Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/sqU75dIc5o_Jv_QV0NEvBbTPCVc.roa
File: sqU75dIc5o_Jv_QV0NEvBbTPCVc.roa (raw, json)
Hash identifier: lqJo++mTKfqEkVdI6kclyr26S2Fr7m7aarNW1VmZgcs=
Subject key identifier: B2:A5:3B:E5:D2:1C:E6:8F:C9:BF:F4:15:D0:D1:2F:05:B4:CF:09:57
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 019F4BBE76B262B0A70E51A8BAE6FF2AE224
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/sqU75dIc5o_Jv_QV0NEvBbTPCVc.roa
Signing time: Fri 10 Jul 2026 11:16:41 +0000
ROA not before: Fri 10 Jul 2026 11:16:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 93.127.160.0/24 maxlen: 24
93.127.161.0/24 maxlen: 24
93.127.180.0/24 maxlen: 24
93.127.181.0/24 maxlen: 24
93.127.182.0/24 maxlen: 24
93.127.183.0/24 maxlen: 24
93.127.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:be:76:b2:62:b0:a7:0e:51:a8:ba:e6:ff:2a:e2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jul 10 11:16:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2a53be5d21ce68fc9bff415d0d12f05b4cf0957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:63:a2:18:e8:8f:ce:e8:8b:cb:41:4d:ee:3c:
43:05:b2:4a:72:3a:c1:f1:23:fb:0e:e7:50:f2:91:
1a:40:15:6e:3d:4d:e8:92:16:97:a2:4f:32:78:03:
83:fb:c6:7d:d9:99:a6:c4:67:6c:b0:1d:17:d8:34:
82:43:eb:ee:f7:a7:00:3c:e7:f6:43:a8:c5:36:ff:
00:e5:d9:8e:40:12:e4:f9:7d:e6:c8:17:37:c4:1f:
04:51:3c:0d:63:ef:5c:ea:17:52:52:a1:2b:ef:ee:
ed:fc:6e:a6:5c:09:37:4f:06:b7:b7:aa:78:e6:1d:
30:bc:2f:65:2b:73:1b:4c:cf:11:4c:4f:cf:c2:3a:
97:e5:f8:f5:0f:b6:b9:5b:7e:f6:e8:42:22:27:00:
ef:2c:fa:0b:f0:14:fe:a3:bf:bb:2d:b2:c1:e1:0b:
f3:e7:30:47:fa:2c:4a:ed:f8:12:8b:8b:2d:0f:65:
f7:8f:1a:ec:ad:0c:f6:24:f9:10:81:0f:d5:66:3b:
b3:a4:f4:3b:05:16:15:f7:16:31:24:83:ca:e1:2c:
b4:ee:c0:5a:f0:da:69:91:f8:61:fd:60:f4:67:19:
03:6e:78:27:b6:14:39:cd:42:9e:b3:bd:fb:b7:b0:
fe:a9:ee:b9:fb:59:5f:1a:14:93:c0:9d:f7:99:70:
50:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A5:3B:E5:D2:1C:E6:8F:C9:BF:F4:15:D0:D1:2F:05:B4:CF:09:57
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/sqU75dIc5o_Jv_QV0NEvBbTPCVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.160.0/23
93.127.180.0-93.127.184.255
Signature Algorithm: sha256WithRSAEncryption
39:88:3d:ba:13:89:fd:d3:6b:73:ce:62:eb:d5:e3:c0:d4:cd:
90:e0:e9:21:7f:8a:d5:84:1e:ad:ba:de:54:51:35:2b:37:10:
f5:d0:ab:86:70:38:2d:c4:24:c9:5f:15:1c:b4:dd:19:e0:b3:
a8:7f:8c:7b:1a:39:d4:c4:3a:a6:7f:3e:f0:24:15:83:3c:82:
5f:7b:c5:a1:2f:4b:53:94:35:1f:2c:34:cd:5e:82:f9:df:89:
62:ea:06:55:b2:d9:e0:0d:d0:cb:d8:8b:b5:98:c0:a1:7b:e0:
57:14:e3:0f:bd:50:bc:11:17:93:84:e3:44:d2:87:9e:d4:86:
83:3b:c2:53:5f:a4:a8:20:8f:0f:5b:89:04:eb:bc:cc:eb:e3:
ab:a9:1b:8e:af:dd:5e:bd:14:70:e3:b0:a9:46:99:63:f4:08:
d9:58:dd:b4:c3:fd:92:4c:86:5e:dd:78:81:bf:4c:00:54:84:
09:3b:6b:d8:cf:f1:f0:f6:af:5d:ec:b0:89:eb:55:1a:ad:ca:
13:96:f0:4b:2f:3b:5b:d2:7f:bf:3e:ec:e1:12:b3:5f:ea:75:
de:17:37:ef:93:8d:ed:ba:49:d2:8b:89:d3:9d:a4:57:c2:48:
3c:e5:a1:72:63:03:3a:27:64:5c:23:fe:64:fe:62:eb:7f:5f:
10:9a:f3:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:40 2026 by rpki-client