Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/P6i1xKDiDg1LM1Znm-y-t8uTHjk.roa
File: P6i1xKDiDg1LM1Znm-y-t8uTHjk.roa (raw, json)
Hash identifier: yhbjvEnf7fi2x5YHZz0RgLP5SAlqHm+adsjxrZLYLfY=
Subject key identifier: 3F:A8:B5:C4:A0:E2:0E:0D:4B:33:56:67:9B:EC:BE:B7:CB:93:1E:39
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01A00070365E755180E08FA11A4E7F3ED9DC
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/P6i1xKDiDg1LM1Znm-y-t8uTHjk.roa
Signing time: Fri 14 Aug 2026 13:22:28 +0000
ROA not before: Fri 14 Aug 2026 13:22:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213029
IP address blocks: 93.170.6.0/24 maxlen: 24
93.170.83.0/24 maxlen: 24
93.170.88.0/24 maxlen: 24
95.46.210.0/23 maxlen: 24
95.47.124.0/22 maxlen: 24
95.47.238.0/23 maxlen: 24
146.120.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:70:36:5e:75:51:80:e0:8f:a1:1a:4e:7f:3e:d9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 14 13:22:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fa8b5c4a0e20e0d4b3356679becbeb7cb931e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:1d:2e:f2:50:ef:28:08:eb:c3:be:05:17:
6f:c9:e0:05:07:a4:09:39:06:37:4d:20:d8:4e:a3:
00:a9:f0:38:9e:9f:5e:ce:0d:f7:8b:d0:ce:3f:42:
47:d8:58:01:a7:e0:47:15:8a:f4:ce:72:f2:a0:17:
63:f5:90:44:e2:0e:5e:85:6f:3d:7f:b4:3b:9e:5d:
a4:63:92:ee:05:d3:b8:62:a4:40:4b:f7:03:ac:23:
64:d8:d6:68:24:24:5b:1b:2a:80:8a:1d:bb:29:18:
91:01:f6:e4:7b:3d:85:2b:52:92:a0:91:5b:8f:c2:
24:bf:fd:8d:3d:35:5b:6a:8e:9a:52:c8:ea:ee:eb:
61:f7:75:82:d1:75:d5:75:e3:5c:48:1f:52:0e:91:
94:fa:35:fd:ef:1f:bb:8b:5b:af:d1:93:bb:74:f1:
63:c0:32:22:d5:d8:c3:9a:44:71:fb:ea:4b:29:05:
6d:bd:98:fe:a2:a0:c5:3c:61:bc:e2:13:2e:1b:6d:
51:2b:21:fd:74:d3:0f:66:7a:e4:3f:44:4c:8d:29:
18:47:af:52:8c:4d:4c:40:cb:56:f6:99:45:3a:a6:
b8:f3:d7:60:1c:e9:b9:62:0b:fe:23:fb:1a:21:d3:
f3:c2:62:b2:a2:0b:6e:fb:b8:78:88:c8:76:96:da:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A8:B5:C4:A0:E2:0E:0D:4B:33:56:67:9B:EC:BE:B7:CB:93:1E:39
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/P6i1xKDiDg1LM1Znm-y-t8uTHjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.6.0/24
93.170.83.0/24
93.170.88.0/24
95.46.210.0/23
95.47.124.0/22
95.47.238.0/23
146.120.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:03:8b:75:5f:16:9c:ce:c5:9c:c7:06:6a:c3:5b:0f:e9:82:
1d:97:8f:87:7c:63:5e:88:99:52:ed:c3:de:bc:a1:53:1d:fc:
f6:6d:6b:ed:59:f3:05:54:17:42:67:e8:62:a0:48:55:de:18:
3e:02:ac:fb:8a:25:e8:33:4e:ac:80:25:c3:d8:91:a5:40:8e:
29:10:55:ef:25:c2:dc:32:27:4b:81:4c:a5:49:fb:1a:e8:c3:
8d:7f:ad:7f:73:37:29:27:50:b9:8d:35:97:fe:f6:85:a9:43:
3c:2b:fb:ca:76:b6:e5:c4:90:e7:4b:7b:ae:ae:9d:00:0b:e1:
ac:3b:e9:f1:63:03:ce:c6:73:81:b9:7e:30:4a:35:67:41:27:
cf:2e:63:74:d7:57:b9:ba:11:2f:f2:96:95:10:f9:09:89:c2:
3b:39:73:7d:d2:d5:c3:8b:50:aa:10:5e:85:ed:58:9c:c5:94:
39:50:60:77:4a:d5:ba:f7:85:e9:07:69:4d:ac:0d:01:93:a7:
56:d8:82:94:df:62:eb:d1:8f:55:95:1b:d9:12:34:f7:2a:35:
b7:01:cc:ad:a4:f7:f6:41:8a:bb:c5:19:e9:58:27:47:f0:a0:
b0:9d:02:ee:0f:f1:b5:53:60:0b:37:fd:b1:60:50:4a:a3:5e:
3d:5c:03:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:01:20 2026 by rpki-client