Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/djaJb8jGLJMJQD8auGaVLG5gan8.roa
File: djaJb8jGLJMJQD8auGaVLG5gan8.roa (raw, json)
Hash identifier: G0pMTn5NquY/ySnMpydYpSa/Syvp409utK9uzDOaEmk=
Subject key identifier: 76:36:89:6F:C8:C6:2C:93:09:40:3F:1A:B8:66:95:2C:6E:60:6A:7F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FCE62008A790A199CD665531D1590EFEA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/djaJb8jGLJMJQD8auGaVLG5gan8.roa
Signing time: Tue 04 Aug 2026 20:05:56 +0000
ROA not before: Tue 04 Aug 2026 20:05:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 93.123.100.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:62:00:8a:79:0a:19:9c:d6:65:53:1d:15:90:ef:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 4 20:05:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7636896fc8c62c9309403f1ab866952c6e606a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:0b:8a:d0:25:ba:a1:f0:2b:27:93:2b:5f:
cc:60:5c:27:c4:0e:1d:e1:b4:eb:b4:e0:2f:00:d7:
00:68:72:5b:32:96:d2:f6:71:86:2a:25:af:b9:90:
f4:c2:fc:c0:f5:d8:88:1e:59:fd:ed:fb:72:6f:42:
68:fe:61:4d:7e:94:35:49:ee:93:e0:0a:b6:8a:ef:
1b:95:09:c8:0e:10:57:a6:9c:f5:bf:31:4a:c1:09:
a6:f1:c2:3e:92:a2:95:2a:50:09:fe:fd:97:dc:e4:
ee:f5:16:7a:4d:f2:48:04:7c:f4:66:57:2d:5e:f1:
17:22:84:8e:5d:fa:24:28:9c:a9:3d:ea:26:6e:0f:
9d:1b:69:67:a8:e7:c8:7d:08:3f:8a:ae:76:f7:f0:
25:8b:5e:d1:ee:e9:6e:45:eb:6e:50:5a:ee:f0:89:
6f:12:b9:da:02:ec:98:a2:4c:8c:fc:c4:d9:14:78:
a3:d2:d5:ae:49:81:bd:5d:00:51:68:cc:92:0c:74:
3f:db:db:b5:2c:a9:cd:2a:14:33:fe:0c:f2:17:be:
d1:c9:d6:93:3e:a4:e1:e0:84:95:7f:5a:33:c2:c7:
2a:fc:10:c9:88:42:79:8a:bc:be:d6:3b:d4:3d:79:
90:2a:8c:52:9d:77:98:db:88:48:e4:c8:f5:00:64:
75:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:36:89:6F:C8:C6:2C:93:09:40:3F:1A:B8:66:95:2C:6E:60:6A:7F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/djaJb8jGLJMJQD8auGaVLG5gan8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.100.0/24
94.156.10.0/24
Signature Algorithm: sha256WithRSAEncryption
42:56:45:42:f1:23:98:7d:69:b4:5a:04:46:91:ed:be:32:25:
fd:ff:ca:23:95:8e:ec:76:ca:33:e4:5e:a1:86:87:ae:04:9b:
e7:b5:b0:92:27:87:e8:e6:6c:a3:fc:86:3c:d8:81:68:d7:07:
9b:5f:3b:ae:02:0a:7b:d3:38:5b:dc:05:b1:b4:8a:47:2d:94:
f1:88:22:6b:f1:2d:80:02:70:32:f3:ea:68:55:87:e6:8b:b4:
8f:d7:91:da:5c:32:c1:35:18:42:6f:fc:c0:18:9f:f9:34:70:
cc:a1:25:f1:1a:0f:f1:24:be:3a:d9:54:a2:b2:c3:d7:98:73:
6b:a2:14:48:4e:50:25:f6:65:56:83:5a:a1:07:24:7d:80:70:
29:bf:37:0e:82:82:89:a7:6a:ca:21:8e:32:e5:23:7b:c4:3b:
61:cf:df:08:b7:36:56:0f:75:6c:1a:7e:5d:fb:2e:92:ac:6d:
b3:f8:a7:80:b0:a8:dd:66:40:0b:99:6a:28:c3:f4:f4:9e:ce:
ff:28:6e:3b:28:a9:4c:39:0b:fd:96:ad:de:eb:51:d3:02:9a:
be:f4:bf:a1:c2:0b:97:aa:86:a0:ea:92:6a:2d:ce:85:6e:e7:
99:69:35:ef:23:ee:e8:04:92:82:71:1e:1a:f1:5a:52:53:f4:
d8:11:0d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 02:22:09 2026 by rpki-client