Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/93ecOGMnd7Y-s5RhPxswRsvhxCo.roa
File: 93ecOGMnd7Y-s5RhPxswRsvhxCo.roa (raw, json)
Hash identifier: He1fOw5Cf4EewUbKrykJy5YvOuvE3gcqYbxJ9oSfgJk=
Subject key identifier: F7:77:9C:38:63:27:77:B6:3E:B3:94:61:3F:1B:30:46:CB:E1:C4:2A
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 01A0FC4191CB68DBDC939E0127A36B53D380
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/93ecOGMnd7Y-s5RhPxswRsvhxCo.roa
Signing time: Fri 02 Oct 2026 10:55:50 +0000
ROA not before: Fri 02 Oct 2026 10:55:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34309
IP address blocks: 141.137.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:41:91:cb:68:db:dc:93:9e:01:27:a3:6b:53:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Oct 2 10:55:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7779c38632777b63eb394613f1b3046cbe1c42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:eb:04:a1:cd:9b:d5:3d:02:4b:e2:2b:11:
80:c8:80:6c:89:c3:20:5f:53:b2:5f:e6:42:e6:5c:
20:64:38:3e:d5:ea:46:77:cf:01:33:8e:55:79:d0:
78:6d:72:74:14:3d:42:45:9a:bc:d6:6f:17:99:9f:
bc:be:b9:00:92:d3:0e:a2:0f:c1:84:91:31:a0:ff:
fb:58:d8:d0:a9:fa:7e:00:7f:ff:e8:a7:35:73:50:
a4:bc:1c:2f:50:82:73:d5:50:7c:24:e5:2b:af:f2:
41:cc:7e:7b:69:08:3e:65:2d:ba:80:2f:76:9f:8d:
f0:fa:f8:7b:06:cd:24:69:6a:38:a3:2d:c0:09:22:
01:3a:20:48:e4:e1:81:c9:42:52:b8:db:8d:a6:9a:
5b:81:f6:af:b3:8f:af:3f:14:e9:63:ec:a5:ed:a6:
54:14:a7:21:94:b6:c1:68:67:95:33:b0:13:19:78:
73:62:3e:48:0b:11:04:83:15:8e:7a:da:c4:5e:82:
77:29:95:77:b2:9f:42:0f:86:b1:09:e0:0a:b8:fa:
4f:e8:46:ad:15:c8:1a:8d:f7:59:43:1d:a2:98:ec:
88:8d:4e:29:94:7b:84:4e:95:29:19:9b:7e:82:7d:
75:d2:eb:6b:54:4a:5f:90:d6:32:59:30:c7:43:74:
05:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:77:9C:38:63:27:77:B6:3E:B3:94:61:3F:1B:30:46:CB:E1:C4:2A
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/93ecOGMnd7Y-s5RhPxswRsvhxCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.137.240.0/24
Signature Algorithm: sha256WithRSAEncryption
16:35:0f:ea:5c:09:b3:cd:8c:52:1e:56:7a:20:74:d5:44:97:
7b:71:63:c7:bd:9a:fe:3c:11:3e:81:fc:5b:9c:ee:ac:eb:e8:
e9:30:49:ac:81:d1:50:ad:54:24:ad:bf:20:42:1a:c9:3f:2e:
55:58:58:ea:94:a5:71:db:f1:c5:77:89:b3:00:da:0b:ea:a3:
ca:ff:45:ad:ab:23:6a:a9:f8:39:a4:a3:c6:75:f0:bd:b1:2f:
30:5a:de:15:7f:ec:0d:86:c7:53:68:cc:8e:3a:4c:ed:48:6b:
75:ab:14:e4:17:02:1e:5a:87:da:0b:7e:6f:0b:4b:0d:43:b7:
86:ed:4a:f6:d2:95:02:09:55:2d:cd:69:2c:ac:e4:d1:cf:19:
d7:23:f5:4e:eb:8b:2b:e1:09:61:e0:18:64:1b:5f:d7:93:23:
c2:7e:9e:79:9d:f8:6d:98:d9:e4:2a:7f:b0:7e:97:c3:06:85:
2c:b0:05:5d:16:a9:c0:f4:9f:90:cd:a8:15:aa:fa:1c:0d:85:
fb:7e:35:1c:81:e8:11:af:95:21:63:e5:3a:c5:c4:4d:c1:92:
f3:76:f8:08:8c:bc:ca:37:2f:a3:18:10:9f:93:a0:00:e4:29:
86:b6:9d:dd:48:06:73:42:81:b6:99:01:80:f6:64:0d:a0:23:
a8:3a:ef:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:59:18 2026 by rpki-client