Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/op1jQ98R0p9D3SHYL3sVq7etUMk.roa
File: op1jQ98R0p9D3SHYL3sVq7etUMk.roa (raw, json)
Hash identifier: iJccvQ8qdUN5calcpiD3QdBKOLx/ceGbmoi7NGej54w=
Subject key identifier: A2:9D:63:43:DF:11:D2:9F:43:DD:21:D8:2F:7B:15:AB:B7:AD:50:C9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019F9302B3F5A2D89D82CC5E8BCE6FEE141A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/op1jQ98R0p9D3SHYL3sVq7etUMk.roa
Signing time: Fri 24 Jul 2026 07:24:15 +0000
ROA not before: Fri 24 Jul 2026 07:24:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 93.123.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:02:b3:f5:a2:d8:9d:82:cc:5e:8b:ce:6f:ee:14:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 24 07:24:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a29d6343df11d29f43dd21d82f7b15abb7ad50c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:39:a9:f4:91:98:a7:36:cb:45:c1:51:ce:
a9:8b:88:a7:12:70:61:d4:60:5f:2b:df:77:71:9c:
18:c6:df:cd:4e:b4:81:74:6b:bb:b3:8b:6a:fc:bc:
1d:0d:59:c5:e8:df:d6:c6:ba:ef:a9:ac:a1:fe:7d:
d9:be:94:bc:8a:64:67:06:6e:de:60:9d:ab:d4:99:
4c:8c:8c:eb:48:f2:67:38:d8:75:96:5a:a8:b7:a4:
60:75:66:36:b6:50:e0:d4:f0:aa:1f:34:b8:23:9f:
c1:46:a0:9b:40:c5:65:37:fe:30:6d:2d:54:38:f2:
c5:8a:6a:4e:36:23:e9:fd:02:a5:10:8c:a7:30:43:
81:9d:95:05:0c:8e:90:71:4e:dd:e8:3c:eb:07:8c:
d0:41:10:5d:6e:46:43:59:1d:5f:12:f8:af:39:80:
86:65:25:2c:f5:2e:bd:59:74:8e:40:2f:ad:43:48:
73:c9:79:f0:c3:83:71:77:85:1a:a3:a0:cc:50:fc:
28:66:27:04:c2:91:52:96:1d:79:d8:0b:57:fe:70:
c7:b9:25:3a:d6:a1:bc:0c:a2:80:d5:9c:2c:54:85:
76:b4:8b:4a:9d:2e:43:d6:85:8e:84:6e:7d:49:19:
17:5f:65:30:49:85:7c:96:6a:77:49:99:41:7c:24:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9D:63:43:DF:11:D2:9F:43:DD:21:D8:2F:7B:15:AB:B7:AD:50:C9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/op1jQ98R0p9D3SHYL3sVq7etUMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.39.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ed:9a:13:6b:24:53:2d:80:94:3f:c7:2f:41:60:cd:ee:f3:
0a:23:0f:a4:63:f6:2b:78:6a:c9:ed:a4:cb:c3:dc:22:dc:d5:
6f:53:c6:b7:e9:c6:93:87:35:22:97:38:21:24:c1:c5:4a:b8:
73:df:02:80:1d:3c:b5:9a:6b:09:ae:c5:b8:b8:04:6c:67:ad:
ef:01:f6:f2:56:38:4c:e3:c5:89:3f:b6:85:7b:40:42:81:8b:
9c:fd:c7:d9:95:ad:fb:83:b1:28:84:36:d7:40:c9:c3:1a:e7:
46:eb:f1:a4:52:e7:fe:78:a8:c3:1d:de:e7:18:39:2b:e4:3e:
77:a3:01:b6:15:12:11:69:8b:a9:7e:8e:15:08:89:2c:a2:5d:
4c:1f:8f:06:9c:10:af:40:4b:b3:a9:d7:f0:72:d6:ce:93:97:
37:00:c9:15:48:e1:43:1d:6f:b9:c2:1f:63:47:a1:b0:86:68:
8a:cf:d2:34:10:6f:8d:89:b5:86:31:99:a7:e9:d5:80:ce:c5:
08:6c:ae:17:f1:95:3f:f5:03:b5:bb:8a:90:16:07:b5:1e:a4:
38:25:8d:da:9d:3d:a8:9c:f0:cd:e0:94:3e:c8:86:6d:bb:4d:
32:90:1e:94:e4:7c:fd:b5:ff:b3:77:09:3b:a1:11:ac:c4:98:
7f:56:fc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:44 2026 by rpki-client