Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/94HxMeQpqxbnzPZwNpkqJDsORc8.roa
File: 94HxMeQpqxbnzPZwNpkqJDsORc8.roa (raw, json)
Hash identifier: 172qy14dLm/xfOVuxZ2RaZss36yAoABbk6VF3Yfelsc=
Subject key identifier: F7:81:F1:31:E4:29:AB:16:E7:CC:F6:70:36:99:2A:24:3B:0E:45:CF
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019E212AE1E662F76E506985DEB63D948DB9
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/94HxMeQpqxbnzPZwNpkqJDsORc8.roa
Signing time: Wed 13 May 2026 11:48:38 +0000
ROA not before: Wed 13 May 2026 11:48:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202793
IP address blocks: 185.201.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:2a:e1:e6:62:f7:6e:50:69:85:de:b6:3d:94:8d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 13 11:48:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f781f131e429ab16e7ccf67036992a243b0e45cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:b4:01:24:99:bb:f4:a3:e5:69:47:f7:a7:
43:03:95:c2:21:21:2c:04:fb:b2:56:d6:fb:d8:b2:
b4:85:d0:6f:8f:23:1a:81:79:19:47:a6:5d:96:cd:
4a:47:68:01:86:99:c2:25:69:e5:b3:9f:db:9f:c5:
13:03:be:ec:fd:58:70:95:00:09:27:68:98:8f:59:
a6:2f:5f:5b:73:2a:a2:44:95:b0:fb:7d:1a:c8:67:
f0:bc:ae:0f:4d:97:98:37:fb:00:fe:5d:1e:62:47:
a5:ba:8f:93:a2:7b:9d:9f:24:05:87:49:86:5c:2f:
43:89:75:78:e6:62:2d:34:26:0f:b0:45:6c:eb:cf:
8a:9b:66:56:2d:a7:f4:35:90:1c:bc:3b:4a:05:b8:
13:ac:39:57:88:cb:32:f3:1f:22:1d:d2:aa:15:33:
4d:69:91:39:5e:7d:23:40:f1:71:b9:a1:36:36:df:
45:08:54:43:37:4e:77:0f:33:63:bb:8c:d9:52:c1:
ab:02:4a:e7:d3:5a:fe:ae:68:da:52:e0:a9:ef:45:
c1:18:f9:33:2a:29:27:82:8e:0a:e9:05:2d:86:9e:
32:61:ff:42:c9:56:f0:17:09:8b:f3:36:3a:89:f6:
18:36:20:d1:7a:3e:a9:08:b5:9d:70:6a:73:1f:6c:
ac:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:81:F1:31:E4:29:AB:16:E7:CC:F6:70:36:99:2A:24:3B:0E:45:CF
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/94HxMeQpqxbnzPZwNpkqJDsORc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.31.0/24
Signature Algorithm: sha256WithRSAEncryption
82:4c:19:0d:5f:ef:90:ba:57:14:f5:a8:c3:e7:7d:b2:55:f8:
2f:13:35:f9:d5:fe:2f:37:29:d2:05:c6:90:b9:81:8a:3f:9a:
90:88:f9:ad:c3:7c:09:4e:a9:21:03:57:8b:bf:e3:8b:22:6a:
b7:71:65:27:7d:74:82:42:f6:9f:ab:e4:17:c6:74:f3:0b:94:
76:fa:14:55:a6:91:37:b7:b2:44:43:cc:28:dd:c6:58:60:1f:
20:26:18:c3:75:79:e7:f1:cb:b4:08:71:99:33:55:4b:87:41:
9c:79:24:c2:3f:0a:06:ac:5c:28:59:12:56:7c:43:0b:0a:ea:
79:d0:2e:7b:2f:75:01:b6:dc:2d:84:51:c1:e1:91:94:18:00:
81:c3:ce:71:2c:81:30:d1:81:d2:2c:6c:7b:4d:21:a3:0c:60:
38:c1:d8:6a:11:24:2b:45:00:d4:63:33:5b:b5:af:ed:df:7f:
13:8e:4a:03:b5:38:fc:ed:81:62:4c:bd:8d:36:ef:11:a4:06:
82:22:20:9a:a0:47:1d:05:da:ef:86:dc:9a:f3:66:c3:7f:67:
87:0e:64:e5:0f:c4:74:5e:87:00:43:07:c0:4d:9c:14:10:92:
86:d7:32:59:1a:f4:43:d7:88:19:fb:8c:2e:1c:25:ec:7c:12:
65:33:f2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:24 2026 by rpki-client