Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/9oGj_OTZDt4Ll_vKPrwMI0SluuI.roa
File: 9oGj_OTZDt4Ll_vKPrwMI0SluuI.roa (raw, json)
Hash identifier: hS1b+rTpG8UQvxoJJzInCTvb9ZH6f7lRK1QCbd2J6Rw=
Subject key identifier: F6:81:A3:FC:E4:D9:0E:DE:0B:97:FB:CA:3E:BC:0C:23:44:A5:BA:E2
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01A0241BA94BC2FF170A239CA3353CE5170F
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/9oGj_OTZDt4Ll_vKPrwMI0SluuI.roa
Signing time: Fri 21 Aug 2026 11:36:27 +0000
ROA not before: Fri 21 Aug 2026 11:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58215
IP address blocks: 93.152.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:1b:a9:4b:c2:ff:17:0a:23:9c:a3:35:3c:e5:17:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Aug 21 11:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f681a3fce4d90ede0b97fbca3ebc0c2344a5bae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:62:9f:c5:65:5c:81:ac:21:29:a7:eb:6d:
29:db:4d:bc:13:e9:4e:1d:fc:f8:b9:84:55:97:da:
b9:85:2c:9f:8b:56:d1:64:fa:b6:13:ed:87:67:9f:
32:33:df:a8:19:cc:7d:11:a8:53:d8:84:36:dd:e2:
f4:b1:32:ac:d9:a1:38:8e:d7:da:41:d2:0a:64:03:
67:e3:36:37:69:5f:89:f5:72:d0:20:e6:b8:af:c8:
b6:ff:07:76:27:f2:70:f8:e0:14:09:b4:9a:bc:5b:
fa:8f:84:cb:aa:66:b5:98:ff:21:15:94:e3:40:5a:
11:a5:db:f8:76:15:26:ca:ba:09:76:0b:84:b3:bf:
d4:44:6c:5b:07:52:ee:d8:b7:72:af:08:42:1a:ea:
f1:a2:85:06:f6:31:a5:1a:fe:1d:c1:22:1d:1a:1e:
c0:6d:3e:af:63:4a:a6:dc:60:07:b0:2a:61:0a:20:
d7:1b:83:b6:5f:99:c0:28:ab:20:ae:98:7e:9c:b2:
8f:c1:7d:f5:9f:29:2a:9e:bb:22:85:c3:2d:9e:15:
1c:b0:04:8c:e5:e4:30:62:97:5a:30:6a:9f:be:01:
f1:f4:cc:14:15:1c:3d:e6:af:8c:39:23:c5:d8:99:
7a:df:0e:26:83:2e:07:29:94:b9:6e:6b:24:fa:85:
34:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:81:A3:FC:E4:D9:0E:DE:0B:97:FB:CA:3E:BC:0C:23:44:A5:BA:E2
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/9oGj_OTZDt4Ll_vKPrwMI0SluuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.209.0/24
Signature Algorithm: sha256WithRSAEncryption
15:09:59:aa:e4:aa:55:f7:96:ac:5f:f7:69:8a:05:f9:04:70:
97:7c:14:a0:d6:bf:81:23:10:35:3d:62:4e:1c:88:86:77:e2:
31:fc:be:6f:29:8b:63:e3:2d:de:49:0a:d4:ae:46:b7:97:57:
60:e3:fd:a1:c7:08:44:ee:96:ae:86:d0:5b:7c:18:0b:2a:aa:
6a:8c:b7:03:8f:1a:fd:60:4d:38:54:d2:c0:a9:80:2d:92:cb:
b3:da:32:d8:5f:5f:9e:f9:54:4d:4f:40:88:28:76:e2:d7:78:
f2:fa:74:12:5b:06:53:ce:7a:55:5e:81:7b:07:c5:c8:3d:2f:
9c:10:64:1e:dc:74:88:8f:6b:7e:26:4f:d7:d1:04:0a:ee:35:
2a:c1:5e:22:2b:4e:d7:f9:3c:b0:bd:3f:d6:fd:d3:60:ba:fc:
af:35:ea:29:04:33:04:a6:9a:bb:b5:28:47:de:b4:17:c1:3c:
13:29:1c:d5:ab:60:e7:72:8b:7e:d5:f0:cb:92:d8:34:39:6a:
13:65:78:78:a2:2d:a6:38:1f:ae:1d:cd:c6:af:3c:38:6f:57:
37:27:3f:d8:d6:1c:b6:c4:b9:db:f7:65:54:c3:e2:16:c9:6a:
73:0a:a1:37:23:b4:7b:15:66:17:47:1c:52:b6:29:6e:26:8b:
42:09:6f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:58:03 2026 by rpki-client