Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/aNmhMUglIr2giFdXm-cOJi5f7t0.roa
File: aNmhMUglIr2giFdXm-cOJi5f7t0.roa (raw, json)
Hash identifier: 3MjHDUiU+/7uDICeGLTTAd4NEfz+JjZNSCSY07jxmow=
Subject key identifier: 68:D9:A1:31:48:25:22:BD:A0:88:57:57:9B:E7:0E:26:2E:5F:EE:DD
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 01A0ECB0FA679E5DB5E7850CF47036DD60B3
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/aNmhMUglIr2giFdXm-cOJi5f7t0.roa
Signing time: Tue 29 Sep 2026 10:23:36 +0000
ROA not before: Tue 29 Sep 2026 10:23:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4637
IP address blocks: 77.93.88.0/24 maxlen: 24
85.149.192.0/20 maxlen: 24
85.149.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:b0:fa:67:9e:5d:b5:e7:85:0c:f4:70:36:dd:60:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Sep 29 10:23:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68d9a131482522bda08857579be70e262e5feedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e8:66:90:e9:d7:cb:3d:6b:b0:0f:c1:64:ac:
92:3e:2a:6a:8c:85:ae:49:5e:b0:c4:ac:20:32:e5:
04:e9:df:6e:ef:e6:b0:00:11:1a:da:5a:a9:39:2a:
2a:e4:ed:38:cf:c3:49:9c:b8:97:2a:90:eb:36:a3:
8f:e9:55:9e:79:ce:5b:c5:ea:7b:cf:b6:95:18:bb:
c7:b6:87:85:88:33:40:07:85:38:68:73:03:fd:e0:
2b:34:f1:0b:e9:67:8d:db:7a:de:bf:21:f2:95:13:
3c:fc:da:35:96:f4:15:07:af:c0:ee:86:84:0a:0c:
81:89:c5:73:cc:60:bb:cc:ce:e1:12:39:13:f2:35:
63:98:ff:57:31:72:8f:f2:06:a1:6d:16:61:34:d2:
d4:12:3e:7e:5e:61:61:3a:3f:0b:6b:37:23:d4:09:
a8:5d:d7:7c:cd:f2:bf:e3:90:7f:20:ab:59:64:e2:
25:62:a3:b4:30:a9:7a:d9:34:55:7c:f5:94:40:b1:
e4:a2:62:f3:e5:85:fb:c4:da:38:32:96:0c:91:8d:
fa:d4:59:66:27:bc:d7:65:00:77:df:b9:06:19:60:
09:8c:65:74:c2:b7:24:b4:da:6e:d9:27:7e:ad:a4:
8a:cb:27:a5:9e:93:66:79:84:33:a3:29:9e:7e:9f:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D9:A1:31:48:25:22:BD:A0:88:57:57:9B:E7:0E:26:2E:5F:EE:DD
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/aNmhMUglIr2giFdXm-cOJi5f7t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.88.0/24
85.149.192.0/20
85.149.221.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:cf:6c:91:f6:40:38:03:06:2c:0b:38:5a:cc:58:21:54:96:
8d:16:59:e7:d4:b4:6e:54:02:78:d8:8d:00:24:12:71:4b:64:
c9:5c:4d:28:8e:20:7c:78:79:56:84:60:36:a0:eb:08:3c:2f:
76:43:23:b1:ce:17:6d:d4:1e:59:34:6a:37:aa:92:81:a3:28:
76:dc:d8:3a:1f:b2:b5:4b:0c:5c:94:49:4c:5e:e9:fa:fd:ad:
04:05:35:3b:45:e2:90:39:b9:23:0e:52:1c:62:6e:de:bf:24:
d6:cc:1b:2c:bf:f7:fb:5c:66:ad:78:b3:c0:5b:49:93:55:c6:
55:58:a6:8f:1d:23:3d:f9:cf:ad:c4:b8:d9:92:0c:1b:7f:21:
e7:33:85:04:2b:7a:6c:24:e5:57:67:ad:80:c6:23:9e:ad:17:
c5:7e:f4:41:7a:ff:6c:ea:c5:98:82:2d:dc:15:83:96:fd:6a:
08:81:f0:78:28:1f:89:04:0c:19:d9:b1:22:d8:f5:d5:bb:8d:
95:d9:17:7e:48:58:0c:65:08:6c:36:9f:0e:ce:88:9e:eb:0a:
42:bb:f0:ce:3a:27:fb:53:ba:ed:11:14:4e:ae:8e:aa:97:6a:
39:74:40:13:1b:c6:9a:34:a0:05:de:f0:ef:8d:95:60:c6:40:
87:54:a6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:35:54 2026 by rpki-client