Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/ca9eb6-76d5-438c-a615-cfc7334454e2/1/5taDyFD3alNHsaqlIykBYBO1d8A.roa
File: 5taDyFD3alNHsaqlIykBYBO1d8A.roa (raw, json)
Hash identifier: PaZdfx+y9KvkHk4eoo5Oqq28oKFYM33iRYtsZsUl79w=
Subject key identifier: E6:D6:83:C8:50:F7:6A:53:47:B1:AA:A5:23:29:01:60:13:B5:77:C0
Certificate issuer: /CN=40d6d34d222c170abc3f880e66080ca53d473f70
Certificate serial: 01A0E3604D5BBF0092DFE4BF1B23F529150E
Authority key identifier: 40:D6:D3:4D:22:2C:17:0A:BC:3F:88:0E:66:08:0C:A5:3D:47:3F:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNbTTSIsFwq8P4gOZggMpT1HP3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ca9eb6-76d5-438c-a615-cfc7334454e2/1/5taDyFD3alNHsaqlIykBYBO1d8A.roa
Signing time: Sun 27 Sep 2026 14:58:54 +0000
ROA not before: Sun 27 Sep 2026 14:58:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47563
IP address blocks: 93.174.216.0/21 maxlen: 21
93.174.216.0/24 maxlen: 24
93.174.217.0/24 maxlen: 24
93.174.219.0/24 maxlen: 24
93.174.220.0/23 maxlen: 23
93.174.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ca9eb6-76d5-438c-a615-cfc7334454e2/1/QNbTTSIsFwq8P4gOZggMpT1HP3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ca9eb6-76d5-438c-a615-cfc7334454e2/1/QNbTTSIsFwq8P4gOZggMpT1HP3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNbTTSIsFwq8P4gOZggMpT1HP3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:60:4d:5b:bf:00:92:df:e4:bf:1b:23:f5:29:15:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d6d34d222c170abc3f880e66080ca53d473f70
Validity
Not Before: Sep 27 14:58:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6d683c850f76a5347b1aaa52329016013b577c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:68:95:42:f5:0b:26:dc:6a:4b:04:ba:b5:
ab:2b:5d:ca:27:8f:d0:20:ba:79:3f:13:c5:03:05:
9d:26:40:e0:44:8a:e0:37:85:52:7f:ca:7e:39:af:
23:12:c5:e0:f8:62:d9:8f:cb:ea:9e:6a:85:42:8e:
38:56:75:f6:1e:7e:ef:38:8a:12:69:9f:00:f3:e4:
d4:a6:98:32:ff:1f:a9:40:5a:f6:ac:9f:8f:9e:35:
84:09:3d:13:27:4e:ef:7e:23:bb:cd:15:9b:f4:7b:
7f:07:55:8c:cd:82:6f:7e:6a:c3:49:fd:0d:eb:f5:
21:6f:9f:38:23:e2:ac:86:17:30:99:61:61:9d:30:
30:e6:cc:3d:3b:a0:9e:96:11:83:63:af:65:c0:18:
47:1e:e9:d9:d6:93:94:25:04:54:99:c2:6d:9f:8e:
c7:de:00:4b:91:b1:f7:a4:d6:46:8b:d4:1e:8e:08:
3b:77:93:8c:ad:f5:8e:b7:33:f2:75:e6:b7:b2:d4:
de:1c:61:f0:71:a8:87:40:80:b9:29:be:d8:35:88:
49:75:55:db:a2:58:1d:d8:1c:86:a5:d1:ec:4d:62:
d3:4d:29:94:60:6c:4d:78:3a:53:0b:c7:09:25:ce:
8e:97:50:09:79:39:27:48:8a:e4:90:7e:a4:7e:3c:
b7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D6:83:C8:50:F7:6A:53:47:B1:AA:A5:23:29:01:60:13:B5:77:C0
X509v3 Authority Key Identifier:
keyid:40:D6:D3:4D:22:2C:17:0A:BC:3F:88:0E:66:08:0C:A5:3D:47:3F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNbTTSIsFwq8P4gOZggMpT1HP3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ca9eb6-76d5-438c-a615-cfc7334454e2/1/5taDyFD3alNHsaqlIykBYBO1d8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ca9eb6-76d5-438c-a615-cfc7334454e2/1/QNbTTSIsFwq8P4gOZggMpT1HP3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.216.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:82:bd:25:4e:60:08:94:bf:f1:f8:fa:d8:ce:0e:95:7d:c1:
39:38:7f:ea:6c:66:fa:05:47:44:ce:9c:b4:4a:5c:26:9c:3f:
be:39:e1:26:a9:7c:85:1f:c4:70:04:a8:47:a3:aa:28:9e:5c:
e0:33:3d:f4:a3:28:08:74:b6:90:0d:ff:00:ed:0e:70:d9:c5:
c5:3a:57:35:e7:dc:bf:f3:b2:b0:0b:28:32:4a:5c:13:7a:18:
30:82:7d:0f:6f:ef:73:75:ea:01:d8:61:af:8e:77:1e:32:23:
93:e5:7b:d8:31:3f:98:ef:d8:19:65:42:81:71:d9:dc:e4:39:
44:90:04:fb:1c:02:0c:58:5b:e2:53:65:f0:76:d2:49:f8:90:
75:a0:d8:0d:00:ee:ce:51:b8:a0:e1:49:bb:a1:2c:55:de:83:
4d:29:7f:86:1d:48:03:b9:d5:48:8b:74:4a:08:b8:78:57:48:
21:c7:40:1b:fb:46:01:04:b8:00:89:ac:0d:73:c8:93:ad:f3:
80:e3:27:7a:3b:8c:49:d8:98:0e:c8:74:3a:65:4b:28:0f:e9:
07:37:5f:17:09:e9:5c:4a:7d:62:2d:ee:aa:07:18:c6:a9:2f:
91:78:73:6d:83:97:f6:8e:b3:90:c7:59:80:50:48:e8:d6:fc:
93:de:d0:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDjYE1bvwCS3+S/GyP1KRUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDZkMzRkMjIyYzE3MGFiYzNmODgwZTY2MDgwY2E1M2Q0
NzNmNzAwHhcNMjYwOTI3MTQ1ODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmQ2ODNjODUwZjc2YTUzNDdiMWFhYTUyMzI5MDE2MDEzYjU3N2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfZolUL1CybcaksEurWrK13KJ4/Q
ILp5PxPFAwWdJkDgRIrgN4VSf8p+Oa8jEsXg+GLZj8vqnmqFQo44VnX2Hn7vOIoS
aZ8A8+TUppgy/x+pQFr2rJ+PnjWECT0TJ07vfiO7zRWb9Ht/B1WMzYJvfmrDSf0N
6/Uhb584I+KshhcwmWFhnTAw5sw9O6CelhGDY69lwBhHHunZ1pOUJQRUmcJtn47H
3gBLkbH3pNZGi9Qejgg7d5OMrfWOtzPydea3stTeHGHwcaiHQIC5Kb7YNYhJdVXb
olgd2ByGpdHsTWLTTSmUYGxNeDpTC8cJJc6Ol1AJeTknSIrkkH6kfjy3SQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFObWg8hQ92pTR7GqpSMpAWATtXfAMB8GA1UdIwQY
MBaAFEDW000iLBcKvD+IDmYIDKU9Rz9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5iVFRTSXNGd3E4UDRnT1pnZ01wVDFIUDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9jYTllYjYtNzZkNS00MzhjLWE2MTUt
Y2ZjNzMzNDQ1NGUyLzEvNXRhRHlGRDNhbE5Ic2FxbEl5a0JZQk8xZDhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9jYTllYjYtNzZkNS00MzhjLWE2MTUtY2ZjNzMzNDQ1NGUy
LzEvUU5iVFRTSXNGd3E4UDRnT1pnZ01wVDFIUDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXa7YMA0G
CSqGSIb3DQEBCwUAA4IBAQC2gr0lTmAIlL/x+PrYzg6VfcE5OH/qbGb6BUdEzpy0
SlwmnD++OeEmqXyFH8RwBKhHo6oonlzgMz30oygIdLaQDf8A7Q5w2cXFOlc159y/
87KwCygySlwTehgwgn0Pb+9zdeoB2GGvjnceMiOT5XvYMT+Y79gZZUKBcdnc5DlE
kAT7HAIMWFviU2XwdtJJ+JB1oNgNAO7OUbig4Um7oSxV3oNNKX+GHUgDudVIi3RK
CLh4V0ghx0Ab+0YBBLgAiawNc8iTrfOA4yd6O4xJ2JgOyHQ6ZUsoD+kHN18XCelc
Sn1iLe6qBxjGqS+ReHNtg5f2jrOQx1mAUEjo1vyT3tBq
-----END CERTIFICATE-----
Generated at Thu Oct 1 11:59:25 2026 by rpki-client