Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/73Wcl5Tozk2-vqGl77kdWeO17YY.roa
File: 73Wcl5Tozk2-vqGl77kdWeO17YY.roa (raw, json)
Hash identifier: I7+ooSeCoJUBuUmOJZIreNf/90cOWzDOZT8oYHT2pog=
Subject key identifier: EF:75:9C:97:94:E8:CE:4D:BE:BE:A1:A5:EF:B9:1D:59:E3:B5:ED:86
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A042CA5340D3F2D6EFBEB0859E936C3A80
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/73Wcl5Tozk2-vqGl77kdWeO17YY.roa
Signing time: Thu 27 Aug 2026 10:35:50 +0000
ROA not before: Thu 27 Aug 2026 10:35:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209630
IP address blocks: 93.123.118.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 08:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:ca:53:40:d3:f2:d6:ef:be:b0:85:9e:93:6c:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 27 10:35:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef759c9794e8ce4dbebea1a5efb91d59e3b5ed86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:8c:12:2e:43:c6:5c:55:a0:ab:b3:3c:36:
eb:4f:f2:b9:3a:13:40:3d:d9:cb:1b:b2:6d:aa:be:
1e:fd:18:2b:1b:51:9c:bc:17:52:a6:b6:b9:38:32:
6a:6b:3e:3a:95:24:db:54:59:1f:3a:bd:47:06:dd:
a9:e5:9a:ff:9a:c1:d4:16:c6:f6:8b:0f:f5:e3:da:
fa:fc:7c:af:0e:c8:ee:66:66:cd:6c:44:e9:d0:15:
59:36:ef:92:6d:bc:08:1d:5b:e3:5e:33:18:af:4b:
58:59:a1:b2:d9:bd:46:ab:83:ab:1c:8e:5a:2f:1f:
fc:a9:c1:3c:ed:69:0d:f1:18:90:ba:00:b0:36:d5:
27:1b:67:1b:fe:9e:15:01:15:4b:21:ce:1b:8b:36:
a7:e8:0f:b4:5f:83:40:c5:7c:5a:13:ed:ca:41:fb:
f4:1a:22:3d:32:b7:58:c3:d4:4c:82:cd:69:fd:ee:
83:d7:94:88:84:a2:f9:e6:eb:c3:35:db:01:7d:ba:
0e:49:55:37:b5:5e:31:7c:29:a7:ae:d4:96:03:d2:
8b:cf:58:e2:6e:07:d1:bf:b3:8c:55:44:a7:47:2e:
e6:e7:07:a2:74:a8:b7:ec:f8:3d:4d:a2:c1:0a:37:
03:92:b4:6d:15:66:ab:60:41:0a:94:15:56:38:bf:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:75:9C:97:94:E8:CE:4D:BE:BE:A1:A5:EF:B9:1D:59:E3:B5:ED:86
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/73Wcl5Tozk2-vqGl77kdWeO17YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.118.0/24
185.218.138.0/24
Signature Algorithm: sha256WithRSAEncryption
04:bc:0b:db:e2:68:5a:c4:99:c1:35:b4:02:09:15:99:ca:f3:
68:2c:9d:c4:0a:bf:16:ce:89:94:71:b5:19:b7:2d:66:85:b1:
09:50:9a:e3:4f:6c:d4:5b:cb:45:46:df:1b:cd:39:83:ed:c2:
bd:60:8c:41:35:ac:69:92:bb:49:81:6a:b9:97:af:d6:75:b8:
1c:7d:ea:c0:49:2e:3f:15:c9:8d:d4:fc:e0:82:e9:8f:a1:b4:
d1:c7:12:e2:f7:79:fe:89:b9:61:c5:f3:a2:10:24:92:62:03:
ec:d3:bd:b9:a6:3d:36:72:48:8e:6a:77:cf:0f:26:c1:8f:8d:
ab:5c:f8:d4:8e:1c:01:6f:82:6e:f2:e6:ae:97:2c:d7:87:c8:
2a:03:53:77:e8:8f:35:64:f4:85:69:c2:db:73:b8:89:ee:7d:
67:46:5c:40:84:93:54:49:f9:c9:cf:7e:4b:41:43:05:f9:5b:
58:4b:db:5e:a6:11:2e:4d:b0:69:44:3a:08:99:1e:17:47:28:
ac:63:a9:43:84:98:c0:3c:ac:0d:c6:12:d3:06:11:fd:5a:01:
18:6f:73:52:2e:7b:b9:b3:45:d1:1d:48:70:48:00:1f:39:74:
b8:a2:6e:96:60:46:76:4d:6f:94:a9:a9:57:c2:e0:4a:8a:af:
e7:2f:3f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 13:48:46 2026 by rpki-client