Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Ed0mF1WVc5xrStaLteUcTzCtfqE.roa
File: Ed0mF1WVc5xrStaLteUcTzCtfqE.roa (raw, json)
Hash identifier: 8nttvJtY0bNBfejuOKJkOG+MA4c1taJ4z0kadaq8Wj4=
Subject key identifier: 11:DD:26:17:55:95:73:9C:6B:4A:D6:8B:B5:E5:1C:4F:30:AD:7E:A1
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A047A99B35C06FE06CADAD3EE4F67102A0
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Ed0mF1WVc5xrStaLteUcTzCtfqE.roa
Signing time: Fri 28 Aug 2026 09:18:12 +0000
ROA not before: Fri 28 Aug 2026 09:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62300
IP address blocks: 213.166.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:a9:9b:35:c0:6f:e0:6c:ad:ad:3e:e4:f6:71:02:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 28 09:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11dd26175595739c6b4ad68bb5e51c4f30ad7ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:b1:db:ef:b4:0b:40:a6:51:c6:54:78:dc:
df:b0:0e:76:7c:4b:35:94:af:e3:cb:be:3f:69:61:
5d:0c:4a:65:be:b0:07:c9:a1:46:43:8c:53:75:ca:
de:65:bf:41:78:08:07:20:30:d5:9f:50:c2:7e:ef:
2e:db:45:62:eb:cc:e8:18:d8:71:98:f4:48:0c:fa:
ae:32:6a:6a:8e:36:a1:ce:e8:4c:b7:22:36:e5:bf:
3d:55:7d:90:b2:03:dd:d9:45:be:e6:4a:43:b5:da:
56:24:f7:6b:b4:1e:8a:89:a7:a4:02:c8:8f:7c:48:
00:60:7d:a5:fe:e8:1c:83:71:37:13:66:04:c8:75:
10:88:2d:db:61:5f:91:01:f4:4a:90:5a:c0:87:10:
cf:82:da:94:1a:10:53:44:0e:fd:6d:f0:03:19:f1:
c7:6a:8b:94:f7:e0:22:90:db:0b:13:03:a6:38:22:
66:a5:58:e0:d9:a0:a7:0a:98:37:f3:cc:58:85:55:
d6:a2:a6:0a:bc:b1:b0:40:19:c7:d4:9e:9f:9a:8d:
2e:36:e8:e1:f6:38:99:34:e1:8a:bc:59:1a:7a:f0:
ad:2e:28:98:32:15:d0:2d:b9:18:34:9d:c9:25:f9:
ec:ec:42:95:57:9c:d6:d1:73:d6:5a:2e:30:63:b8:
ad:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DD:26:17:55:95:73:9C:6B:4A:D6:8B:B5:E5:1C:4F:30:AD:7E:A1
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Ed0mF1WVc5xrStaLteUcTzCtfqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.166.93.0/24
Signature Algorithm: sha256WithRSAEncryption
39:21:1f:e7:a5:b3:fa:aa:41:6e:8c:c1:eb:5c:77:7d:3a:c0:
89:57:eb:a4:29:7c:cb:89:bf:a3:e7:bf:e1:d4:48:84:82:c5:
ce:2a:95:f4:b7:35:0c:81:92:68:ce:08:b8:b7:a9:69:6e:c7:
b1:e5:fa:a1:73:df:60:67:81:17:f8:e5:16:f5:49:6a:c8:56:
80:bd:80:ed:96:72:85:53:0c:b7:36:c2:06:59:0b:09:80:75:
d3:5c:11:a7:e8:d1:f6:5d:19:d3:da:23:24:91:a0:c2:7c:d3:
e2:09:bb:e0:53:f5:33:b9:2e:2f:de:2c:13:b5:22:15:41:e4:
aa:ce:8d:9e:e9:55:a7:0f:be:e2:b4:d6:1b:a1:1d:e6:7f:b7:
35:fb:e3:e5:a9:04:f4:fd:1c:e5:5a:6f:8c:98:84:3d:3d:3e:
be:64:4f:2d:9e:53:a6:76:33:96:22:6d:48:45:7f:32:63:03:
33:90:67:94:fb:4e:38:01:d1:be:cb:2c:b4:a2:7d:5d:44:c3:
4b:d2:5f:79:75:2e:85:a8:18:da:cd:aa:6c:3d:8a:d0:10:9d:
88:9c:13:32:1a:54:c0:82:ee:92:21:a1:3c:39:e2:83:e7:48:
b5:c3:52:35:20:51:ed:0e:43:6f:2b:af:85:91:ea:ba:93:91:
f3:e5:8e:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBHqZs1wG/gbK2tPuT2cQKgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwODI4MDkxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWRkMjYxNzU1OTU3MzljNmI0YWQ2OGJiNWU1MWM0ZjMwYWQ3ZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYux2++0C0CmUcZUeNzfsA52fEs1
lK/jy74/aWFdDEplvrAHyaFGQ4xTdcreZb9BeAgHIDDVn1DCfu8u20Vi68zoGNhx
mPRIDPquMmpqjjahzuhMtyI25b89VX2QsgPd2UW+5kpDtdpWJPdrtB6KiaekAsiP
fEgAYH2l/ugcg3E3E2YEyHUQiC3bYV+RAfRKkFrAhxDPgtqUGhBTRA79bfADGfHH
aouU9+AikNsLEwOmOCJmpVjg2aCnCpg388xYhVXWoqYKvLGwQBnH1J6fmo0uNujh
9jiZNOGKvFkaevCtLiiYMhXQLbkYNJ3JJfns7EKVV5zW0XPWWi4wY7itlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBHdJhdVlXOca0rWi7XlHE8wrX6hMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvRWQwbUYxV1ZjNXhyU3RhTHRlVWNUekN0ZnFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1aZdMA0G
CSqGSIb3DQEBCwUAA4IBAQA5IR/npbP6qkFujMHrXHd9OsCJV+ukKXzLib+j57/h
1EiEgsXOKpX0tzUMgZJozgi4t6lpbsex5fqhc99gZ4EX+OUW9UlqyFaAvYDtlnKF
Uwy3NsIGWQsJgHXTXBGn6NH2XRnT2iMkkaDCfNPiCbvgU/UzuS4v3iwTtSIVQeSq
zo2e6VWnD77itNYboR3mf7c1++PlqQT0/RzlWm+MmIQ9PT6+ZE8tnlOmdjOWIm1I
RX8yYwMzkGeU+044AdG+yyy0on1dRMNL0l95dS6FqBjazapsPYrQEJ2InBMyGlTA
gu6SIaE8OeKD50i1w1I1IFHtDkNvK6+Fkeq6k5Hz5Y7S
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:16:56 2026 by rpki-client