Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/mUnV3dYN_qeWwC8rqMT4riEQibQ.roa
File: mUnV3dYN_qeWwC8rqMT4riEQibQ.roa (raw, json)
Hash identifier: 75xxrtZ9E9pazY/FnBGbJQiK0CExU3XWygpO2I3T0rM=
Subject key identifier: 99:49:D5:DD:D6:0D:FE:A7:96:C0:2F:2B:A8:C4:F8:AE:21:10:89:B4
Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial: 01A0EB119A6873474D02D75D4346B84D19FF
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/mUnV3dYN_qeWwC8rqMT4riEQibQ.roa
Signing time: Tue 29 Sep 2026 02:49:54 +0000
ROA not before: Tue 29 Sep 2026 02:49:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60503
IP address blocks: 93.158.236.0/22 maxlen: 22
93.158.236.0/24 maxlen: 24
93.158.237.0/24 maxlen: 24
93.158.238.0/24 maxlen: 24
93.158.239.0/24 maxlen: 24
185.30.164.0/22 maxlen: 22
185.30.164.0/24 maxlen: 24
185.30.165.0/24 maxlen: 24
185.30.166.0/24 maxlen: 24
185.30.167.0/24 maxlen: 24
216.194.76.0/24 maxlen: 24
216.194.77.0/24 maxlen: 24
216.194.78.0/24 maxlen: 24
216.194.79.0/24 maxlen: 24
2a00:aee0::/32 maxlen: 32
2a00:aee1::/32 maxlen: 32
2a00:aee2::/32 maxlen: 32
2a00:aee3::/32 maxlen: 32
2a00:aee4::/32 maxlen: 32
2a00:aee5::/32 maxlen: 32
2a00:aee6::/32 maxlen: 32
2a00:aee7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:11:9a:68:73:47:4d:02:d7:5d:43:46:b8:4d:19:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Validity
Not Before: Sep 29 02:49:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9949d5ddd60dfea796c02f2ba8c4f8ae211089b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:4d:2f:e8:6e:4c:86:99:86:a2:89:8c:27:
56:dd:11:30:ea:53:6c:98:f2:fb:0e:59:77:29:88:
be:60:0d:9c:0a:6e:25:ab:85:36:e6:13:de:bb:33:
1d:ff:e1:2c:1d:36:dc:6f:8e:23:33:27:25:2d:60:
5e:28:b2:0f:4f:8f:31:42:de:51:d7:ba:e1:5e:78:
10:c6:52:d7:20:d3:54:13:24:5e:b6:0b:20:a9:64:
ce:c7:f4:0e:25:90:d6:8a:a1:a4:2d:04:1c:0c:cc:
e0:7d:18:16:a5:97:83:e0:0b:1f:26:0e:29:98:42:
ff:1f:df:5a:48:a5:df:a7:73:32:6e:62:ad:17:37:
0e:f8:58:e6:cd:d5:83:f4:40:d6:66:8b:66:c6:65:
9b:5d:b3:26:de:5a:13:d0:1e:99:fa:71:0b:21:93:
ae:be:b0:b6:03:9e:3d:21:c6:62:4f:9d:96:8f:a7:
58:76:0b:4b:5d:e5:f0:ea:08:6c:18:e1:e1:de:1a:
87:b3:58:eb:57:54:6f:53:dd:2c:24:36:40:32:d5:
b9:0c:cb:d3:9f:f3:b9:64:40:ee:c7:21:ea:66:48:
d5:72:63:44:25:4b:cc:38:83:a4:5e:87:10:1a:55:
d7:5c:a6:b0:d8:95:49:b9:1d:86:c8:54:5d:59:4e:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:49:D5:DD:D6:0D:FE:A7:96:C0:2F:2B:A8:C4:F8:AE:21:10:89:B4
X509v3 Authority Key Identifier:
keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/mUnV3dYN_qeWwC8rqMT4riEQibQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.158.236.0/22
185.30.164.0/22
216.194.76.0/22
IPv6:
2a00:aee0::/29
Signature Algorithm: sha256WithRSAEncryption
07:d4:56:be:a9:73:6b:ac:83:f7:59:1f:e4:62:cf:0c:b3:24:
3d:0c:6a:ef:ff:c0:5b:81:03:49:38:34:0c:a9:80:97:30:4f:
1d:84:bd:8f:8c:15:64:27:6e:65:be:2f:37:8d:c2:cd:f9:2d:
eb:bc:32:41:2a:8b:30:75:73:2b:9f:1c:30:4a:50:3f:99:c2:
38:00:6b:ed:40:b7:e6:14:ed:e8:f6:43:18:54:30:c3:d0:bc:
fb:cd:d4:91:f3:4c:9c:d6:50:5c:9d:7d:c6:5f:10:30:7f:0e:
32:44:73:a5:12:da:b2:25:3e:ce:81:ae:cc:4c:9e:66:ec:b9:
b5:4d:c6:8a:7c:5f:c7:36:f0:a6:d6:ca:1b:e5:01:a8:32:54:
5b:92:52:2d:dd:08:ba:34:f0:8b:35:c1:16:7f:2c:d9:94:71:
a3:e4:13:64:26:1e:59:1e:5e:a0:38:04:36:17:8f:56:7e:e3:
30:40:3c:dd:78:38:70:8a:9d:50:92:29:d6:16:16:87:d7:1e:
a6:9a:d5:c1:e5:07:8d:1b:55:e0:be:0c:fc:4d:84:b7:81:5b:
cd:ed:b2:b4:7b:44:43:81:cd:c0:51:2f:73:5e:3a:04:ef:80:
8e:9a:15:3d:e1:16:11:07:f7:c3:5e:00:2f:72:6e:f3:d2:70:
6c:3a:1c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:40:46 2026 by rpki-client