Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/F2L_Hfx_hQmwLbq8vOEYVv2yiAs.roa
File: F2L_Hfx_hQmwLbq8vOEYVv2yiAs.roa (raw, json)
Hash identifier: ySLQam8h7ySpqE8WnuAZXvnP4B93rpT4xbhbSnxleIE=
Subject key identifier: 17:62:FF:1D:FC:7F:85:09:B0:2D:BA:BC:BC:E1:18:56:FD:B2:88:0B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019CADC532CB1778CA6F1133145CED942092
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/F2L_Hfx_hQmwLbq8vOEYVv2yiAs.roa
Signing time: Mon 02 Mar 2026 08:58:27 +0000
ROA not before: Mon 02 Mar 2026 08:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 93.123.39.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c5:32:cb:17:78:ca:6f:11:33:14:5c:ed:94:20:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 2 08:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1762ff1dfc7f8509b02dbabcbce11856fdb2880b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:35:ef:11:4e:6b:d0:d5:1c:d9:33:37:18:
84:82:4c:78:84:2f:f1:df:8f:34:ff:b3:92:15:a7:
37:ab:47:7f:44:bb:28:c3:d0:5a:42:71:2c:e8:dc:
25:49:5d:7b:53:17:24:e6:f2:fd:5e:67:7c:fd:4a:
27:69:69:15:64:89:ce:4c:a9:f9:e3:da:21:12:89:
09:05:e2:9a:59:a4:cf:b1:b2:90:eb:47:d7:81:cf:
de:bd:be:3b:82:16:05:69:ec:7b:c6:12:59:d9:fd:
12:ed:3e:46:bf:3e:96:96:ea:70:60:aa:c5:33:a6:
1c:f5:c9:ee:53:a7:46:95:1f:66:2a:1e:85:23:a8:
23:c2:d3:09:29:ab:af:17:af:33:b3:71:28:d7:bf:
b9:65:82:f1:81:a6:3d:8d:ab:6e:93:6b:7c:ed:81:
a3:b0:07:85:93:c3:04:42:28:f8:44:2a:87:a1:52:
94:99:80:78:b5:9c:6b:bc:73:72:8f:f6:23:4b:79:
c6:c6:38:4f:dc:82:bc:87:15:2e:60:ad:4b:ef:e3:
be:61:b5:e8:97:0d:ee:6c:92:f3:e8:1d:e5:44:31:
0e:08:ff:95:2f:9d:47:52:20:99:d7:b7:4d:c8:04:
a2:e5:29:c2:7a:c7:ed:d7:76:b8:88:7b:dd:f3:e9:
67:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:62:FF:1D:FC:7F:85:09:B0:2D:BA:BC:BC:E1:18:56:FD:B2:88:0B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/F2L_Hfx_hQmwLbq8vOEYVv2yiAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.39.0/24
141.98.6.0/24
Signature Algorithm: sha256WithRSAEncryption
97:84:fd:98:14:29:a1:4b:f3:3b:4c:78:af:1f:51:23:28:8b:
4e:1a:1c:6e:6c:b1:a4:4f:18:67:3d:6d:23:8f:c6:38:eb:89:
4b:41:08:35:27:13:bd:65:d5:f9:2e:05:f4:b9:35:b0:15:3c:
80:29:8c:7e:61:74:8d:01:31:9e:d2:41:44:f2:83:4a:ba:c9:
ae:8b:82:eb:8d:b0:16:42:df:6f:ab:5e:a1:bd:6e:d9:44:c8:
98:5e:4d:71:00:96:c4:c5:e7:19:a5:13:3e:05:de:a8:b4:a3:
4b:ee:74:9a:5f:0b:d7:81:07:c0:70:5c:e7:71:ea:64:da:0a:
fc:49:ae:e9:09:45:3b:dc:58:0e:b5:a0:2f:f0:f5:6b:62:29:
0f:73:f4:50:1d:72:28:06:36:3e:9b:ce:0a:28:c7:ef:2b:5f:
71:fe:ca:9b:f2:fc:4d:7d:80:b0:c8:ac:af:7e:d6:63:b7:e9:
a7:42:07:ba:1f:ce:02:cb:5e:34:c9:87:bf:af:1c:17:bb:82:
4e:e9:0a:ab:e4:6e:07:91:15:fa:cb:49:58:b2:46:38:0e:cd:
7c:53:b3:f1:9e:1f:71:b1:05:6b:48:59:02:b1:64:24:80:92:
44:02:d3:34:12:31:d7:62:62:9f:f7:5b:3c:84:89:f5:a1:7c:
be:92:a7:22
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZytxTLLF3jKbxEzFFztlCCSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwMzAyMDg1ODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzYyZmYxZGZjN2Y4NTA5YjAyZGJhYmNiY2UxMTg1NmZkYjI4ODBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur017xFOa9DVHNkzNxiEgkx4hC/x
3480/7OSFac3q0d/RLsow9BaQnEs6NwlSV17Uxck5vL9Xmd8/UonaWkVZInOTKn5
49ohEokJBeKaWaTPsbKQ60fXgc/evb47ghYFaex7xhJZ2f0S7T5Gvz6WlupwYKrF
M6Yc9cnuU6dGlR9mKh6FI6gjwtMJKauvF68zs3Eo17+5ZYLxgaY9jatuk2t87YGj
sAeFk8MEQij4RCqHoVKUmYB4tZxrvHNyj/YjS3nGxjhP3IK8hxUuYK1L7+O+YbXo
lw3ubJLz6B3lRDEOCP+VL51HUiCZ17dNyASi5SnCesft13a4iHvd8+lnsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBdi/x38f4UJsC26vLzhGFb9sogLMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRjJMX0hmeF9oUW13TGJxOHZPRVlWdjJ5aUFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXXsnAwQA
jWIGMA0GCSqGSIb3DQEBCwUAA4IBAQCXhP2YFCmhS/M7THivH1EjKItOGhxubLGk
TxhnPW0jj8Y464lLQQg1JxO9ZdX5LgX0uTWwFTyAKYx+YXSNATGe0kFE8oNKusmu
i4LrjbAWQt9vq16hvW7ZRMiYXk1xAJbExecZpRM+Bd6otKNL7nSaXwvXgQfAcFzn
cepk2gr8Sa7pCUU73FgOtaAv8PVrYikPc/RQHXIoBjY+m84KKMfvK19x/sqb8vxN
fYCwyKyvftZjt+mnQge6H84Cy140yYe/rxwXu4JO6Qqr5G4HkRX6y0lYskY4Ds18
U7Pxnh9xsQVrSFkCsWQkgJJEAtM0EjHXYmKf91s8hIn1oXy+kqci
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:51:47 2026 by rpki-client