Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/g_Ug4huBoLfM8ktxTnuq-TIkip4.roa
File: g_Ug4huBoLfM8ktxTnuq-TIkip4.roa (raw, json)
Hash identifier: 4GGMSynoNDpGFS59e66A7O1wFjSFdNzf1atevetx2MU=
Subject key identifier: 83:F5:20:E2:1B:81:A0:B7:CC:F2:4B:71:4E:7B:AA:F9:32:24:8A:9E
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01A075A40CF44D2ABBA4014C6C3A1C983F1D
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/g_Ug4huBoLfM8ktxTnuq-TIkip4.roa
Signing time: Sun 06 Sep 2026 07:34:40 +0000
ROA not before: Sun 06 Sep 2026 07:34:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 93.127.160.0/24 maxlen: 24
93.127.161.0/24 maxlen: 24
93.127.180.0/24 maxlen: 24
93.127.181.0/24 maxlen: 24
93.127.182.0/24 maxlen: 24
93.127.183.0/24 maxlen: 24
93.127.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:a4:0c:f4:4d:2a:bb:a4:01:4c:6c:3a:1c:98:3f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Sep 6 07:34:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83f520e21b81a0b7ccf24b714e7baaf932248a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:aa:f9:bd:5f:1e:6e:16:e6:cb:9e:88:f3:
5b:10:8b:53:f3:59:50:ca:c3:e8:d9:dc:89:2f:b2:
10:f6:04:fc:0d:ea:28:e5:3e:72:66:49:42:13:51:
d6:55:bb:4e:3c:c5:96:a1:4e:b9:fd:10:70:96:42:
8b:d8:a0:ad:f5:be:9b:58:1a:3c:46:81:e5:3b:77:
6f:e5:69:6a:f0:46:30:1f:51:d6:5f:6a:cb:08:08:
92:d3:6f:38:61:79:a5:e9:67:89:f0:56:60:06:ca:
03:55:ef:33:a6:01:a1:b0:d9:d0:79:8c:92:76:3a:
f1:19:2e:35:56:c3:4f:7c:d0:a8:9b:7c:9a:a1:b3:
d9:ab:2c:65:f5:81:8d:8a:62:08:6f:b7:94:8b:5a:
07:fb:c9:d0:85:45:ae:d8:8e:a2:49:f0:75:5f:39:
67:9b:c1:0a:d9:5f:fe:18:1c:dd:24:a8:32:ca:f8:
7f:aa:35:fc:05:64:09:48:ec:3c:36:ff:66:a5:64:
dc:34:da:5b:e8:0c:88:27:0d:84:21:82:46:4d:98:
1a:49:f9:9c:ae:0e:e9:c7:c7:ff:0f:24:a5:e8:ec:
d3:ab:47:9b:19:db:5a:5c:a6:e2:a5:d5:73:d5:e0:
db:a7:fc:e2:09:46:bf:cd:a1:36:2d:e6:4b:f1:61:
10:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F5:20:E2:1B:81:A0:B7:CC:F2:4B:71:4E:7B:AA:F9:32:24:8A:9E
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/g_Ug4huBoLfM8ktxTnuq-TIkip4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.160.0/23
93.127.180.0-93.127.184.255
Signature Algorithm: sha256WithRSAEncryption
2f:01:97:38:1c:52:99:88:f4:77:81:90:aa:9c:b2:d6:eb:ea:
5d:cc:bb:61:6b:cb:18:e4:cf:15:11:09:54:72:5b:89:16:4e:
b3:95:0f:7e:89:5b:4f:83:42:ec:18:6e:7a:11:cb:c1:d6:2a:
bc:2a:2f:d1:20:d3:dd:88:1f:68:7e:66:16:4d:b9:16:ba:a6:
e4:67:b2:47:0a:06:ea:5a:53:1e:c2:14:04:c4:74:87:83:de:
67:92:00:8d:f9:2b:89:65:ee:d8:ba:42:25:2d:ca:89:24:ea:
8c:47:bf:b0:a3:14:f2:67:9c:51:5d:93:79:e8:8d:6c:e4:ac:
bc:f9:d5:16:1b:8c:7d:b8:5b:cf:79:eb:b5:13:0e:8a:26:72:
d2:11:f5:6e:a9:33:61:4b:d4:88:8a:a0:5e:85:48:45:99:82:
98:27:7a:c7:f9:12:07:6c:80:e3:7b:37:f4:0e:2f:c0:c1:5f:
23:7b:eb:f9:30:ab:d1:ce:8a:d5:29:2c:00:6a:8e:89:fe:15:
8e:d6:c3:8a:4e:6e:e0:b3:72:3c:fb:c9:57:05:6a:d2:dd:59:
78:00:25:0f:39:4f:5a:90:c2:d7:09:e9:43:32:91:f5:6f:e2:
7e:ab:22:e6:e1:99:f2:ff:34:63:8c:8d:b7:92:3b:98:58:be:
aa:41:f3:f3
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaB1pAz0TSq7pAFMbDocmD8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2
ZGRlNmYwHhcNMjYwOTA2MDczNDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2Y1MjBlMjFiODFhMGI3Y2NmMjRiNzE0ZTdiYWFmOTMyMjQ4YTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgGq+b1fHm4W5sueiPNbEItT81lQ
ysPo2dyJL7IQ9gT8Deoo5T5yZklCE1HWVbtOPMWWoU65/RBwlkKL2KCt9b6bWBo8
RoHlO3dv5Wlq8EYwH1HWX2rLCAiS0284YXml6WeJ8FZgBsoDVe8zpgGhsNnQeYyS
djrxGS41VsNPfNCom3yaobPZqyxl9YGNimIIb7eUi1oH+8nQhUWu2I6iSfB1Xzln
m8EK2V/+GBzdJKgyyvh/qjX8BWQJSOw8Nv9mpWTcNNpb6AyIJw2EIYJGTZgaSfmc
rg7px8f/DySl6OzTq0ebGdtaXKbipdVz1eDbp/ziCUa/zaE2LeZL8WEQRQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFIP1IOIbgaC3zPJLcU57qvkyJIqeMB8GA1UdIwQY
MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt
NDQxNDU1OGZkY2JiLzEvZ19VZzRodUJvTGZNOGt0eFRudXEtVElraXA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji
LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBXX+gMAwD
BAJdf7QDBABdf7gwDQYJKoZIhvcNAQELBQADggEBAC8BlzgcUpmI9HeBkKqcstbr
6l3Mu2FryxjkzxURCVRyW4kWTrOVD36JW0+DQuwYbnoRy8HWKrwqL9Eg092IH2h+
ZhZNuRa6puRnskcKBupaUx7CFATEdIeD3meSAI35K4ll7ti6QiUtyokk6oxHv7Cj
FPJnnFFdk3nojWzkrLz51RYbjH24W89567UTDoomctIR9W6pM2FL1IiKoF6FSEWZ
gpgnesf5EgdsgON7N/QOL8DBXyN76/kwq9HOitUpLABqjon+FY7Ww4pObuCzcjz7
yVcFatLdWXgAJQ85T1qQwtcJ6UMykfVv4n6rIubhmfL/NGOMjbeSO5hYvqpB8/M=
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:56:12 2026 by rpki-client