Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/9KcGuja7ApV2Mr-rhW0hTr9A-As.roa
File: 9KcGuja7ApV2Mr-rhW0hTr9A-As.roa (raw, json)
Hash identifier: C4R39buTOsJZMMwpeVU6OOyn4tTTjvYX6fEIxtq/6dM=
Subject key identifier: F4:A7:06:BA:36:BB:02:95:76:32:BF:AB:85:6D:21:4E:BF:40:F8:0B
Certificate issuer: /CN=6252bfb2d62dbeb768733487487cb604caefc394
Certificate serial: 01A13038EB344ECE692FFFB4A298F77FDDDD
Authority key identifier: 62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/9KcGuja7ApV2Mr-rhW0hTr9A-As.roa
Signing time: Mon 12 Oct 2026 13:06:38 +0000
ROA not before: Mon 12 Oct 2026 13:06:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3223
IP address blocks: 93.186.96.0/24 maxlen: 32
93.186.98.0/24 maxlen: 32
93.186.100.0/24 maxlen: 32
93.186.102.0/24 maxlen: 32
93.186.104.0/24 maxlen: 32
93.186.106.0/24 maxlen: 32
93.186.108.0/24 maxlen: 32
93.186.109.0/24 maxlen: 32
93.186.110.0/24 maxlen: 32
93.186.111.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 18:37:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:38:eb:34:4e:ce:69:2f:ff:b4:a2:98:f7:7f:dd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6252bfb2d62dbeb768733487487cb604caefc394
Validity
Not Before: Oct 12 13:06:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4a706ba36bb02957632bfab856d214ebf40f80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:e7:66:fd:4a:25:ef:27:f4:75:c1:b5:81:
10:03:15:35:83:d2:eb:1b:e7:6c:2f:b9:d7:c5:62:
9b:85:3c:29:94:f5:4d:8b:5d:d0:a8:58:c6:4c:c9:
f4:d3:f2:ef:0c:03:1d:5d:3f:29:a2:53:48:e2:89:
1f:ec:de:ce:b1:c4:61:ab:e0:07:ca:ed:6a:5a:0d:
b8:c4:4d:17:d4:b5:0f:4f:8a:df:78:97:3a:b6:99:
ef:45:f7:24:a6:ae:1c:7d:a8:45:d4:e4:a7:0e:80:
e9:11:6d:bc:70:e6:60:35:3e:c6:08:85:01:9c:4b:
9c:83:d5:35:45:6d:7b:d0:49:2b:a8:f7:9a:87:1b:
f1:17:57:5f:1e:ca:82:1e:ed:9d:65:09:6d:39:fb:
0f:22:08:8c:b0:2c:86:d6:5d:02:a3:57:88:fc:4a:
8b:bb:ea:5f:22:99:c5:60:9c:69:9a:aa:f4:65:76:
06:1a:d0:5b:30:4a:bf:5c:70:e4:07:8b:51:1d:02:
52:44:39:bc:56:06:8c:f5:b0:ef:27:1a:45:f3:db:
de:f2:00:b1:61:30:7b:1e:94:42:f2:4b:71:b4:38:
77:7c:75:14:4c:d6:14:23:31:cf:c4:39:2c:6d:66:
04:80:65:e0:1c:7c:92:f9:5b:25:d5:0c:65:6e:e4:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A7:06:BA:36:BB:02:95:76:32:BF:AB:85:6D:21:4E:BF:40:F8:0B
X509v3 Authority Key Identifier:
keyid:62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/9KcGuja7ApV2Mr-rhW0hTr9A-As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.96.0/24
93.186.98.0/24
93.186.100.0/24
93.186.102.0/24
93.186.104.0/24
93.186.106.0/24
93.186.108.0/22
Signature Algorithm: sha256WithRSAEncryption
38:c7:ef:c2:a0:4c:ff:34:ad:8d:d3:65:bb:86:f8:8f:81:19:
ce:94:f9:63:42:d2:cb:fa:a4:d8:2b:6d:76:84:37:ae:67:72:
90:4b:8b:8c:c9:1c:17:93:e5:fc:4b:55:0b:a1:1d:cc:7f:40:
d4:3d:71:b4:41:ab:52:42:62:ca:4b:38:e5:a9:35:db:e1:5b:
c8:9f:9a:46:9f:e2:06:71:a6:67:f8:ad:6b:c0:b5:24:fc:5d:
26:89:dd:ba:8a:07:58:72:a6:66:aa:7f:e1:52:7f:9b:5c:54:
f2:7f:ed:89:4a:82:a1:d9:71:5d:48:53:31:44:35:1d:07:68:
78:69:01:f2:c1:35:3c:02:66:bd:17:e0:3c:2d:bf:3c:b1:4a:
15:f9:6f:52:ec:b0:f9:9c:22:53:11:be:c0:ed:04:e8:5e:0a:
80:69:c7:fa:e4:d9:ed:75:9c:8a:b4:08:53:30:cc:19:b3:c0:
92:05:db:90:3f:56:bd:77:75:84:63:2a:c0:84:06:12:db:af:
f7:e0:e0:f4:c8:2d:98:51:64:b7:61:3a:25:88:c2:de:ed:70:
6e:90:bf:e9:43:02:6d:15:18:f8:9f:df:39:51:30:0a:b2:a5:
b2:60:be:ae:3e:db:d1:28:f5:b8:3f:65:72:ba:c7:65:80:d8:
3c:8e:15:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:11:56 2026 by rpki-client