Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/OnU0AibDLQ6B06ypwN8Q_kSnGxM.roa
File: OnU0AibDLQ6B06ypwN8Q_kSnGxM.roa (raw, json)
Hash identifier: 9O4bQCDBCxWvbsEELBzqFZg4ItxhvISpmTn66650pBs=
Subject key identifier: 3A:75:34:02:26:C3:2D:0E:81:D3:AC:A9:C0:DF:10:FE:44:A7:1B:13
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019FCC1D8B9307BBAD6801C86B85C314C3DE
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/OnU0AibDLQ6B06ypwN8Q_kSnGxM.roa
Signing time: Tue 04 Aug 2026 09:31:55 +0000
ROA not before: Tue 04 Aug 2026 09:31:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197256
IP address blocks: 93.119.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:1d:8b:93:07:bb:ad:68:01:c8:6b:85:c3:14:c3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 4 09:31:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a75340226c32d0e81d3aca9c0df10fe44a71b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4c:e0:f7:22:e0:d4:06:f2:9b:c1:2f:2d:93:
53:9a:29:25:16:11:48:d4:35:74:42:8c:99:26:84:
8e:2c:6b:83:de:0d:37:18:69:9f:1f:d5:09:11:13:
76:11:06:e9:8c:84:c0:96:e7:c8:9f:78:73:c9:c9:
db:70:0e:07:3c:5e:b5:58:4d:ba:15:75:9a:79:ac:
56:f2:97:2e:60:7c:75:8e:1b:a3:08:38:a5:c6:f2:
f8:7e:f9:04:25:9a:3d:59:51:5b:26:5c:7b:d8:41:
63:00:ca:00:ab:c8:44:70:50:63:aa:dc:70:d4:ad:
f7:f7:4e:92:68:30:a4:74:50:6e:68:05:33:e8:f7:
c6:1a:03:59:ef:4f:46:b9:7c:3a:af:fe:2a:0a:fd:
94:93:5f:bb:fc:d2:f1:2f:b5:db:bc:f0:0b:51:e4:
1e:e5:38:1c:55:20:a2:28:51:37:e2:84:60:64:75:
97:b8:f3:cf:0c:72:83:08:f1:a0:3d:8d:2c:ea:ce:
6a:5f:82:6d:1e:df:80:63:77:c0:47:dd:a9:2f:c1:
ba:93:09:ea:3f:52:12:57:8d:d3:38:89:1d:b6:a9:
d3:68:35:b3:1e:e6:42:0d:72:ad:e0:22:9b:4a:7e:
c5:7f:fa:4b:45:48:76:31:55:9d:52:f5:8e:7e:19:
53:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:75:34:02:26:C3:2D:0E:81:D3:AC:A9:C0:DF:10:FE:44:A7:1B:13
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/OnU0AibDLQ6B06ypwN8Q_kSnGxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d0:bd:4f:0f:f1:26:6d:04:16:d2:b9:8d:36:46:be:e7:16:
a8:db:e0:96:39:77:bf:c2:fa:07:bf:8e:b7:25:21:10:16:52:
34:fe:eb:c5:02:08:ee:ce:da:fc:c2:5c:75:a0:a8:6d:5c:2e:
f2:77:aa:b9:8e:91:40:71:ad:f9:a8:ff:a6:ae:b8:f7:6c:b8:
c6:09:c9:9a:ca:67:f3:46:18:70:b8:55:ba:25:b9:14:e9:de:
55:12:44:9a:58:c2:b5:bf:37:f6:66:0c:0a:d7:58:bb:24:db:
d8:d7:80:29:9b:7e:10:14:93:74:f8:3d:04:e7:dc:b2:fb:45:
fb:2f:e6:2a:a3:5d:cd:63:0f:73:80:6b:f3:ae:b5:0d:73:73:
a5:50:7a:dc:de:59:8e:87:04:11:99:8f:15:b4:86:f7:b7:ed:
05:9d:36:8d:23:29:dd:f7:3d:39:40:cd:f6:37:92:17:1e:0c:
2f:3f:00:43:ec:93:63:32:15:71:af:76:94:83:38:9a:77:9c:
44:76:11:9d:ec:dd:7b:8b:5c:f0:95:26:68:5e:be:d5:2c:7c:
ef:11:0a:a0:e2:5f:13:0f:ad:1a:a9:5f:07:39:06:07:92:23:
aa:7f:d6:50:81:dd:80:b5:51:b1:43:de:24:fa:cc:3f:62:b7:
37:13:4a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:37 2026 by rpki-client