Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/688518-ea7d-4d52-b9a8-f4bfdf008ef3/1/rjbFMgp93df3ZEpOq81g1DR9WHo.roa
File: rjbFMgp93df3ZEpOq81g1DR9WHo.roa (raw, json)
Hash identifier: Y/ODG0I/sX8XXt2fB6uCmeLTLsbm+AK0uHNXhKjtkRw=
Subject key identifier: AE:36:C5:32:0A:7D:DD:D7:F7:64:4A:4E:AB:CD:60:D4:34:7D:58:7A
Certificate issuer: /CN=e23bd79b7022470816afb451caabd8da47e7236d
Certificate serial: 01A108C8A91781BD3AB788D0698C0B6D72B9
Authority key identifier: E2:3B:D7:9B:70:22:47:08:16:AF:B4:51:CA:AB:D8:DA:47:E7:23:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jvXm3AiRwgWr7RRyqvY2kfnI20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/688518-ea7d-4d52-b9a8-f4bfdf008ef3/1/rjbFMgp93df3ZEpOq81g1DR9WHo.roa
Signing time: Sun 04 Oct 2026 21:18:50 +0000
ROA not before: Sun 04 Oct 2026 21:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31027
IP address blocks: 93.157.204.0/24 maxlen: 24
2a0e:8740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/688518-ea7d-4d52-b9a8-f4bfdf008ef3/1/4jvXm3AiRwgWr7RRyqvY2kfnI20.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/688518-ea7d-4d52-b9a8-f4bfdf008ef3/1/4jvXm3AiRwgWr7RRyqvY2kfnI20.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jvXm3AiRwgWr7RRyqvY2kfnI20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:c8:a9:17:81:bd:3a:b7:88:d0:69:8c:0b:6d:72:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23bd79b7022470816afb451caabd8da47e7236d
Validity
Not Before: Oct 4 21:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae36c5320a7dddd7f7644a4eabcd60d4347d587a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6f:53:70:61:97:69:0e:67:ff:dc:0f:87:28:
d0:8e:f0:9e:cc:df:19:db:37:e3:f1:b2:09:9a:be:
8e:a2:67:ff:33:7f:15:d6:a2:14:29:3c:21:98:44:
27:87:fd:32:d3:51:2a:a1:57:1c:a0:72:8b:ff:ff:
4e:1c:0e:1a:e5:bb:f2:b3:ee:24:4c:42:dc:7b:ac:
b0:a5:c7:56:ee:c9:44:4a:76:be:80:ee:88:55:c0:
82:23:e0:20:0f:2d:a7:8a:ec:51:23:dc:ec:5f:71:
57:d2:fb:49:27:0b:f7:39:dc:a8:75:37:d8:08:fc:
b8:19:c3:b2:58:ba:80:da:37:c9:ae:77:38:19:25:
45:65:6a:94:89:98:60:f3:1e:4a:fc:07:37:c8:71:
f9:8f:9c:63:4a:41:0b:fb:10:5c:60:fe:90:77:48:
8c:90:cb:5a:8b:fd:ac:ee:8f:d3:33:9f:ee:26:f6:
81:91:5a:2b:c0:f4:65:f5:53:b3:c7:40:2f:4d:98:
eb:60:5e:a5:e6:83:97:15:a3:68:01:7e:6c:b2:7c:
50:18:74:66:0b:35:89:c2:a7:ad:0d:b6:4e:2b:77:
bf:8a:ad:df:5c:19:f2:6e:00:0c:d0:b6:78:f1:17:
bf:2a:3a:ab:1f:76:9d:f1:52:68:27:29:c4:a4:e5:
80:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:36:C5:32:0A:7D:DD:D7:F7:64:4A:4E:AB:CD:60:D4:34:7D:58:7A
X509v3 Authority Key Identifier:
keyid:E2:3B:D7:9B:70:22:47:08:16:AF:B4:51:CA:AB:D8:DA:47:E7:23:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jvXm3AiRwgWr7RRyqvY2kfnI20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/688518-ea7d-4d52-b9a8-f4bfdf008ef3/1/rjbFMgp93df3ZEpOq81g1DR9WHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/688518-ea7d-4d52-b9a8-f4bfdf008ef3/1/4jvXm3AiRwgWr7RRyqvY2kfnI20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.204.0/24
IPv6:
2a0e:8740::/29
Signature Algorithm: sha256WithRSAEncryption
11:04:76:48:da:a5:1b:c0:e1:40:9f:bb:a7:97:24:b4:44:24:
a0:58:f3:d4:ff:b4:12:56:e6:db:4e:42:50:a5:f4:88:9f:cc:
b8:e2:08:b9:0f:c2:39:86:dc:a9:f4:12:17:9f:a2:46:3c:93:
fc:16:2f:c5:0e:4d:58:04:eb:02:a6:aa:ee:e8:f0:db:e8:b0:
59:62:84:78:11:77:f8:6e:13:dc:b0:d3:6b:18:45:7d:9b:c2:
7c:89:9a:c9:ed:e9:cf:28:f0:a6:93:36:66:68:99:9a:bb:73:
6b:82:f3:10:74:36:a9:7b:7b:6b:b0:39:02:e0:07:3f:04:e3:
37:ac:43:6e:1c:58:34:b3:8b:f3:3a:0f:a4:52:6a:4b:7e:23:
4e:30:2f:5f:5a:c8:c4:71:53:13:9f:56:08:ec:32:b0:5f:61:
89:f7:15:3f:55:71:bc:00:88:27:b1:83:46:ec:89:05:79:ac:
f6:30:1d:c9:62:00:e0:36:8c:9e:c0:d9:03:65:45:11:da:e7:
99:17:57:df:c9:3b:d5:f4:8c:03:0a:0a:b5:01:de:02:73:a9:
f1:c8:be:e3:b1:17:b2:32:03:50:19:1e:37:fc:08:e7:7f:4d:
09:63:fa:bf:88:87:16:2d:ce:18:2a:c8:02:ab:91:c5:e8:19:
4c:3c:e4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:13:33 2026 by rpki-client