Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/1ac561-50eb-453d-841a-adcaf164c911/1/JtAvxOcQlkkNhbfS_roCEDIbfJI.roa
File: JtAvxOcQlkkNhbfS_roCEDIbfJI.roa (raw, json)
Hash identifier: R1u9lFOZ0KwxrosFGIgrvxM8Fnf0Kbd8i/fArI49Baw=
Subject key identifier: 26:D0:2F:C4:E7:10:96:49:0D:85:B7:D2:FE:BA:02:10:32:1B:7C:92
Certificate issuer: /CN=b109ab234a7c0fa7dc2b1840e4ef8816c7396b4b
Certificate serial: 01A11B30353CEC3419475CD6BBC2607BF81B
Authority key identifier: B1:09:AB:23:4A:7C:0F:A7:DC:2B:18:40:E4:EF:88:16:C7:39:6B:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQmrI0p8D6fcKxhA5O-IFsc5a0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1ac561-50eb-453d-841a-adcaf164c911/1/JtAvxOcQlkkNhbfS_roCEDIbfJI.roa
Signing time: Thu 08 Oct 2026 11:05:06 +0000
ROA not before: Thu 08 Oct 2026 11:05:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201817
IP address blocks: 93.183.84.0/22 maxlen: 22
176.123.176.0/22 maxlen: 22
185.47.167.0/24 maxlen: 24
194.31.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1ac561-50eb-453d-841a-adcaf164c911/1/sQmrI0p8D6fcKxhA5O-IFsc5a0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1ac561-50eb-453d-841a-adcaf164c911/1/sQmrI0p8D6fcKxhA5O-IFsc5a0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQmrI0p8D6fcKxhA5O-IFsc5a0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:30:35:3c:ec:34:19:47:5c:d6:bb:c2:60:7b:f8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b109ab234a7c0fa7dc2b1840e4ef8816c7396b4b
Validity
Not Before: Oct 8 11:05:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26d02fc4e71096490d85b7d2feba0210321b7c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:ff:50:32:31:3a:f5:4e:a9:a6:75:1e:03:
47:df:c0:f7:85:f7:10:f5:5b:25:7a:83:cd:16:da:
dd:ad:ef:e7:5e:1a:82:3d:c4:12:0f:03:00:50:9a:
7c:67:56:b5:ab:08:aa:d7:16:c1:9f:b0:58:c7:b1:
69:49:b3:8e:0c:30:f9:24:a0:e2:8b:9f:f6:16:21:
0d:de:8e:b1:8c:e8:b1:0c:0b:41:9b:27:49:78:c2:
a0:f5:38:2c:0c:75:ba:4a:5e:07:76:f4:49:0f:48:
d8:c2:c9:90:cb:58:b4:0d:ee:d6:db:9f:4c:67:1b:
01:ce:6b:fc:c9:d4:4f:93:06:b5:84:b6:4c:b2:7d:
8d:ff:97:b2:b4:2a:b3:59:49:94:9a:80:9c:e3:d3:
98:c1:85:dc:9b:40:53:22:1e:c1:2c:20:5a:df:da:
6a:8c:9f:e4:da:b4:36:1e:04:30:57:ac:ec:50:60:
5d:2f:67:29:65:04:9b:26:44:99:91:7e:cf:7a:2c:
d5:5a:25:81:8d:45:d2:da:8f:2b:cc:3b:6d:03:18:
4d:09:44:58:5c:a5:b7:5f:a2:58:3c:19:39:c9:9c:
78:29:83:be:53:be:23:e9:61:35:10:12:c6:f3:90:
78:e2:ac:eb:b1:fa:ab:22:71:a4:4a:3f:e3:f7:ee:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D0:2F:C4:E7:10:96:49:0D:85:B7:D2:FE:BA:02:10:32:1B:7C:92
X509v3 Authority Key Identifier:
keyid:B1:09:AB:23:4A:7C:0F:A7:DC:2B:18:40:E4:EF:88:16:C7:39:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQmrI0p8D6fcKxhA5O-IFsc5a0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1ac561-50eb-453d-841a-adcaf164c911/1/JtAvxOcQlkkNhbfS_roCEDIbfJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1ac561-50eb-453d-841a-adcaf164c911/1/sQmrI0p8D6fcKxhA5O-IFsc5a0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.84.0/22
176.123.176.0/22
185.47.167.0/24
194.31.156.0/22
Signature Algorithm: sha256WithRSAEncryption
17:b8:52:3d:a9:4f:f2:09:f1:ae:aa:b0:5b:5f:e4:d7:e0:d9:
17:59:df:16:61:2c:0e:f3:a9:c6:cc:5b:4d:64:07:f4:8b:5c:
f4:3d:36:e7:dc:47:69:d0:ad:86:b6:36:f0:e8:55:d8:6c:72:
26:aa:d0:46:51:eb:bb:a8:f2:76:e7:1d:83:dc:e6:b7:15:ba:
8a:88:e4:fe:2f:bb:d4:29:be:4b:b6:39:d3:6d:97:f4:aa:1e:
58:f7:ed:d9:10:f4:9d:e3:05:54:e9:61:cf:72:b7:8f:b3:6c:
4e:08:7a:bc:3c:ca:80:ca:63:80:fc:56:f1:27:3a:bb:49:ae:
b3:80:25:13:22:4a:44:4e:8e:8a:45:7d:54:b5:dd:e9:c6:07:
1d:51:f5:bb:a4:ae:b9:8e:ab:ae:8a:4e:55:8f:01:d0:48:0f:
1f:de:e5:3e:47:1a:af:54:89:b3:be:ea:cf:12:af:3b:42:7f:
09:91:56:73:17:2b:c6:7c:5c:32:27:6b:75:79:4c:43:e6:83:
18:b0:a3:6f:d1:27:cc:59:4f:b7:29:de:d7:34:92:b4:8d:88:
9f:a1:75:8e:3c:23:f4:eb:9f:5c:5a:bc:ac:a9:2b:f3:97:c5:
e0:d7:59:24:73:69:82:ea:38:06:2f:1f:f0:0b:39:f1:db:73:
aa:26:fc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:21:48 2026 by rpki-client