Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/__DXyy-jD1B_RTJg3a7ZBxRXMPo.roa
File: __DXyy-jD1B_RTJg3a7ZBxRXMPo.roa (raw, json)
Hash identifier: cTofL5wsNrt1N/3ApfaKLb8NWMF1cWXtn2Kpt10wc98=
Subject key identifier: FF:F0:D7:CB:2F:A3:0F:50:7F:45:32:60:DD:AE:D9:07:14:57:30:FA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019F405512FD733C7B73B6BA4D822421FBE9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/__DXyy-jD1B_RTJg3a7ZBxRXMPo.roa
Signing time: Wed 08 Jul 2026 06:05:44 +0000
ROA not before: Wed 08 Jul 2026 06:05:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219288
IP address blocks: 93.123.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:55:12:fd:73:3c:7b:73:b6:ba:4d:82:24:21:fb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 8 06:05:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fff0d7cb2fa30f507f453260ddaed907145730fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:6c:c6:2a:ab:e1:ae:50:0c:2d:6c:3c:6c:
8a:b3:3d:ed:c6:17:89:7c:9d:a7:88:ac:a8:39:65:
e0:9d:83:27:df:dc:6d:4e:a5:f8:8e:99:6f:95:4a:
5d:97:5f:ba:2e:89:58:c2:c1:6d:5a:16:e7:ab:a1:
0e:d1:00:d5:a4:14:4f:13:0b:d4:4c:b6:a5:39:7d:
ea:5f:1b:9c:44:c6:e5:b4:48:74:20:cd:1c:c9:f9:
76:5a:71:23:e1:e8:9c:7d:32:6c:d7:6c:20:62:94:
6e:c3:25:07:31:d2:ba:08:96:1f:9f:b6:4d:b2:be:
c6:b1:61:32:28:ba:f4:1b:0a:b5:b0:8f:60:61:41:
40:38:2b:45:10:a1:25:3d:e9:90:92:a1:aa:aa:e7:
78:ed:70:88:01:2b:ef:73:db:5d:a1:76:de:90:42:
96:f7:86:bf:e6:80:46:38:85:2a:0b:d2:55:d3:14:
ff:ff:3e:81:25:25:2c:48:d8:5d:98:38:bf:49:9c:
36:ef:9c:bf:7d:d6:6b:04:78:b5:8f:41:1b:2c:84:
c5:ea:aa:3e:94:fe:0e:9a:e9:d5:72:35:0f:23:a5:
24:4d:56:a4:7b:c8:38:06:67:b2:13:c4:14:ba:e1:
91:c8:f9:4d:7e:52:d0:34:e1:3e:7d:c8:ee:61:43:
b5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F0:D7:CB:2F:A3:0F:50:7F:45:32:60:DD:AE:D9:07:14:57:30:FA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/__DXyy-jD1B_RTJg3a7ZBxRXMPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.100.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:3d:ec:b8:0a:42:03:52:7d:ee:d9:23:17:72:1b:83:de:15:
a3:80:c8:dc:8e:43:f9:a4:60:dd:95:25:eb:fe:4b:12:0a:73:
25:09:b1:41:df:b6:ab:85:33:77:37:02:a4:50:37:1a:b6:72:
b0:db:a5:6f:44:11:3f:41:dd:3a:37:68:fb:b7:66:bc:ef:86:
25:11:c1:83:31:a9:a4:66:73:cb:08:ea:ca:4c:13:fe:64:8e:
aa:fd:81:6e:d2:da:69:88:fb:eb:33:c8:04:b2:62:d9:d9:7e:
4b:6b:2b:e0:f0:33:ac:b6:c8:bb:94:11:25:2e:33:a2:d5:bd:
e5:fc:28:64:0b:5d:4b:3e:4d:2a:41:d5:e8:15:cd:96:36:c4:
f9:7a:76:0c:23:9b:33:c6:5a:ef:45:88:1a:25:d7:99:a4:eb:
f3:25:e0:19:e4:0c:d4:43:49:da:d9:04:1f:2f:2a:05:cb:ce:
aa:ed:23:1f:49:2c:c4:29:1e:b3:30:e1:99:e4:2b:18:a6:f3:
ff:71:c6:14:e4:1f:f1:e5:f2:55:6e:b5:8d:63:6a:c5:17:4a:
12:89:37:ea:28:bf:93:fe:55:d0:9b:39:9d:8b:a5:a4:60:8a:
bb:68:9a:71:49:68:7a:dc:40:bd:ec:e2:a0:45:ed:7a:fc:5e:
18:bc:89:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:12:50 2026 by rpki-client