Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/a93YW-wZAJe5MHAmUYJrwXY9g9Y.roa
File: a93YW-wZAJe5MHAmUYJrwXY9g9Y.roa (raw, json)
Hash identifier: Ju0cDTvmaNPFoApexH/ky9j3jD4JO12JHg8M+/2SiiM=
Subject key identifier: 6B:DD:D8:5B:EC:19:00:97:B9:30:70:26:51:82:6B:C1:76:3D:83:D6
Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial: 01A0F4028053C21CD1B48527DC0D8B5A33A0
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/a93YW-wZAJe5MHAmUYJrwXY9g9Y.roa
Signing time: Wed 30 Sep 2026 20:29:59 +0000
ROA not before: Wed 30 Sep 2026 20:29:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60503
IP address blocks: 93.158.236.0/22 maxlen: 22
93.158.236.0/24 maxlen: 24
93.158.237.0/24 maxlen: 24
93.158.238.0/24 maxlen: 24
93.158.239.0/24 maxlen: 24
185.30.164.0/22 maxlen: 22
185.30.164.0/24 maxlen: 24
185.30.165.0/24 maxlen: 24
185.30.166.0/24 maxlen: 24
185.30.167.0/24 maxlen: 24
216.194.76.0/22 maxlen: 22
216.194.76.0/23 maxlen: 23
216.194.76.0/24 maxlen: 24
216.194.77.0/24 maxlen: 24
216.194.78.0/23 maxlen: 23
216.194.78.0/24 maxlen: 24
216.194.79.0/24 maxlen: 24
2a00:aee0::/32 maxlen: 32
2a00:aee1::/32 maxlen: 32
2a00:aee2::/32 maxlen: 32
2a00:aee3::/32 maxlen: 32
2a00:aee4::/32 maxlen: 32
2a00:aee5::/32 maxlen: 32
2a00:aee6::/32 maxlen: 32
2a00:aee7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:02:80:53:c2:1c:d1:b4:85:27:dc:0d:8b:5a:33:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Validity
Not Before: Sep 30 20:29:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bddd85bec190097b930702651826bc1763d83d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:4f:a0:83:ed:96:da:96:11:fa:74:5a:8b:
26:43:32:ed:67:d4:8d:55:a9:40:19:ad:91:55:a7:
9e:dd:78:71:98:32:b7:15:a6:2d:1d:33:87:a7:18:
c9:3d:67:98:eb:96:74:51:f4:54:6e:be:fc:b1:e3:
60:21:be:dc:5b:bb:1d:59:ec:4f:ee:2e:29:95:14:
75:2e:e5:bc:18:de:97:56:a0:cb:1b:5c:a0:5a:a8:
85:0e:b6:74:9f:28:49:56:2a:00:0c:08:e0:3a:8b:
88:2c:0f:63:ae:8f:09:c9:ec:fa:27:fc:8d:2a:a9:
dd:45:bd:89:80:bb:43:2b:3c:87:98:75:ba:0d:44:
aa:d6:db:5d:df:d4:8d:c5:30:1c:f4:50:7c:b6:60:
26:af:a3:ef:65:38:fa:8a:46:49:54:1f:92:3c:a3:
14:70:9b:95:ca:f8:0c:dc:d3:bc:b6:6d:dc:b3:d2:
5d:75:3a:cb:1a:a6:4f:b4:14:67:71:b1:d7:27:26:
d0:e8:3c:55:8c:73:68:ba:a7:11:88:64:ba:be:de:
4d:08:95:52:4b:f4:3e:b5:ca:67:cc:f2:d1:64:a8:
9f:11:4b:ac:02:8d:e6:fd:80:a9:56:77:f9:0a:3e:
13:7c:9d:6c:ef:d0:59:c6:a8:9c:d4:e6:b2:6c:5d:
f5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DD:D8:5B:EC:19:00:97:B9:30:70:26:51:82:6B:C1:76:3D:83:D6
X509v3 Authority Key Identifier:
keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/a93YW-wZAJe5MHAmUYJrwXY9g9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.158.236.0/22
185.30.164.0/22
216.194.76.0/22
IPv6:
2a00:aee0::/29
Signature Algorithm: sha256WithRSAEncryption
91:86:c4:81:06:a6:ae:87:81:56:61:28:f4:aa:f3:24:c5:c3:
ea:b3:7e:86:ae:60:03:91:98:f9:1b:4b:7f:be:67:2a:20:5c:
2c:04:40:ad:ed:5b:88:c3:37:5b:72:16:d2:e9:b4:b0:d3:58:
85:06:fd:d0:90:cd:14:6c:a6:2d:82:09:96:95:db:3b:a1:a4:
da:f9:4f:d5:c5:d2:4f:e3:96:aa:7c:58:90:a4:51:0c:2b:a8:
a0:9f:6f:b0:b8:bb:15:36:50:2c:21:bb:42:1f:e7:3d:61:14:
fc:28:ff:a6:ea:06:59:5f:d0:4f:bf:f3:86:f9:b0:cc:c8:57:
3c:e0:78:f2:46:d0:b4:4b:0d:8e:96:dd:dd:ff:52:96:64:14:
b0:08:98:8e:01:cd:f8:2e:c3:5e:8d:be:87:72:a4:27:dd:ca:
03:ea:55:29:ec:d9:a3:16:54:91:00:55:7a:6b:f6:f2:a6:bc:
64:e7:42:e8:a9:74:37:08:64:f2:db:8b:95:c9:a4:be:1d:e6:
6d:81:04:d6:6d:6f:f5:f1:b0:25:db:36:f4:80:b4:3f:05:d5:
93:ae:b6:b8:81:c1:72:13:b8:a2:f6:91:26:e6:35:05:1f:bd:
58:f8:07:a7:60:45:9c:b1:41:ac:42:f7:aa:91:3a:02:18:cc:
55:7c:ae:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:22:23 2026 by rpki-client