:80:
0d:e1:af:ea:c8:0f:04:d3:5d:12:f1:d7:45:ee:a9:4a:d3:4e:
71:b2:dc:83:a0:d7:8f:ec:44:19:6b:d7:3f:68:f4:85:84:62:
da:7d:21:df
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+KE7KSl90zjR6wjpZovDeHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYwNzIyMTM0NjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjU0MzZhODJmMTQwNzAwMjdjYjBlYWJmZDA2OTMyZGVjNGY3ODJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eR8/jQ7qjXd3ctBRmOg0AiRht9h
C8roiU7aXpgl5xOqn7Ja4yFBR790NJqY+UKDs5UPHOgpGhAZHomIlwayH1R4wiWb
FtzxSUxdpOBwRh3KJKQy5Xqw1bZBf+XD2GRneJfNIDja28XsRfTVNBt3ZOaSa/P3
d2egrYqGWi/ii6uDnTfOv8kPf3zmQ898VURE3LafYDRqzdcH75FYVEjkegEOiNpt
shG9gdx+ddsx9/w6HPQb9ou6naBPmYibGAQGqpY/2uSXF6XmR5SjbyuBVbPLBB4/
HxKSkRRnEosOLTZjK5HsfHgiENgsKX8JdT0+2HJXriiKPbMMMcFRD/QoCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL9UNqgvFAcAJ8sOq/0Gky3sT3gsMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvdjFRMnFDOFVCd0FueXc2cl9RYVRMZXhQZUN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXXGzAwQA
XXJZMA0GCSqGSIb3DQEBCwUAA4IBAQBUIPgfDu4Wqj5N8/BPnOImNjxWLhsPLXs6
r6MwnNr6qE7tMYaIi0r16Gm0LVCit3F4vU0rUV69LP27uIhGYIUVfEvKGlulbuiD
D5IJWOl5u8wxKPyzg/hE5HEqs3lmcHjLM7CmO41EmOtLpAQBU0D528c5ipCuyqE4
WAx+CURFyfyubp0JnEerDErSt2tNd9DUfurnXNlneQrYQuH7MR5nh1mVUMNFt8VG
PxqifMykaA21UBAn1+pe3AjtqLOKNQrDtSF0DEnuQv+hY7QIszhLAZP3qUJpR4AN
4a/qyA8E010S8ddF7qlK005xstyDoNeP7EQZa9c/aPSFhGLafSHf
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:39 2026 by rpki-client