Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0902c2-5650-44a7-a53c-e780f13b245a/1/gpGElzUmjuqdHJapTLDmhRMtBQc.roa
File: gpGElzUmjuqdHJapTLDmhRMtBQc.roa (raw, json)
Hash identifier: JkjRa61rvVX6ySfU/bRKh17xcEVLrstc9W5WtCiKQvA=
Subject key identifier: 82:91:84:97:35:26:8E:EA:9D:1C:96:A9:4C:B0:E6:85:13:2D:05:07
Certificate issuer: /CN=e86e7f55a30156b4ee644e8ccbd073bdc082eec6
Certificate serial: 019E15F5BD2B04D5922EBB893FCC0B8E3C17
Authority key identifier: E8:6E:7F:55:A3:01:56:B4:EE:64:4E:8C:CB:D0:73:BD:C0:82:EE:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6G5_VaMBVrTuZE6My9BzvcCC7sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0902c2-5650-44a7-a53c-e780f13b245a/1/gpGElzUmjuqdHJapTLDmhRMtBQc.roa
Signing time: Mon 11 May 2026 07:34:46 +0000
ROA not before: Mon 11 May 2026 07:34:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50091
IP address blocks: 93.115.6.0/24 maxlen: 24
93.115.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0902c2-5650-44a7-a53c-e780f13b245a/1/6G5_VaMBVrTuZE6My9BzvcCC7sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0902c2-5650-44a7-a53c-e780f13b245a/1/6G5_VaMBVrTuZE6My9BzvcCC7sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6G5_VaMBVrTuZE6My9BzvcCC7sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:15:f5:bd:2b:04:d5:92:2e:bb:89:3f:cc:0b:8e:3c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86e7f55a30156b4ee644e8ccbd073bdc082eec6
Validity
Not Before: May 11 07:34:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8291849735268eea9d1c96a94cb0e685132d0507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:ae:96:59:66:33:bc:c9:94:c0:d4:f4:a3:
e6:85:f7:02:26:a3:12:6e:77:07:75:a4:74:d9:43:
c3:bb:2c:fb:66:59:fd:9c:8e:5d:f4:d4:49:d2:6c:
bf:97:89:a6:98:5f:80:1c:56:59:0b:3f:bf:ae:b1:
cc:eb:0c:21:77:07:99:47:57:7f:b4:bc:fb:a1:66:
33:f5:d2:bd:b9:b0:c4:ab:94:41:ca:f2:61:b5:93:
8a:75:44:79:88:0a:99:63:15:3c:e1:97:c9:1f:6c:
8f:18:da:62:2b:25:76:fe:96:d8:bb:63:88:ec:48:
6c:5b:a4:68:ba:2a:13:a4:1f:15:cb:59:84:a9:28:
57:e3:91:84:e7:a1:96:e1:71:dd:b1:66:83:60:84:
39:29:d6:9e:c5:ba:60:29:b5:0d:3e:59:f8:f9:f8:
a2:45:8e:06:10:89:4d:f0:82:11:c1:f1:36:ce:a2:
45:25:dc:21:31:53:20:1f:94:ce:2f:b4:d4:d6:a6:
d4:3f:9e:07:e2:4c:f2:23:4b:32:c6:2c:60:38:57:
c4:71:5f:69:3f:e7:8a:92:b1:ea:69:dc:29:e9:be:
23:a9:41:19:4c:d1:47:cf:cd:3d:57:28:7b:ec:65:
de:74:e5:81:9a:f0:9f:18:ac:22:f2:85:69:6f:a5:
da:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:91:84:97:35:26:8E:EA:9D:1C:96:A9:4C:B0:E6:85:13:2D:05:07
X509v3 Authority Key Identifier:
keyid:E8:6E:7F:55:A3:01:56:B4:EE:64:4E:8C:CB:D0:73:BD:C0:82:EE:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6G5_VaMBVrTuZE6My9BzvcCC7sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0902c2-5650-44a7-a53c-e780f13b245a/1/gpGElzUmjuqdHJapTLDmhRMtBQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0902c2-5650-44a7-a53c-e780f13b245a/1/6G5_VaMBVrTuZE6My9BzvcCC7sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.6.0/24
93.115.108.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ff:4b:ed:0b:dc:60:63:4b:59:b3:1d:a3:48:cf:d2:7e:d3:
33:09:75:03:f4:86:49:fb:e2:40:5f:1a:ab:38:41:0c:be:56:
53:a5:e4:05:ab:7a:0f:35:91:5d:0e:89:aa:c0:be:42:0f:d5:
0f:78:d7:2b:01:7a:4e:59:20:bb:39:74:8d:c0:d6:32:15:7f:
d6:5a:b5:bf:4a:2c:8a:29:ec:8d:98:a7:9f:9e:df:75:fc:1f:
e1:bc:6b:9c:7f:dc:07:46:ef:08:bb:4b:49:e9:18:63:2d:1d:
a5:46:6f:24:f3:8b:70:bc:e9:e0:d4:b9:26:98:85:c7:6e:e2:
ee:30:e5:82:73:dd:07:30:bc:5e:7b:36:e5:bc:4d:09:56:84:
71:76:47:0a:dc:46:d1:a5:95:f6:6d:64:48:41:89:e6:cb:61:
44:45:3a:90:b0:54:73:e8:d3:d3:a8:99:d3:ac:50:ae:ce:50:
1f:af:77:d2:1b:d1:34:e5:34:a3:e4:15:79:5b:96:16:52:48:
ce:8c:fa:75:bc:60:02:55:2c:39:12:54:73:56:7c:e9:45:e5:
02:24:e8:e3:5d:ee:3b:81:11:05:2d:2e:f5:be:48:f4:02:9d:
8d:5c:9f:59:4f:27:2f:e7:b3:f3:a0:e8:1d:ed:d2:99:00:e4:
91:f2:5c:62
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4V9b0rBNWSLruJP8wLjjwXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NmU3ZjU1YTMwMTU2YjRlZTY0NGU4Y2NiZDA3M2JkYzA4
MmVlYzYwHhcNMjYwNTExMDczNDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjkxODQ5NzM1MjY4ZWVhOWQxYzk2YTk0Y2IwZTY4NTEzMmQwNTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyk2ulllmM7zJlMDU9KPmhfcCJqMS
bncHdaR02UPDuyz7Zln9nI5d9NRJ0my/l4mmmF+AHFZZCz+/rrHM6wwhdweZR1d/
tLz7oWYz9dK9ubDEq5RByvJhtZOKdUR5iAqZYxU84ZfJH2yPGNpiKyV2/pbYu2OI
7EhsW6RouioTpB8Vy1mEqShX45GE56GW4XHdsWaDYIQ5KdaexbpgKbUNPln4+fii
RY4GEIlN8IIRwfE2zqJFJdwhMVMgH5TOL7TU1qbUP54H4kzyI0syxixgOFfEcV9p
P+eKkrHqadwp6b4jqUEZTNFHz809Vyh77GXedOWBmvCfGKwi8oVpb6Xa/QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIKRhJc1Jo7qnRyWqUyw5oUTLQUHMB8GA1UdIwQY
MBaAFOhuf1WjAVa07mROjMvQc73Agu7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkc1X1ZhTUJWclR1WkU2TXk5Qnp2Y0NDN3NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wOTAyYzItNTY1MC00NGE3LWE1M2Mt
ZTc4MGYxM2IyNDVhLzEvZ3BHRWx6VW1qdXFkSEphcFRMRG1oUk10QlFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wOTAyYzItNTY1MC00NGE3LWE1M2MtZTc4MGYxM2IyNDVh
LzEvNkc1X1ZhTUJWclR1WkU2TXk5Qnp2Y0NDN3NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXXMGAwQA
XXNsMA0GCSqGSIb3DQEBCwUAA4IBAQBG/0vtC9xgY0tZsx2jSM/SftMzCXUD9IZJ
++JAXxqrOEEMvlZTpeQFq3oPNZFdDomqwL5CD9UPeNcrAXpOWSC7OXSNwNYyFX/W
WrW/SiyKKeyNmKefnt91/B/hvGucf9wHRu8Iu0tJ6RhjLR2lRm8k84twvOng1Lkm
mIXHbuLuMOWCc90HMLxeezblvE0JVoRxdkcK3EbRpZX2bWRIQYnmy2FERTqQsFRz
6NPTqJnTrFCuzlAfr3fSG9E05TSj5BV5W5YWUkjOjPp1vGACVSw5ElRzVnzpReUC
JOjjXe47gREFLS71vkj0Ap2NXJ9ZTycv57PzoOgd7dKZAOSR8lxi
-----END CERTIFICATE-----
Generated at Tue May 12 21:52:51 2026 by rpki-client