Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/eY7eXkNk3JvUkdPH0x_iZ9VT3oo.roa
File: eY7eXkNk3JvUkdPH0x_iZ9VT3oo.roa (raw, json)
Hash identifier: 8VXLmZmMOIXqRdreWxMedI3yZBB8CUK8miMTPRujoOg=
Subject key identifier: 79:8E:DE:5E:43:64:DC:9B:D4:91:D3:C7:D3:1F:E2:67:D5:53:DE:8A
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019EEFFADDC3F782B87861A3389105B957B8
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/eY7eXkNk3JvUkdPH0x_iZ9VT3oo.roa
Signing time: Mon 22 Jun 2026 15:37:35 +0000
ROA not before: Mon 22 Jun 2026 15:37:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198969
IP address blocks: 93.119.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:fa:dd:c3:f7:82:b8:78:61:a3:38:91:05:b9:57:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Jun 22 15:37:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=798ede5e4364dc9bd491d3c7d31fe267d553de8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:65:f3:8f:fa:40:bb:45:9e:02:02:50:b8:
85:85:b8:79:92:09:20:62:a4:11:37:91:ad:8c:2e:
32:59:bf:5b:bd:e3:4d:c6:f9:16:50:32:6d:f9:ec:
4d:a0:30:af:69:30:17:45:05:2f:c9:58:ea:7c:59:
94:17:57:69:9e:ca:93:8e:28:54:8a:89:41:06:80:
ee:7e:92:28:99:a2:99:e5:21:c1:8a:e2:6e:12:86:
56:b9:a0:35:07:02:2f:5c:69:c9:ce:b5:6e:40:66:
9f:d3:aa:2a:af:13:1b:78:e2:05:bb:ac:1a:95:ef:
30:f3:34:e2:12:67:9b:36:08:bf:a8:dc:fb:e5:9c:
87:a5:42:54:91:6b:52:d5:62:46:66:78:d4:18:d5:
ca:a7:18:8b:0b:05:f2:52:73:e5:ce:32:fc:a8:dd:
28:1c:74:2f:df:a0:43:15:64:1b:e4:e7:d1:da:59:
d4:45:e3:e4:a6:e2:f0:17:a5:c7:5c:64:03:6b:26:
b1:97:a5:97:37:fe:6f:2e:4d:fc:77:eb:97:71:28:
08:72:49:c7:67:fb:a6:69:7a:93:60:b4:50:d6:1d:
fa:47:54:23:1e:70:ad:0f:e0:26:37:80:b3:46:62:
c7:2a:89:ae:db:54:2f:20:3d:3b:8f:78:be:ba:14:
37:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8E:DE:5E:43:64:DC:9B:D4:91:D3:C7:D3:1F:E2:67:D5:53:DE:8A
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/eY7eXkNk3JvUkdPH0x_iZ9VT3oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.232.0/24
Signature Algorithm: sha256WithRSAEncryption
02:be:6f:fc:42:ba:32:7c:b0:28:5a:5d:a7:59:73:fb:a2:3e:
7c:d8:2d:f9:e7:48:a8:2a:93:90:5d:fa:22:05:5c:51:d3:3a:
8f:2a:ae:3c:2a:18:c6:6d:73:27:35:89:f0:ad:37:0a:f2:a8:
e7:65:b3:db:99:29:4d:f4:7a:5a:f3:d9:a0:c7:06:27:64:9b:
2c:7d:db:a4:e0:ae:79:7a:e2:ab:69:d9:12:11:fb:ce:51:61:
f7:95:f2:85:49:22:dc:87:22:0c:45:e2:13:92:3f:8e:bf:53:
e2:80:c4:a3:be:b7:f3:dc:b7:a6:e0:2c:d3:f7:cc:ae:f3:82:
d6:08:a8:a4:d2:ca:91:ab:bf:df:5e:40:a6:1d:9f:ee:56:01:
9c:fe:5c:cb:66:7e:55:9a:80:8e:67:ac:2e:63:c4:06:f0:b4:
b9:15:71:21:df:a5:6f:58:0f:6e:2d:a8:e9:47:22:ec:e9:87:
3b:ca:e4:c4:f3:55:0d:b9:56:ac:e2:39:c4:9c:3a:2a:02:df:
b3:b7:74:fe:92:af:65:b5:cc:e9:50:09:e5:b6:d6:67:61:5a:
1c:4f:48:bc:21:ff:84:5b:b7:49:e2:60:5c:82:9c:26:fe:45:
fa:0c:1e:3d:d6:81:d6:77:be:cd:f1:62:52:30:59:8b:44:9b:
e4:60:76:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 21:32:36 2026 by rpki-client