Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dZ18w9M-vEnbrGSoQPS7oR_LcbM.roa
File: dZ18w9M-vEnbrGSoQPS7oR_LcbM.roa (raw, json)
Hash identifier: +TfPoRzKd6UFC++JA0zeJ6Qwyu/zzuv8FrmQfzVQQHg=
Subject key identifier: 75:9D:7C:C3:D3:3E:BC:49:DB:AC:64:A8:40:F4:BB:A1:1F:CB:71:B3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019F95219BE16BCFFEE2AA1F2B41FB332D86
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dZ18w9M-vEnbrGSoQPS7oR_LcbM.roa
Signing time: Fri 24 Jul 2026 17:17:15 +0000
ROA not before: Fri 24 Jul 2026 17:17:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 93.123.39.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:21:9b:e1:6b:cf:fe:e2:aa:1f:2b:41:fb:33:2d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 24 17:17:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=759d7cc3d33ebc49dbac64a840f4bba11fcb71b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:78:c4:e7:61:e1:83:bf:ca:fe:3c:9c:ae:
ad:a6:ac:22:de:cf:ff:f8:57:3f:83:60:1e:41:a3:
05:6a:42:df:54:da:89:78:41:ce:ea:45:7b:46:4c:
9f:65:9f:e6:49:0e:39:5e:47:97:df:66:18:42:bf:
22:f4:e6:87:80:9f:f7:6c:f3:02:b4:74:94:46:e6:
f9:e9:a4:0f:11:fb:d9:60:57:ae:b2:3c:8b:51:de:
a3:37:c0:d1:4e:34:1e:b1:1d:48:d6:ad:7a:74:f4:
b0:da:19:f6:da:99:c2:d9:18:35:a2:c3:32:23:09:
1c:25:90:89:32:af:6f:8b:49:26:d6:d3:5b:ec:f6:
f7:b9:be:c6:ce:e2:62:32:86:47:1d:22:5f:72:56:
cf:de:fd:9a:07:69:86:72:9c:0b:c0:74:a9:dc:21:
7d:70:2a:6b:c8:97:c7:7f:bb:63:c7:9f:01:5d:11:
9d:84:09:7b:cc:9e:83:93:41:9c:9b:98:e5:27:61:
7c:92:84:f9:e7:43:09:b3:87:31:98:95:d4:c6:33:
da:8d:70:a4:e2:d5:81:28:9d:e5:59:4c:9f:d7:e3:
de:29:ec:53:42:c8:77:b4:ea:18:4e:0d:5f:d4:69:
84:6c:1b:d6:be:ca:14:d8:47:27:2d:80:8a:7a:12:
1f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9D:7C:C3:D3:3E:BC:49:DB:AC:64:A8:40:F4:BB:A1:1F:CB:71:B3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dZ18w9M-vEnbrGSoQPS7oR_LcbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.39.0/24
141.98.6.0/24
Signature Algorithm: sha256WithRSAEncryption
83:56:57:01:54:6c:b4:b7:44:25:34:bd:08:f3:11:85:39:56:
63:df:95:a9:c7:33:46:e0:92:a9:7c:c9:d2:68:d1:39:0b:62:
36:a5:61:83:18:8d:04:69:4f:66:f8:85:96:e7:5e:01:fe:57:
c0:bd:0e:5e:9e:47:27:14:b0:c6:36:91:ae:c5:ef:e4:15:6b:
52:9f:32:97:aa:fd:54:ca:5f:75:79:70:9f:36:1f:1b:68:eb:
5c:ce:d1:b2:ec:d6:89:ff:d9:fb:f1:98:9f:b7:68:61:d2:60:
2f:cc:d4:27:a1:f3:22:11:39:ef:a8:20:ac:78:17:34:db:20:
de:a2:7b:be:29:af:09:e5:a0:28:0c:62:63:6f:27:e0:00:71:
9d:05:01:9d:16:44:60:8e:33:3f:4b:af:ca:3a:80:c3:11:e2:
06:73:e5:9a:36:7f:0e:10:4b:37:be:a9:ed:1e:26:3c:4f:56:
08:1b:ae:7d:f7:2a:e3:44:cf:e9:91:7f:da:22:11:78:5d:08:
06:b7:e2:39:7d:65:97:7f:5a:6b:a2:7d:ce:32:59:68:af:7f:
93:7e:69:5e:48:d7:1d:bb:cf:9b:da:30:78:b7:51:84:56:a0:
24:f6:82:5f:88:78:4b:7a:d7:55:d1:bb:47:c7:7c:7b:5d:db:
8d:8a:66:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:12:52 2026 by rpki-client