Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/kHpxjIidZmksdse78GnlhgcVTM0.roa
File: kHpxjIidZmksdse78GnlhgcVTM0.roa (raw, json)
Hash identifier: JbEJYcXqEaQIA3AXa1tNCQU0M2OY+fOKNlZeQoINxBc=
Subject key identifier: 90:7A:71:8C:88:9D:66:69:2C:76:C7:BB:F0:69:E5:86:07:15:4C:CD
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019F3678F2837C94A9CBD7B10E526B9B14A8
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/kHpxjIidZmksdse78GnlhgcVTM0.roa
Signing time: Mon 06 Jul 2026 08:08:43 +0000
ROA not before: Mon 06 Jul 2026 08:08:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 93.114.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:78:f2:83:7c:94:a9:cb:d7:b1:0e:52:6b:9b:14:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 6 08:08:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=907a718c889d66692c76c7bbf069e58607154ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6a:81:13:c3:8c:ff:8e:cb:da:ab:29:bf:2e:
44:26:25:6c:81:bb:f1:10:ba:6c:56:75:e5:00:50:
52:cf:fe:2a:7e:25:d1:b6:38:f6:e6:e2:ce:ef:8c:
bc:8c:e3:9d:19:68:f0:37:27:b3:09:1e:f0:6f:49:
08:0c:4b:fd:9c:5a:62:41:82:7b:3b:05:24:f7:b1:
5b:9a:6f:37:8a:38:08:73:3a:54:8f:90:d2:7f:09:
cb:61:16:f2:79:57:e9:c3:fe:6d:74:87:f7:f5:81:
98:4e:d3:c1:2a:3c:f6:f5:9a:1f:f9:26:75:e7:44:
d4:4f:5e:20:14:28:d9:fe:f0:91:71:e9:4c:09:90:
76:72:fa:a7:32:74:f7:91:2d:26:97:62:1d:7b:ad:
7a:0b:6e:e8:96:94:98:ff:ea:93:4b:41:05:f0:4c:
26:12:bf:16:17:a3:d9:56:de:6b:06:d2:2e:a3:09:
1d:bb:7c:68:cf:be:30:7b:c9:cb:11:27:af:5d:8b:
9f:b8:21:04:49:b7:aa:ee:6b:cd:66:dd:a9:68:0b:
ed:dd:d4:0f:b7:22:fd:2c:34:43:1d:ab:8e:44:a8:
b0:b0:f8:29:7a:19:42:82:2e:b3:ea:03:5a:97:17:
54:bd:43:fc:a6:1e:db:e6:6e:44:61:82:6b:2d:42:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7A:71:8C:88:9D:66:69:2C:76:C7:BB:F0:69:E5:86:07:15:4C:CD
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/kHpxjIidZmksdse78GnlhgcVTM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.89.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e7:a8:fb:51:cf:4b:08:ed:a3:bb:21:80:a4:32:2b:8a:09:
f4:7b:1f:93:3a:37:d9:96:a5:0f:43:16:8e:f7:72:64:78:a3:
f7:86:42:50:71:ab:58:bc:71:ef:ab:87:b8:37:f1:46:c3:50:
60:64:64:b0:d2:3b:f6:b3:36:a6:ed:93:3e:88:82:4a:1f:5a:
27:fc:1c:1e:a3:3a:18:c2:d6:05:36:14:9a:9c:89:ac:d9:f5:
93:e1:a1:7b:3a:c8:eb:07:61:a6:e2:6e:bd:f1:93:8e:06:01:
9e:35:c7:bd:83:01:4a:38:6c:87:27:d6:d5:b7:a7:a6:f1:e5:
1f:e8:40:52:c8:f3:a7:e8:63:d4:fc:eb:93:f8:1a:31:26:c9:
0a:9c:51:4d:ba:6f:a2:9f:37:cd:da:7f:72:e0:4a:09:b2:00:
fd:97:dd:f2:d0:8f:0b:91:4d:f0:5c:45:24:94:b5:0b:9d:2e:
56:ff:74:fc:80:84:5c:89:91:e9:2e:3b:e0:67:0f:59:80:d9:
6f:71:66:72:e4:74:33:f4:6e:dc:ba:dc:7c:64:2e:34:e0:a6:
a1:d6:39:fb:15:09:0f:ea:83:f1:0c:0f:00:ad:fe:70:57:64:
22:b0:09:41:b0:7d:dd:cb:49:cb:33:e2:e6:72:82:4d:f0:ae:
e5:aa:65:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ82ePKDfJSpy9exDlJrmxSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYwNzA2MDgwODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDdhNzE4Yzg4OWQ2NjY5MmM3NmM3YmJmMDY5ZTU4NjA3MTU0Y2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mqBE8OM/47L2qspvy5EJiVsgbvx
ELpsVnXlAFBSz/4qfiXRtjj25uLO74y8jOOdGWjwNyezCR7wb0kIDEv9nFpiQYJ7
OwUk97Fbmm83ijgIczpUj5DSfwnLYRbyeVfpw/5tdIf39YGYTtPBKjz29Zof+SZ1
50TUT14gFCjZ/vCRcelMCZB2cvqnMnT3kS0ml2Ide616C27olpSY/+qTS0EF8Ewm
Er8WF6PZVt5rBtIuowkdu3xoz74we8nLESevXYufuCEESbeq7mvNZt2paAvt3dQP
tyL9LDRDHauORKiwsPgpehlCgi6z6gNalxdUvUP8ph7b5m5EYYJrLUI5bwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJB6cYyInWZpLHbHu/Bp5YYHFUzNMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEva0hweGpJaWRabWtzZHNlNzhHbmxoZ2NWVE0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXJZMA0G
CSqGSIb3DQEBCwUAA4IBAQAD56j7Uc9LCO2juyGApDIrign0ex+TOjfZlqUPQxaO
93JkeKP3hkJQcatYvHHvq4e4N/FGw1BgZGSw0jv2szam7ZM+iIJKH1on/BweozoY
wtYFNhSanIms2fWT4aF7OsjrB2Gm4m698ZOOBgGeNce9gwFKOGyHJ9bVt6em8eUf
6EBSyPOn6GPU/OuT+BoxJskKnFFNum+inzfN2n9y4EoJsgD9l93y0I8LkU3wXEUk
lLULnS5W/3T8gIRciZHpLjvgZw9ZgNlvcWZy5HQz9G7cutx8ZC404Kah1jn7FQkP
6oPxDA8Arf5wV2QisAlBsH3dy0nLM+LmcoJN8K7lqmV1
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:49:51 2026 by rpki-client