Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FD2bAgHxrzK2EPkgO2UctK2qwpA.roa
File: FD2bAgHxrzK2EPkgO2UctK2qwpA.roa (raw, json)
Hash identifier: etBMUFNPTr/3zjitv5+D5AZ7ex6QXkGr9geGzyuZf1U=
Subject key identifier: 14:3D:9B:02:01:F1:AF:32:B6:10:F9:20:3B:65:1C:B4:AD:AA:C2:90
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01A0814471B29A3849D5CECCAC87028EAAE0
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FD2bAgHxrzK2EPkgO2UctK2qwpA.roa
Signing time: Tue 08 Sep 2026 13:45:41 +0000
ROA not before: Tue 08 Sep 2026 13:45:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50182
IP address blocks: 93.170.246.0/23 maxlen: 24
95.47.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:44:71:b2:9a:38:49:d5:ce:cc:ac:87:02:8e:aa:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Sep 8 13:45:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=143d9b0201f1af32b610f9203b651cb4adaac290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:52:f8:ab:ca:01:29:fb:20:7d:d2:d1:d4:
9e:42:30:9a:ca:c6:67:63:b2:91:64:85:a1:f6:14:
5a:fe:02:73:05:76:79:fb:c8:e3:35:45:22:69:96:
d7:8d:13:75:0c:6a:f3:e1:9a:cd:c6:0c:1f:2e:25:
19:c7:02:a6:d2:39:5f:20:35:fd:2e:19:b2:24:fd:
62:28:4d:dc:80:e4:df:c4:8d:2a:0f:da:12:3c:10:
2b:87:a4:5d:9f:f9:5b:01:f5:e6:c3:38:68:eb:b2:
8e:69:ba:cd:4c:03:54:3f:91:a9:a6:e8:31:69:89:
a8:a1:be:83:16:fc:94:37:8e:20:21:8d:ff:79:29:
59:ae:0d:63:aa:b4:1f:44:61:2e:64:fc:fa:6f:60:
45:61:6d:04:9f:fb:39:a6:12:80:13:1f:fb:61:a1:
bf:ae:44:26:b0:f3:a7:de:fe:ed:f0:c4:3c:fc:0b:
f9:41:8a:07:0a:73:3d:0a:e9:6f:c9:b4:55:11:38:
68:66:b9:0f:81:06:9f:1a:5b:0c:ec:79:6f:5c:61:
aa:6a:3d:29:cf:3d:75:98:f0:19:45:9b:9c:ef:dd:
a2:1d:6a:d9:10:83:27:ff:38:53:95:b2:92:7d:fc:
18:65:72:ae:1c:2a:dd:ff:e3:b6:fa:25:32:b7:52:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3D:9B:02:01:F1:AF:32:B6:10:F9:20:3B:65:1C:B4:AD:AA:C2:90
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FD2bAgHxrzK2EPkgO2UctK2qwpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.246.0/23
95.47.142.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:32:84:29:f4:7e:d2:72:93:9d:94:d6:89:42:18:64:ea:d2:
75:b3:a2:4b:f3:1d:13:11:52:50:9f:17:8c:f2:31:9e:f5:56:
37:57:a6:8e:e7:41:92:40:d7:39:5d:55:46:1c:91:72:11:9a:
6b:8e:02:8d:a5:1a:e6:37:e1:e8:7a:04:36:4c:49:66:e6:e5:
c4:88:7a:25:07:00:f7:68:5e:c0:7f:2c:3d:b4:a4:36:b6:48:
ed:27:df:1b:2d:fb:5a:71:b9:a7:75:10:d6:a4:e5:67:b9:5d:
cb:16:b4:70:3c:5a:69:0a:49:bb:93:d1:fc:24:7f:dd:be:75:
38:73:14:ed:44:a8:d9:14:17:01:e3:a0:4d:10:f3:b1:69:2f:
73:7e:17:8a:93:76:80:01:38:5a:50:4f:83:79:c5:a1:e1:d6:
00:41:f2:12:db:93:56:c1:59:5d:04:8f:c3:e9:6e:fb:49:5b:
ec:a1:f3:c0:ee:88:3e:9c:7c:78:08:c4:cc:11:07:da:ee:6b:
d9:63:77:63:c1:48:2b:ae:61:49:6b:3e:00:a4:aa:27:71:55:
5e:26:b4:87:2d:4d:99:9d:a8:46:7c:a7:f4:e3:91:3a:40:65:
04:86:69:5c:0b:ab:7b:d5:42:a9:5c:b6:64:80:5f:52:d4:0b:
d5:0e:c4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:01:12 2026 by rpki-client