Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/InfI-0b_BhFLFoIfvyHtX8I3_88.roa
File: InfI-0b_BhFLFoIfvyHtX8I3_88.roa (raw, json)
Hash identifier: xBIk9wGldDSn8B4wDof3ubjttBvqnULvrD+TtpQyKWU=
Subject key identifier: 22:77:C8:FB:46:FF:06:11:4B:16:82:1F:BF:21:ED:5F:C2:37:FF:CF
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A137AE9816B13E9DFD9B78695EE1E65530
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/InfI-0b_BhFLFoIfvyHtX8I3_88.roa
Signing time: Tue 13 Oct 2026 23:52:31 +0000
ROA not before: Tue 13 Oct 2026 23:52:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198831
IP address blocks: 93.177.104.0/24 maxlen: 24
146.19.137.0/24 maxlen: 24
176.124.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:ae:98:16:b1:3e:9d:fd:9b:78:69:5e:e1:e6:55:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Oct 13 23:52:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2277c8fb46ff06114b16821fbf21ed5fc237ffcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:13:e6:c8:49:48:ef:13:c6:76:c6:8a:8e:79:
74:4f:f2:94:31:02:16:f1:00:ae:d1:96:27:8d:95:
64:26:e6:7a:4b:9b:35:c5:dd:9b:06:71:5c:07:4d:
b8:93:51:f1:e3:59:17:bd:b7:19:67:4e:3b:ab:64:
2d:49:ed:87:f5:41:61:3d:28:b8:6f:5d:72:34:2c:
45:54:c1:06:3a:26:58:83:d4:7b:a7:1a:ac:e7:bc:
fa:63:6a:a4:82:30:df:ea:48:fc:5f:e0:99:fd:38:
85:84:23:c4:0d:c7:c7:89:fe:fa:59:45:a3:ad:cf:
25:92:ef:4e:04:97:b3:76:38:1a:75:6e:b1:e5:ab:
fb:ee:74:5f:d6:37:f7:04:c5:86:7f:76:a9:fb:87:
f9:64:35:21:ad:41:8a:96:6f:70:ec:1f:1a:15:75:
40:cc:2a:96:f6:c1:0b:1f:dc:8b:63:2b:cd:3a:cf:
8a:93:3e:64:8d:04:5a:55:ee:0f:02:0c:1a:5d:55:
cc:9b:fd:a9:53:58:56:24:f7:32:fc:9e:90:76:bd:
0f:73:b0:be:f7:38:0f:6e:2b:99:66:3d:81:a6:8e:
ff:1d:a6:4e:83:43:30:58:1a:df:54:53:da:2c:18:
0b:19:6b:0a:d6:c0:f9:0f:3e:4a:3c:be:cb:15:5a:
34:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:77:C8:FB:46:FF:06:11:4B:16:82:1F:BF:21:ED:5F:C2:37:FF:CF
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/InfI-0b_BhFLFoIfvyHtX8I3_88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.104.0/24
146.19.137.0/24
176.124.34.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:83:17:78:42:ca:c8:88:3d:fe:48:35:fa:e0:34:b2:69:6a:
e1:b2:a8:85:4d:a5:a2:8b:7d:0c:cc:37:5c:4c:b8:a0:93:9b:
88:56:cc:8e:0f:d7:7a:b2:d2:77:98:24:2e:2d:81:a4:53:65:
84:df:32:5f:2c:df:f6:f9:2e:11:ab:44:1b:3a:24:89:69:43:
b1:9a:ae:e1:18:1b:91:5f:f1:da:a8:64:84:16:02:35:e9:92:
13:38:c4:ec:3d:d7:37:68:78:16:3a:59:80:54:4b:36:75:fd:
25:13:43:d9:3e:b4:9d:f9:1f:92:9b:00:0c:64:e9:42:54:8e:
d4:8b:ea:2c:32:08:15:4d:0a:03:4c:7f:34:4c:38:d9:69:4a:
f6:96:bf:70:a3:5a:c0:bd:a5:44:f4:7a:02:e0:6d:6d:2d:73:
36:1f:b9:8e:9c:f5:d0:20:65:08:b8:69:94:be:a5:f7:95:80:
a2:ed:67:fd:65:4c:6c:59:46:14:90:f4:29:02:35:b1:e4:4d:
c4:a7:f6:e6:b8:2e:7d:cf:aa:b8:03:07:64:32:2f:d1:97:e1:
7c:8b:6e:43:0d:8f:cc:b9:ab:54:1d:bc:0a:dc:6e:59:a3:88:
ee:a9:2f:5a:7a:3f:06:c0:38:0f:6c:ce:64:c6:aa:3a:b0:a1:
a9:59:cc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:00:17 2026 by rpki-client