Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/X6w9majvI_DCoEpE7YSlgjrwWBk.roa
File: X6w9majvI_DCoEpE7YSlgjrwWBk.roa (raw, json)
Hash identifier: nSq/rO7rO1FgXnozv7cLPZZonavuQIUu1J8PyL3NQ+k=
Subject key identifier: 5F:AC:3D:99:A8:EF:23:F0:C2:A0:4A:44:ED:84:A5:82:3A:F0:58:19
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01A09FCD01468D6123B57B008CD6FD9FF620
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/X6w9majvI_DCoEpE7YSlgjrwWBk.roa
Signing time: Mon 14 Sep 2026 12:03:27 +0000
ROA not before: Mon 14 Sep 2026 12:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 93.152.206.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:cd:01:46:8d:61:23:b5:7b:00:8c:d6:fd:9f:f6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Sep 14 12:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fac3d99a8ef23f0c2a04a44ed84a5823af05819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:28:bf:29:08:b0:1b:a6:37:c9:c3:9e:2d:
9d:be:1a:0c:65:17:07:0c:92:a6:15:0a:1a:d3:cf:
a1:69:dc:c9:2c:e2:5f:9f:08:c8:33:79:f8:01:2e:
26:d2:95:af:a5:f3:f2:a1:86:c9:da:80:56:16:dc:
f9:45:9b:fa:db:8c:47:8a:18:12:fa:c3:d3:af:a6:
54:b7:f3:9d:fd:ae:e7:91:f3:e4:b8:39:5f:6f:6b:
6b:53:0b:cf:ca:03:33:65:de:03:4e:46:ac:5a:1c:
4a:e0:3f:81:31:81:90:91:df:da:b8:e9:9b:46:69:
f6:09:c6:13:fd:4f:8b:b6:a8:25:69:5e:c2:83:83:
5e:9f:be:c4:b7:c6:ff:14:4d:e2:25:c9:99:d1:ea:
87:3b:ab:a6:94:e1:86:ce:7e:bb:4d:ae:43:f4:ec:
49:d0:7a:16:e0:7e:b1:1a:ed:ea:5d:b5:b3:a1:52:
9e:b0:83:88:8e:06:b8:81:e6:39:27:1c:d7:11:85:
e0:f8:ee:9f:b7:ac:c4:38:c3:df:e4:12:3e:ea:92:
1d:d7:25:b7:f0:c7:3d:2d:ab:8c:d0:e5:ab:5f:63:
a6:aa:de:af:bd:26:07:31:24:07:2c:b4:86:01:b0:
ff:b6:44:aa:d3:f6:b1:14:45:ac:83:2f:ac:69:21:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AC:3D:99:A8:EF:23:F0:C2:A0:4A:44:ED:84:A5:82:3A:F0:58:19
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/X6w9majvI_DCoEpE7YSlgjrwWBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.206.0/24
93.152.211.0/24
93.152.215.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:76:39:07:e9:0a:83:0d:2c:25:92:48:81:be:b1:c6:88:78:
c0:34:f0:dc:ab:e7:2f:e2:9c:5a:56:d0:2a:5b:0b:b6:d8:21:
cf:84:f5:02:d6:75:a7:06:d8:96:e6:06:23:bc:20:68:53:0f:
60:9c:0f:6e:42:13:23:20:cc:46:a6:7f:6b:53:ad:8e:76:6d:
3e:49:e0:f4:db:43:9b:ba:8c:7e:ba:a3:10:dd:7a:a0:19:4e:
4e:52:05:75:32:40:60:b0:73:3e:4e:53:08:83:26:e3:d6:b5:
9a:f3:0c:87:23:f8:df:fd:49:44:a8:82:fe:aa:42:83:67:ac:
84:94:36:eb:65:fa:be:7e:18:e8:f4:a0:8e:01:15:2d:08:94:
06:b7:9a:eb:38:65:40:18:35:c7:15:8a:68:72:18:e4:45:85:
d9:2c:53:6f:0a:88:8b:d8:98:9a:dd:be:34:08:da:d7:87:aa:
61:c4:e3:d2:af:7e:f4:26:e2:54:2c:cf:0b:20:8d:83:25:53:
6e:8e:dd:ec:a5:e0:fd:c6:93:43:3c:9a:70:15:f8:69:84:45:
ae:53:51:8e:3a:34:77:9b:d7:b5:d7:e4:88:4e:50:86:c3:b0:
dc:0d:63:bf:58:70:d2:bf:e9:7a:da:3d:b7:dc:dd:06:b3:dc:
5f:a4:12:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:06:21 2026 by rpki-client