Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/tJZr6HzpTZvuaQTWcDkPnA3RBWw.roa
File: tJZr6HzpTZvuaQTWcDkPnA3RBWw.roa (raw, json)
Hash identifier: Qv4GlbTwoHQA8Y7B7E4xOe/5V/IhBMLvR3lxhbFDtsM=
Subject key identifier: B4:96:6B:E8:7C:E9:4D:9B:EE:69:04:D6:70:39:0F:9C:0D:D1:05:6C
Certificate issuer: /CN=6252bfb2d62dbeb768733487487cb604caefc394
Certificate serial: 01A13167F448DE2222DC95545DC189B21EEB
Authority key identifier: 62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/tJZr6HzpTZvuaQTWcDkPnA3RBWw.roa
Signing time: Mon 12 Oct 2026 18:37:38 +0000
ROA not before: Mon 12 Oct 2026 18:37:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 93.186.97.0/24 maxlen: 32
93.186.99.0/24 maxlen: 32
93.186.101.0/24 maxlen: 32
93.186.103.0/24 maxlen: 32
93.186.105.0/24 maxlen: 32
93.186.107.0/24 maxlen: 32
185.140.160.0/24 maxlen: 32
185.140.161.0/24 maxlen: 32
185.140.162.0/24 maxlen: 32
185.140.163.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 18:37:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:67:f4:48:de:22:22:dc:95:54:5d:c1:89:b2:1e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6252bfb2d62dbeb768733487487cb604caefc394
Validity
Not Before: Oct 12 18:37:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4966be87ce94d9bee6904d670390f9c0dd1056c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8f:e8:4a:5e:b2:b9:22:b0:86:df:a6:37:3f:
10:41:1f:e8:c4:8f:2d:c7:26:b2:07:51:ff:4a:e4:
0a:11:8b:35:27:b6:1a:d6:04:00:7f:ab:47:fa:f7:
99:21:36:05:52:ff:0a:d4:d8:33:a0:62:1f:37:63:
61:61:f6:9e:4d:d8:65:18:3b:ef:7f:7f:a0:be:b1:
81:cd:d3:94:b1:c0:20:d9:b0:d3:6a:aa:89:d6:03:
a4:8f:3b:e1:1b:bf:46:00:ed:6f:b6:5e:83:0c:4b:
8d:7d:93:0c:67:b0:b8:0d:e4:9e:13:7d:f2:f5:78:
06:97:20:07:79:e9:2e:fa:fb:52:3e:47:93:f3:34:
6e:92:65:d7:be:80:a2:17:60:7f:75:43:72:a1:ce:
ba:ed:cb:13:f5:a0:00:13:bf:9e:2e:92:f5:6c:da:
8f:98:68:a7:84:18:6a:b7:87:a8:51:07:7e:34:b2:
38:7d:01:8b:78:db:86:4f:c4:fc:6a:b1:7e:cb:e2:
8c:dc:eb:24:81:e4:4f:f6:e9:a0:1d:e3:b9:a2:20:
1e:cf:a1:c6:a8:f5:8b:db:53:7a:a1:66:b0:20:af:
51:f0:84:71:60:62:f6:b8:66:c6:19:7d:cd:d6:d7:
17:02:d0:fa:56:c2:2b:90:f6:f5:7a:d3:dd:05:67:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:96:6B:E8:7C:E9:4D:9B:EE:69:04:D6:70:39:0F:9C:0D:D1:05:6C
X509v3 Authority Key Identifier:
keyid:62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/tJZr6HzpTZvuaQTWcDkPnA3RBWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.97.0/24
93.186.99.0/24
93.186.101.0/24
93.186.103.0/24
93.186.105.0/24
93.186.107.0/24
185.140.160.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:6d:cc:fb:f8:f8:f9:b1:70:f5:6a:5c:e7:7b:25:fa:90:92:
70:af:46:b5:7d:09:79:18:de:4a:21:c2:c0:2e:a8:13:37:dd:
8f:83:54:92:8e:dd:25:86:b7:81:67:7c:74:ab:5e:20:32:9b:
00:1d:54:37:34:b2:9e:0b:9b:f2:55:3c:7c:b2:a6:6d:0b:9c:
2c:fd:e8:2f:38:9e:e2:c1:58:48:32:7d:e4:0f:9b:3b:09:7f:
1d:42:9d:b6:e6:f1:9c:9b:a0:75:57:ba:9f:2e:7c:99:d7:f1:
33:cd:81:69:a7:c3:35:01:ea:d4:82:ea:c7:96:e0:2b:a9:67:
54:68:f8:d0:75:82:c0:48:65:5a:a3:ab:92:8f:61:87:19:7c:
e9:15:d7:9b:2e:32:86:2f:dd:2e:dc:79:82:f6:d8:62:a4:6f:
15:f5:1e:6e:3a:58:1a:5b:57:a7:e8:f6:8d:6e:1b:5d:84:63:
6c:5c:a6:ee:c1:1f:6c:57:10:c9:26:6a:7e:16:01:dd:a8:1a:
85:1a:47:98:5c:b0:32:f8:42:0c:74:8e:d8:71:da:df:44:09:
49:71:4a:ed:27:bf:6e:3a:b5:b3:7f:c5:8c:c9:02:3f:7a:44:
db:f0:39:fe:17:c7:a3:21:0a:87:c1:8a:ca:09:ca:6b:0e:c6:
22:65:93:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:54:17 2026 by rpki-client