Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/RA0zayGPGSwaJHtlDtsJ8Xbgj5c.roa
File: RA0zayGPGSwaJHtlDtsJ8Xbgj5c.roa (raw, json)
Hash identifier: dZRiXeLTPEt1Z5RpO/wZBxbAns2Cy2hBCslnEmu5jIw=
Subject key identifier: 44:0D:33:6B:21:8F:19:2C:1A:24:7B:65:0E:DB:09:F1:76:E0:8F:97
Certificate issuer: /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Certificate serial: 019D0529F92D63DB5DAA3E1865260811E3A9
Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/RA0zayGPGSwaJHtlDtsJ8Xbgj5c.roa
Signing time: Thu 19 Mar 2026 08:15:29 +0000
ROA not before: Thu 19 Mar 2026 08:15:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209604
IP address blocks: 93.115.10.0/24 maxlen: 24
93.177.101.0/24 maxlen: 24
185.93.68.0/24 maxlen: 24
185.93.69.0/24 maxlen: 24
185.93.70.0/24 maxlen: 24
185.93.71.0/24 maxlen: 24
185.132.126.0/24 maxlen: 24
185.255.92.0/24 maxlen: 24
185.255.93.0/24 maxlen: 24
185.255.94.0/24 maxlen: 24
185.255.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:29:f9:2d:63:db:5d:aa:3e:18:65:26:08:11:e3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Validity
Not Before: Mar 19 08:15:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=440d336b218f192c1a247b650edb09f176e08f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:7d:30:d9:1f:fd:f0:c3:ff:da:6e:e7:74:
f8:89:84:b4:b7:70:e1:43:61:1b:9e:7b:20:cf:79:
6c:ce:85:b7:b9:9e:57:9a:72:c3:e9:33:c5:7f:bd:
26:30:60:fe:6e:65:55:1d:77:9a:28:97:fd:5a:13:
7d:ad:ac:d0:e0:c0:bb:0b:85:1f:2d:ba:a3:47:d4:
96:cf:24:de:29:15:89:84:b7:08:a1:d5:b0:aa:d6:
7f:cd:03:c0:fc:92:85:ad:26:64:32:ae:a5:df:09:
3a:08:2a:70:7e:4f:c7:92:c7:82:ae:bd:9b:cc:0e:
9a:51:08:50:87:95:a7:46:c0:17:be:43:87:e4:29:
3b:4c:7d:a2:3b:ab:61:b5:e9:36:6b:83:88:d4:4f:
8c:13:14:ba:37:37:fb:cc:fb:7a:ff:bd:3a:21:2f:
c5:27:ff:9e:1e:cc:c4:09:9c:20:00:d2:96:7b:d7:
af:28:d3:7f:76:c1:7d:a5:45:63:38:87:61:d7:3a:
9e:66:e0:fe:57:77:f9:57:1e:2c:17:80:7e:1a:8c:
08:82:1a:9e:20:a5:ec:ef:08:9a:86:1e:94:f8:5d:
d5:86:e6:a7:91:34:a3:eb:98:1a:34:ba:58:94:dd:
1c:47:26:13:30:ab:92:0e:c1:91:c6:60:05:77:0a:
6f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0D:33:6B:21:8F:19:2C:1A:24:7B:65:0E:DB:09:F1:76:E0:8F:97
X509v3 Authority Key Identifier:
keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/RA0zayGPGSwaJHtlDtsJ8Xbgj5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.10.0/24
93.177.101.0/24
185.93.68.0/22
185.132.126.0/24
185.255.92.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:11:3a:51:20:2d:1b:b5:18:00:0c:61:2b:6b:be:bb:98:db:
7c:d1:80:03:a5:af:4c:8a:d6:67:be:57:31:6a:3c:d5:da:a0:
b0:34:b9:a1:ed:88:98:20:33:cd:98:69:76:40:45:2a:c4:89:
97:cf:07:bf:f2:8a:bc:20:18:b3:3b:08:88:5e:1a:31:9a:88:
6f:14:ec:d7:d5:cd:6b:d1:9f:d1:b5:a6:dc:eb:2e:4e:7c:35:
50:8f:1a:ee:9d:29:9b:48:a0:77:07:78:eb:c8:24:f6:bc:44:
46:ac:1f:97:9b:aa:5b:e9:0c:bd:08:3c:45:3c:ce:49:fb:95:
f7:d9:7f:ea:c2:27:e4:4d:ea:11:77:82:b5:9a:2f:74:1b:4b:
7f:13:28:fd:4a:75:6a:a5:2e:41:a2:ab:50:77:50:be:1b:c6:
21:81:29:b6:8d:46:20:1c:c1:cd:96:1c:ab:09:47:80:11:d6:
fa:2d:fa:c4:39:7b:06:a9:8b:05:57:05:9d:f5:11:61:23:f5:
6e:c7:18:1f:ed:ac:f6:e2:97:5b:ab:3b:b9:24:76:e7:49:7d:
c3:c0:16:b6:2d:b7:7a:20:3e:7a:28:8b:1d:76:46:dd:22:fb:
3f:71:c2:b4:c1:ed:35:ba:38:34:56:05:29:b6:a3:4d:97:8a:
73:af:41:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:24:57 2026 by rpki-client