Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/h3zKsQimt6KXvyL8UENxz33Ooc8.roa
File: h3zKsQimt6KXvyL8UENxz33Ooc8.roa (raw, json)
Hash identifier: 26ET6F8NvcI1lfHsWzSPwJQUaImDYVfOacgxjjreFzM=
Subject key identifier: 87:7C:CA:B1:08:A6:B7:A2:97:BF:22:FC:50:43:71:CF:7D:CE:A1:CF
Certificate issuer: /CN=82daa65007083ecca59128fd5f031d35032b5749
Certificate serial: 01A140A1AB790F86FD630EB90515DB740634
Authority key identifier: 82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/h3zKsQimt6KXvyL8UENxz33Ooc8.roa
Signing time: Thu 15 Oct 2026 17:34:59 +0000
ROA not before: Thu 15 Oct 2026 17:34:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197858
IP address blocks: 93.191.108.0/22 maxlen: 24
217.26.132.0/22 maxlen: 24
2a03:bb00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:a1:ab:79:0f:86:fd:63:0e:b9:05:15:db:74:06:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82daa65007083ecca59128fd5f031d35032b5749
Validity
Not Before: Oct 15 17:34:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=877ccab108a6b7a297bf22fc504371cf7dcea1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1d:91:a8:79:cb:98:c1:f0:25:d3:b7:57:44:
83:d5:27:72:90:1e:d2:b5:cb:e3:ae:f9:4a:a6:ec:
20:db:b6:98:f6:5b:73:78:d6:62:41:78:5e:14:b6:
cc:ce:da:91:a0:a4:9c:f4:26:8a:04:0a:cf:e5:86:
f5:3c:6d:b3:32:f6:a4:c9:a1:e4:ee:f9:f6:39:b0:
65:19:e4:7a:08:fc:4d:b5:b8:e4:97:4d:d1:40:ae:
af:38:3c:da:f8:90:ed:4f:08:48:d3:ae:f8:52:cb:
6e:64:1f:2c:d3:8f:e0:3c:9c:03:f9:b2:77:af:3e:
c5:45:99:88:58:63:67:01:f8:ef:ac:7d:78:fb:8f:
d2:e9:d2:c5:a8:ad:e6:95:16:ea:e3:f4:f4:df:17:
df:f9:6e:07:82:d7:93:69:89:28:a8:52:a4:a7:1b:
14:af:2b:f7:c0:2a:36:5b:86:b1:f8:d5:b9:aa:05:
9c:d5:63:9a:1e:46:01:a7:10:6e:ca:2e:37:45:af:
37:a7:37:37:fc:8b:aa:ce:41:11:10:dc:3c:56:fe:
fb:1d:d9:5f:e0:02:03:83:95:b8:22:27:7d:12:56:
ea:64:de:5f:18:2c:ee:13:f8:91:a8:5c:80:db:8c:
ef:0c:27:ba:2d:89:db:34:e2:a8:c3:15:d7:82:73:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7C:CA:B1:08:A6:B7:A2:97:BF:22:FC:50:43:71:CF:7D:CE:A1:CF
X509v3 Authority Key Identifier:
keyid:82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/h3zKsQimt6KXvyL8UENxz33Ooc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.108.0/22
217.26.132.0/22
IPv6:
2a03:bb00::/48
Signature Algorithm: sha256WithRSAEncryption
1b:c4:2b:f2:d8:a1:25:8c:69:0c:95:8f:9b:51:ad:b1:77:be:
1f:1e:7f:aa:30:80:1c:2c:2f:e9:ea:c0:12:fa:12:a8:ad:9d:
db:1f:ba:6e:cd:d4:c7:2e:d3:63:07:e9:c7:df:05:a4:0b:7d:
ae:aa:79:16:c0:d1:8a:fb:21:3a:5e:aa:87:8e:fa:ab:0b:d2:
9f:1f:be:28:e9:c3:19:8f:30:11:4b:cd:0a:76:4e:54:75:9d:
f8:20:2e:90:7c:14:7b:ca:4a:9b:78:f7:9b:bc:e5:f2:c4:43:
79:c6:7c:f7:64:eb:97:3d:22:07:0f:c2:be:0c:ea:af:b1:fe:
fa:71:57:8a:59:6c:a1:16:43:16:1b:92:e5:82:db:a3:0d:7e:
9d:6c:f8:80:30:1f:5e:31:c7:5b:bf:f6:f8:62:ca:f6:a1:d7:
5d:12:6c:b1:b3:81:91:a9:16:bd:27:48:a7:1e:06:bf:ed:3c:
5b:5d:88:ce:95:e9:dc:0e:84:f5:48:ef:53:ea:1f:04:27:5e:
f7:1c:00:29:67:32:2a:e8:8a:12:b9:a8:d0:49:04:a4:ac:67:
24:8f:78:a2:0d:1b:25:7b:a1:d3:3a:f5:a0:ba:2e:a2:7f:99:
a6:09:6a:2c:4f:4b:01:55:21:64:e3:ca:ab:98:2d:a4:b7:44:
01:9c:58:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:48:30 2026 by rpki-client