Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/1RXLSMCQxm6vHzpOwWgDUAInFdg.roa
File: 1RXLSMCQxm6vHzpOwWgDUAInFdg.roa (raw, json)
Hash identifier: tiFDxiab3e0Tsjr6KVenyf0JU8F/yU/38yIyF4rjX4k=
Subject key identifier: D5:15:CB:48:C0:90:C6:6E:AF:1F:3A:4E:C1:68:03:50:02:27:15:D8
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019DD2F8B1F1A9F26E10320A79AD35599A2B
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/1RXLSMCQxm6vHzpOwWgDUAInFdg.roa
Signing time: Tue 28 Apr 2026 07:23:26 +0000
ROA not before: Tue 28 Apr 2026 07:23:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211486
IP address blocks: 93.152.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d2:f8:b1:f1:a9:f2:6e:10:32:0a:79:ad:35:59:9a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Apr 28 07:23:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d515cb48c090c66eaf1f3a4ec1680350022715d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ed:a7:f7:4e:83:16:95:33:72:ea:82:f2:cf:
a4:8d:22:d2:66:e7:42:38:a3:48:34:1e:f9:c2:aa:
af:89:51:ec:96:2d:ed:d3:10:77:f7:68:f8:7e:82:
76:cc:c8:d4:88:38:65:13:0e:30:80:d6:95:f7:7f:
43:c7:f0:a7:00:67:44:ee:46:f4:4a:03:8e:44:1b:
2f:86:c5:e8:2b:76:50:6f:4d:65:e7:c5:7d:4a:17:
e1:6b:64:52:c9:dd:fb:1c:f8:cb:66:e1:94:81:34:
ad:42:07:02:98:2a:6a:39:2c:6a:05:76:e9:4b:62:
4a:c6:20:8b:47:1f:ff:94:1a:7c:78:da:6f:80:41:
f5:02:b4:17:2f:58:87:1b:95:5b:e1:d7:f7:33:e6:
0a:05:7e:50:6c:de:1e:7c:c8:75:d0:f9:53:a1:84:
21:62:80:d0:42:93:f4:46:3a:a0:c2:8a:a6:06:fd:
a4:6f:e9:3d:f9:c3:66:be:03:1b:18:1c:b1:d9:e9:
29:95:79:ca:c6:ed:6e:f0:45:7b:8c:38:4f:97:97:
eb:3a:b6:31:38:5f:f9:d4:d4:83:2e:30:8f:52:66:
69:a0:51:9d:46:2b:7c:df:eb:ce:b5:cf:bb:bc:86:
5a:8e:74:e2:46:a6:4b:1d:7f:6d:48:e7:8a:7c:a1:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:15:CB:48:C0:90:C6:6E:AF:1F:3A:4E:C1:68:03:50:02:27:15:D8
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/1RXLSMCQxm6vHzpOwWgDUAInFdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.208.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:3f:b4:a5:ad:21:ae:6b:31:74:39:49:26:52:db:28:fe:cd:
fd:2f:41:d8:28:6e:d5:ee:20:3c:2f:7b:8b:c1:86:9a:4e:86:
66:6b:8e:88:f4:1b:d4:3a:4d:d3:e2:18:04:eb:61:43:ce:63:
30:b4:fa:0b:5e:25:72:cf:fe:fd:db:2c:3d:ed:33:44:18:df:
b9:c9:e8:ea:6a:86:14:66:f9:f9:41:87:ac:ea:19:2b:ce:1b:
42:8f:a2:c0:b9:a5:cf:8f:ee:2c:52:ef:54:29:88:ed:d7:20:
82:af:7c:c4:a7:57:fa:de:18:74:d9:1e:bb:5e:f7:db:47:81:
ef:01:db:40:bc:10:06:20:98:ea:24:04:c3:16:d9:c3:c9:6f:
5b:d2:0f:7d:46:16:59:63:3d:01:6c:e6:29:6f:1b:b1:2f:6e:
a6:c8:88:99:d6:dd:eb:ed:ce:1f:09:be:75:4c:da:be:65:c3:
36:f7:d6:60:16:aa:d1:07:6c:19:74:f9:76:1b:1d:41:b1:27:
ac:24:f9:a0:52:5f:16:31:e5:ca:fc:75:1c:92:72:dd:bb:96:
e6:8c:14:cd:21:c1:c3:0a:9a:5f:23:29:91:97:87:d0:e5:9c:
98:df:30:48:14:0b:cd:8a:33:d8:cc:68:eb:9f:19:23:76:ee:
4d:80:7b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:04 2026 by rpki-client