Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ADU9Ot52SGzefQKh2DGEXePNY-0.roa
File: ADU9Ot52SGzefQKh2DGEXePNY-0.roa (raw, json)
Hash identifier: V0wapUiJ26KIs+WS34QY65fxOFjUrNBK87fDA6RrJ2c=
Subject key identifier: 00:35:3D:3A:DE:76:48:6C:DE:7D:02:A1:D8:31:84:5D:E3:CD:63:ED
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A02313FDFEE51C063E2123B330F8D73314
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ADU9Ot52SGzefQKh2DGEXePNY-0.roa
Signing time: Fri 21 Aug 2026 06:48:27 +0000
ROA not before: Fri 21 Aug 2026 06:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 93.88.144.0/21 maxlen: 24
93.88.153.0/24 maxlen: 24
93.88.154.0/24 maxlen: 24
93.88.157.0/24 maxlen: 24
93.88.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 02:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:13:fd:fe:e5:1c:06:3e:21:23:b3:30:f8:d7:33:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Aug 21 06:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00353d3ade76486cde7d02a1d831845de3cd63ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:21:64:80:a8:13:a0:fc:e6:5c:f3:7c:1f:
c2:a4:da:89:82:32:e5:95:ff:4d:10:ba:a3:36:4f:
7e:b7:b2:92:23:b6:75:81:b7:57:8b:03:c7:f5:85:
f5:f9:37:34:cc:31:7c:57:b0:20:ce:9f:ff:47:7c:
b3:71:ad:08:d7:94:81:b6:8e:5c:52:32:b1:28:20:
0b:d8:09:cf:54:d0:98:fd:aa:ee:43:bd:80:23:2e:
45:ae:4b:fc:f5:c1:70:74:ba:33:2c:4d:31:30:88:
75:bf:c9:1a:0f:50:a8:93:22:e1:d0:11:c7:14:65:
c3:90:a5:7f:7f:5e:a5:0b:e1:0a:d9:16:71:5d:e7:
47:4e:94:22:7a:15:1e:4c:3a:f4:51:74:52:cd:ff:
88:fc:25:82:18:a5:04:5c:6f:50:80:a7:d7:ad:77:
d8:5f:bb:ec:4c:15:43:a5:06:c3:b0:c5:66:54:1f:
66:03:47:52:17:0f:d7:7b:dc:13:96:14:81:fa:07:
09:01:38:92:cc:55:67:43:b3:27:84:80:e7:e1:80:
40:9b:d3:a2:ed:05:04:78:5a:df:ab:b8:a5:05:47:
76:e2:c2:00:f1:c1:a5:38:9c:47:4e:1e:f6:b2:d7:
30:6c:1b:6b:65:32:f3:94:fe:a7:63:e2:61:12:d9:
33:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:35:3D:3A:DE:76:48:6C:DE:7D:02:A1:D8:31:84:5D:E3:CD:63:ED
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ADU9Ot52SGzefQKh2DGEXePNY-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.144.0/21
93.88.153.0-93.88.154.255
93.88.157.0-93.88.158.255
Signature Algorithm: sha256WithRSAEncryption
86:37:74:3a:0b:67:d0:d5:90:ab:51:b4:5b:e2:40:b5:28:ca:
67:43:ec:88:e4:98:1c:7b:ca:62:91:32:4a:78:04:ba:9f:c2:
ed:73:3f:1c:c7:e6:11:2b:8e:e9:03:ab:a5:67:46:fd:47:12:
f6:67:35:7a:7c:d0:e3:5e:b5:59:86:36:f4:fc:11:3c:bf:6b:
05:d1:09:ce:aa:0b:bc:67:0c:1f:65:31:a7:16:4b:17:78:39:
28:b2:9e:ee:52:83:77:e2:14:2d:9e:3b:80:b3:d1:2a:76:a5:
6e:60:70:6a:9a:c3:8e:4d:3e:ae:bf:d2:0b:4b:18:f5:fb:cc:
3c:0d:ef:19:ee:13:fe:29:44:dc:14:e4:69:4e:a0:8f:f2:bf:
9f:d3:07:6b:7e:4f:64:4d:e6:c3:f6:d4:37:a9:5e:c5:f5:f3:
cd:5c:9f:26:ed:97:7a:a8:8c:03:3c:25:3e:11:0d:c6:4a:3b:
e5:df:f5:7c:b1:b5:16:6e:99:18:d4:a9:aa:1d:62:33:a0:e9:
88:3d:e4:e1:9d:fe:82:0c:81:1d:6f:b1:46:2a:df:b7:52:51:
b0:c3:62:71:be:ef:b6:1b:27:f2:15:83:cd:86:7f:8f:89:13:
72:5a:73:98:55:19:57:c0:ca:39:b5:87:69:d5:1e:9e:7d:96:
a9:07:f8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:56:45 2026 by rpki-client