Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/L_ZKDFvjJ7gx0vuFEnKI-RNvrYc.roa
File: L_ZKDFvjJ7gx0vuFEnKI-RNvrYc.roa (raw, json)
Hash identifier: 5OB1/T+LubWmVmcu/MxTj+93D8Y5BWqNoahLBjH78D8=
Subject key identifier: 2F:F6:4A:0C:5B:E3:27:B8:31:D2:FB:85:12:72:88:F9:13:6F:AD:87
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A163053230F1FE9CE2B84F15625A456E70
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/L_ZKDFvjJ7gx0vuFEnKI-RNvrYc.roa
Signing time: Thu 22 Oct 2026 09:50:47 +0000
ROA not before: Thu 22 Oct 2026 09:50:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 93.119.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:05:32:30:f1:fe:9c:e2:b8:4f:15:62:5a:45:6e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Oct 22 09:50:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ff64a0c5be327b831d2fb85127288f9136fad87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:42:bb:f0:04:f7:23:c8:81:21:a7:e9:6d:
d4:aa:37:82:e1:3b:ba:1b:cf:a4:87:67:8b:9d:e5:
86:d8:81:93:3d:20:12:cd:cf:d1:2e:3d:65:de:a5:
f0:bd:b3:ad:a7:b3:bd:9f:6f:e7:32:f9:70:13:42:
21:33:d0:37:9a:12:f1:c1:62:6f:eb:c8:da:5b:b5:
6e:bb:8f:39:e3:27:3c:81:fe:bc:93:bb:6c:a0:05:
61:6b:be:c8:5b:8b:37:64:5b:63:b3:46:17:26:51:
1d:fc:11:c4:0f:b4:f2:a6:03:24:fa:8b:ef:b1:66:
3d:30:eb:f7:db:4d:ab:03:a7:fb:0a:3e:0e:98:a4:
e3:12:72:57:20:c6:f4:1e:bf:14:f0:e4:79:4a:d8:
2d:07:d8:44:f6:54:11:48:0a:d2:11:04:9c:d9:f0:
52:24:d8:dc:3f:e0:1f:3f:38:29:33:e1:ab:ce:e9:
f9:1c:ec:26:82:fc:8d:76:06:84:85:4b:f0:6f:2f:
d6:46:42:f9:5e:52:4e:8e:35:d8:cf:54:4b:b8:be:
5c:ea:ac:67:e6:0f:d0:b0:02:3b:bb:23:b2:9b:22:
9b:eb:25:12:d8:e0:fb:82:06:f1:c2:91:99:1c:3f:
dc:e6:34:5b:be:fb:3d:6c:de:75:4c:3c:45:73:36:
0a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F6:4A:0C:5B:E3:27:B8:31:D2:FB:85:12:72:88:F9:13:6F:AD:87
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/L_ZKDFvjJ7gx0vuFEnKI-RNvrYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.237.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:51:8e:88:34:fa:29:8a:2b:48:24:66:42:a7:0b:97:20:75:
48:62:78:5b:53:f7:65:5e:cb:3c:39:4b:65:12:7f:b5:0c:ac:
42:c2:6b:25:46:1b:44:55:b8:f2:c0:61:5d:49:0d:79:a9:90:
d7:3e:82:01:5f:87:bd:53:ce:f2:ab:94:c2:78:10:aa:6a:92:
f5:28:20:48:8c:16:fb:0f:29:4f:2a:3e:29:fa:08:ff:fd:4e:
f9:11:0a:bc:67:e1:69:58:c3:44:37:b7:ba:cb:94:4b:18:27:
fb:c5:9c:85:42:61:a9:84:0b:d3:6b:53:81:ff:33:4b:15:49:
9f:70:38:75:3e:8c:f2:42:8d:75:1c:16:fa:70:32:9e:f1:0e:
15:ea:1e:2d:f0:74:5a:42:68:7d:6e:87:6f:cc:79:09:9b:40:
d0:10:08:87:a2:90:bb:f0:34:aa:79:e3:98:06:f1:d1:a5:31:
f3:1f:67:88:e5:08:e3:57:2c:62:43:75:91:8c:78:b1:38:23:
f3:23:0a:ec:8a:58:d6:64:fc:dd:27:bd:41:e0:da:92:e9:eb:
d5:a0:8d:3f:93:a6:16:8d:9c:79:2d:00:14:ee:93:1c:8d:2b:
3d:20:b3:55:2b:20:e5:1c:7c:fd:ff:40:b7:50:4a:1f:6f:0f:
d8:f9:cb:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFjBTIw8f6c4rhPFWJaRW5wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjYxMDIyMDk1MDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmY2NGEwYzViZTMyN2I4MzFkMmZiODUxMjcyODhmOTEzNmZhZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVtCu/AE9yPIgSGn6W3UqjeC4Tu6
G8+kh2eLneWG2IGTPSASzc/RLj1l3qXwvbOtp7O9n2/nMvlwE0IhM9A3mhLxwWJv
68jaW7Vuu4854yc8gf68k7tsoAVha77IW4s3ZFtjs0YXJlEd/BHED7TypgMk+ovv
sWY9MOv3202rA6f7Cj4OmKTjEnJXIMb0Hr8U8OR5StgtB9hE9lQRSArSEQSc2fBS
JNjcP+AfPzgpM+Grzun5HOwmgvyNdgaEhUvwby/WRkL5XlJOjjXYz1RLuL5c6qxn
5g/QsAI7uyOymyKb6yUS2OD7ggbxwpGZHD/c5jRbvvs9bN51TDxFczYKUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC/2Sgxb4ye4MdL7hRJyiPkTb62HMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvTF9aS0RGdmpKN2d4MHZ1RkVuS0ktUk52clljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXftMA0G
CSqGSIb3DQEBCwUAA4IBAQCxUY6INPopiitIJGZCpwuXIHVIYnhbU/dlXss8OUtl
En+1DKxCwmslRhtEVbjywGFdSQ15qZDXPoIBX4e9U87yq5TCeBCqapL1KCBIjBb7
DylPKj4p+gj//U75EQq8Z+FpWMNEN7e6y5RLGCf7xZyFQmGphAvTa1OB/zNLFUmf
cDh1PozyQo11HBb6cDKe8Q4V6h4t8HRaQmh9bodvzHkJm0DQEAiHopC78DSqeeOY
BvHRpTHzH2eI5QjjVyxiQ3WRjHixOCPzIwrsiljWZPzdJ71B4NqS6evVoI0/k6YW
jZx5LQAU7pMcjSs9ILNVKyDlHHz9/0C3UEofbw/Y+cs6
-----END CERTIFICATE-----
Generated at Wed Nov 4 05:35:43 2026 by rpki-client