Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/sl6RNpdKaUgQk86cZi1xg4X0kuw.roa
File: sl6RNpdKaUgQk86cZi1xg4X0kuw.roa (raw, json)
Hash identifier: lMTJynIie/zFhijKcdAHFnsMwZEarJofXfcOdlV9yEU=
Subject key identifier: B2:5E:91:36:97:4A:69:48:10:93:CE:9C:66:2D:71:83:85:F4:92:EC
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019FB2851C56FCF33DDE66491085B83E149F
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/sl6RNpdKaUgQk86cZi1xg4X0kuw.roa
Signing time: Thu 30 Jul 2026 10:14:55 +0000
ROA not before: Thu 30 Jul 2026 10:14:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211443
IP address blocks: 91.92.41.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:85:1c:56:fc:f3:3d:de:66:49:10:85:b8:3e:14:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jul 30 10:14:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b25e9136974a69481093ce9c662d718385f492ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:98:62:94:19:47:b2:a6:7c:aa:fa:cf:04:ef:
fa:58:2a:b5:4f:4b:79:d1:6b:34:c9:ab:48:04:5b:
7d:08:d9:eb:5d:63:86:9d:d4:72:e6:81:dc:23:6b:
0d:0d:ae:e6:71:e2:c2:bb:5d:f2:28:1e:ca:23:d3:
60:17:ac:f3:f3:9c:d3:83:5f:a0:63:dd:dc:fe:5b:
5c:13:3b:a1:f3:68:c3:9b:4d:2f:3d:20:aa:3d:be:
46:60:94:8d:c3:ec:d6:a9:96:0a:c6:d4:d6:cc:84:
76:bb:61:ff:96:db:e2:b0:35:5f:b9:c5:30:fb:31:
05:70:5b:b9:bc:eb:cb:8f:4c:88:4f:e1:6c:1c:a7:
dd:8f:31:ed:3a:77:d5:74:d8:c5:b1:fd:49:d9:3a:
aa:fb:99:07:a2:c2:42:d7:7c:f4:d9:6c:0e:fe:c8:
be:35:62:a5:5e:87:e8:b6:01:3d:97:c9:8e:61:48:
6f:55:48:15:ae:d3:15:a8:c3:13:12:33:54:70:14:
c7:41:f2:94:19:77:d8:45:a5:38:36:ff:12:2e:91:
a4:c3:f3:fa:9d:cb:c6:16:fe:27:bd:e3:66:1e:7c:
f1:44:9a:72:09:03:21:0d:29:38:00:c6:39:e8:82:
35:81:08:95:18:9f:f1:4a:f2:4b:60:a8:46:a1:33:
a1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5E:91:36:97:4A:69:48:10:93:CE:9C:66:2D:71:83:85:F4:92:EC
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/sl6RNpdKaUgQk86cZi1xg4X0kuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.41.0/24
93.152.210.0/24
93.152.233.0/24
Signature Algorithm: sha256WithRSAEncryption
88:26:6b:58:cd:2c:73:90:74:d5:cd:25:e9:f8:df:77:d6:4f:
c8:85:b5:4d:89:bf:bb:87:85:34:a4:f5:85:c1:76:78:d7:d7:
6b:38:61:15:fd:ff:6f:24:4e:43:50:85:92:63:07:5d:6c:c6:
9b:87:57:2d:06:f2:fa:10:3c:96:a9:f3:79:60:76:21:40:d9:
39:62:aa:88:6e:28:c7:6f:fa:90:84:9c:c5:f4:ad:76:f8:b3:
14:12:0a:b1:e0:8b:17:3b:56:5d:a1:14:b6:2b:97:82:f7:62:
d9:8b:e7:cd:1e:72:35:c2:33:2d:b5:44:c2:75:75:05:3d:ba:
b2:dc:2c:49:76:16:72:8d:2a:44:28:48:b7:1d:69:39:b8:2c:
5a:33:01:4b:99:b4:fb:78:71:13:4a:b8:90:08:5e:dd:85:10:
d3:b0:02:5e:5e:6f:a4:fe:b9:be:2e:e8:b8:87:d4:d7:12:19:
8e:0f:ba:9e:fb:6e:4c:0c:70:48:c7:79:55:d7:27:9d:df:55:
fa:89:a0:9e:57:24:92:c2:63:b4:6f:6f:81:17:5d:91:2b:b3:
3d:d7:ca:6a:1f:85:71:00:d6:f8:7c:de:1a:a7:b3:fe:d9:c7:
73:24:be:d3:46:f4:08:4a:ba:d2:a1:fc:f8:b0:5f:11:b1:15:
a3:66:76:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:36:26 2026 by rpki-client