Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/8d6u2J8mQYjZFqk3Q112sT5Zstg.roa
File: 8d6u2J8mQYjZFqk3Q112sT5Zstg.roa (raw, json)
Hash identifier: IuxRGaqq20eBwvugfy8fomPy2KnNOO6G4eaFDC2sXOg=
Subject key identifier: F1:DE:AE:D8:9F:26:41:88:D9:16:A9:37:43:5D:76:B1:3E:59:B2:D8
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 019D1C5225C19D06313A3503E773CAE3B8D3
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/8d6u2J8mQYjZFqk3Q112sT5Zstg.roa
Signing time: Mon 23 Mar 2026 20:10:38 +0000
ROA not before: Mon 23 Mar 2026 20:10:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 93.127.160.0/24 maxlen: 24
93.127.161.0/24 maxlen: 24
93.127.180.0/24 maxlen: 24
93.127.181.0/24 maxlen: 24
93.127.182.0/24 maxlen: 24
93.127.183.0/24 maxlen: 24
93.127.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:52:25:c1:9d:06:31:3a:35:03:e7:73:ca:e3:b8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Mar 23 20:10:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1deaed89f264188d916a937435d76b13e59b2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:84:97:f9:20:67:8a:45:43:f0:45:77:7a:9b:
88:fa:33:94:cd:86:16:07:c5:5f:70:35:bc:0b:f4:
73:ba:d4:d8:3c:69:b6:de:82:7b:18:fe:63:16:9f:
b7:a2:1c:f9:12:43:85:27:12:1e:c8:52:30:06:af:
d6:fd:81:65:94:9f:15:69:45:07:24:e3:95:50:fa:
4a:60:42:4c:8a:f7:5f:a3:1e:42:8e:6a:ab:62:5a:
58:7d:87:44:d6:19:6a:7b:61:73:94:cd:aa:57:d2:
73:8f:a0:36:f9:07:c5:73:20:5e:36:cf:63:d0:f8:
92:84:8d:43:21:2d:7d:c1:fb:3b:85:1c:85:a0:28:
6b:72:50:0b:41:52:f0:b5:80:89:0f:02:7d:84:c2:
74:49:3e:98:67:39:ba:4e:5f:00:42:12:e5:8b:eb:
bd:ed:59:6a:6f:9d:d5:6a:09:5d:a8:3b:a1:29:48:
68:c7:18:c7:c9:f7:12:26:f0:df:89:8e:a9:a1:82:
c5:e7:c6:a1:64:66:e7:ae:f9:4c:a9:00:c7:89:0a:
ab:f8:e4:c2:45:97:0f:f8:78:c2:72:bf:f4:26:7e:
09:45:26:a5:06:7f:2a:08:80:00:96:8b:3c:c8:a2:
22:33:c0:9d:e0:a5:51:a2:ff:e3:ad:22:99:22:bd:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DE:AE:D8:9F:26:41:88:D9:16:A9:37:43:5D:76:B1:3E:59:B2:D8
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/8d6u2J8mQYjZFqk3Q112sT5Zstg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.160.0/23
93.127.180.0-93.127.184.255
Signature Algorithm: sha256WithRSAEncryption
9a:00:a6:98:3c:78:0e:31:18:d8:e0:8f:04:5a:aa:6f:c6:86:
f0:aa:e0:93:e5:0d:15:46:ee:65:4c:e1:0c:2b:2b:0d:dc:34:
63:e8:d8:57:18:6f:44:ea:c7:25:65:61:dd:3c:27:7c:6e:f7:
8f:45:e8:4a:2d:95:1b:74:8d:ea:2f:9c:b6:6d:6c:54:96:36:
6a:ef:94:7a:07:e7:3e:3f:87:d6:54:aa:dc:00:e9:20:97:b6:
aa:20:e9:f7:2d:14:06:e4:1d:d0:03:8b:d0:8f:da:f9:98:b4:
ae:98:aa:ff:91:ca:10:21:0d:0e:d7:00:0f:cf:02:69:85:fc:
32:64:19:47:0a:d1:90:0f:27:d7:7b:94:23:3a:f5:c3:8b:ea:
ea:f6:4d:e1:6b:ba:47:74:4d:24:3d:42:30:78:58:2e:be:5c:
31:6c:24:20:97:a1:37:38:0e:19:22:2f:9a:9f:85:4a:4d:b5:
73:ce:44:ff:eb:ab:f4:14:3e:3b:6f:26:e2:d5:e5:13:8c:c0:
d4:4f:1f:c2:8b:fc:33:0e:ab:f6:70:7a:fc:a3:1f:20:89:bd:
7c:84:ea:2c:41:59:7b:0d:ac:f5:17:ec:13:b2:5e:f1:37:68:
2e:99:72:89:62:b5:f5:1d:f5:79:90:62:35:78:e7:78:0f:f3:
aa:38:6c:a1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:58 2026 by rpki-client