Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/x0lK-Jnb0bL_ux6co9Bk3vquB0o.roa
File: x0lK-Jnb0bL_ux6co9Bk3vquB0o.roa (raw, json)
Hash identifier: YjGEfovumYfL9dHxyaRUZjncTFVBUEJW90kd89/+r18=
Subject key identifier: C7:49:4A:F8:99:DB:D1:B2:FF:BB:1E:9C:A3:D0:64:DE:FA:AE:07:4A
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F23694E2DA4AC5F772A6436689AB69E44
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/x0lK-Jnb0bL_ux6co9Bk3vquB0o.roa
Signing time: Thu 02 Jul 2026 15:18:51 +0000
ROA not before: Thu 02 Jul 2026 15:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207223
IP address blocks: 93.120.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:4e:2d:a4:ac:5f:77:2a:64:36:68:9a:b6:9e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7494af899dbd1b2ffbb1e9ca3d064defaae074a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:ef:e4:20:ad:78:fb:0b:2d:66:07:eb:42:
6b:19:58:61:fa:72:2a:17:18:52:ed:53:b9:09:78:
5e:19:5e:54:8d:98:c7:71:53:ab:4e:6e:1a:fb:a2:
e4:8d:83:89:44:41:b8:ce:1e:cf:62:19:c8:8c:47:
8c:3e:19:1f:2d:2f:fd:2a:47:1c:bc:07:f0:8e:20:
cc:0b:ac:9f:85:54:65:bc:dd:3d:e2:9a:87:2f:97:
d6:83:b4:2c:bb:65:df:9d:e0:0a:ff:c0:28:37:af:
ad:79:8e:49:25:e5:22:36:bd:ef:d7:a4:61:42:b6:
b7:6a:78:73:fe:b3:d9:b9:d1:cf:1d:c6:90:a2:b2:
e5:b4:71:3f:6d:13:e1:64:d2:f1:b0:40:01:b6:c7:
56:7f:32:8a:66:e0:6a:80:be:d9:e7:d4:3d:68:43:
87:db:81:be:20:ed:03:bd:48:4e:1b:c0:96:cb:60:
90:ae:2c:1d:e6:09:06:02:ac:00:f3:8d:80:ff:a5:
8d:b3:a5:00:25:a7:8e:cc:5d:4d:21:8a:da:4b:64:
b8:3f:f2:c0:34:41:70:82:db:f9:bd:93:98:90:e5:
15:ff:7a:9b:e1:64:53:10:c4:c9:92:e7:ca:3c:f1:
6c:1a:54:03:1d:6e:0e:e7:6d:5d:bd:00:d3:38:e9:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:49:4A:F8:99:DB:D1:B2:FF:BB:1E:9C:A3:D0:64:DE:FA:AE:07:4A
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/x0lK-Jnb0bL_ux6co9Bk3vquB0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.120.41.0/24
Signature Algorithm: sha256WithRSAEncryption
59:09:a8:de:b8:c0:3b:86:32:43:29:0a:91:a2:f3:53:40:dc:
a0:19:57:eb:8b:22:50:9d:82:a1:3f:7f:43:f8:77:37:22:14:
0f:85:8f:04:3a:f7:14:b1:c7:8c:98:1f:33:10:e5:12:3b:70:
45:7e:4b:d4:5d:ab:0e:87:e2:04:01:0b:95:23:b0:75:e7:3e:
84:42:9d:81:49:fd:ec:dd:b4:e0:c8:b1:07:12:c9:da:48:be:
fc:5b:88:fd:69:5f:76:79:af:21:72:b1:f9:48:37:07:91:4a:
25:9c:58:49:60:c6:c6:6c:e1:4e:80:cd:58:64:66:73:d1:c1:
9e:ce:40:28:78:9f:0d:77:ee:86:fb:d1:a7:ee:e4:68:64:83:
41:28:ab:90:af:11:54:9f:7e:b8:b8:18:76:48:f3:2a:00:d4:
07:66:24:30:18:0e:a1:28:62:3b:51:42:fd:a0:d9:42:7d:20:
8d:99:56:dd:16:68:9b:f3:c0:6b:c4:48:d0:fc:81:87:a3:69:
ce:58:69:69:2a:69:94:88:e6:2e:27:14:5c:1a:2d:bc:38:b6:
d9:d2:40:47:b6:06:cd:8a:41:0c:66:66:b0:60:54:3d:65:50:
77:b7:e7:b4:cf:c3:8f:9b:58:71:ef:52:f9:7f:b6:08:63:2d:
9e:92:b9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:23:03 2026 by rpki-client