Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sT15nY3klXlhc8wbejBNx5pT34E.roa
File: sT15nY3klXlhc8wbejBNx5pT34E.roa (raw, json)
Hash identifier: c2XdOrFipBj5OCSicdpcA5aHIKTyhkN0kN9oJwmhNho=
Subject key identifier: B1:3D:79:9D:8D:E4:95:79:61:73:CC:1B:7A:30:4D:C7:9A:53:DF:81
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A172AB39A85CD77DB90223FB65ADBF7C41
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sT15nY3klXlhc8wbejBNx5pT34E.roa
Signing time: Sun 25 Oct 2026 10:46:26 +0000
ROA not before: Sun 25 Oct 2026 10:46:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24940
IP address blocks: 85.93.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:38:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:ab:39:a8:5c:d7:7d:b9:02:23:fb:65:ad:bf:7c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 25 10:46:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b13d799d8de495796173cc1b7a304dc79a53df81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:c4:2c:ac:d7:f6:9f:cd:f7:8d:1d:c1:02:
3d:fb:88:7b:ac:5f:7b:b7:52:f2:71:70:bc:b4:f6:
25:8b:57:ee:2f:cc:b3:39:f8:5c:43:10:2e:24:fc:
74:57:88:b1:db:d7:50:27:7e:7e:98:76:b2:30:5d:
e1:a8:64:d7:43:dc:f7:33:31:3c:d4:a8:08:64:f6:
b3:37:1d:21:bd:36:72:0f:b9:32:8c:56:57:f0:e2:
04:7e:2d:67:28:39:43:54:ca:c4:d9:5a:3d:83:28:
18:f0:50:e8:36:7e:cb:c7:e8:a6:1b:18:d5:bb:7d:
15:fd:e1:14:d5:1c:36:dd:36:dc:10:c0:e5:ce:64:
eb:22:05:5a:93:2e:0d:a3:64:9e:4a:ad:6b:1a:90:
7e:08:e8:41:09:8f:c1:2d:9f:1f:e0:be:38:c5:48:
bf:97:d4:f3:e5:00:7e:cd:50:e3:12:ce:c3:be:7e:
7a:46:4f:5b:c2:3a:ab:61:33:ae:f3:63:63:92:91:
a1:85:0e:18:f6:c1:73:1f:0a:7c:25:40:9d:89:b0:
62:84:77:c1:9f:49:9a:77:3a:16:52:c3:a1:1b:d1:
ca:13:34:88:22:59:40:88:1c:7e:df:3c:ce:6e:79:
85:9b:49:da:5a:c5:e5:03:ce:97:c4:d0:d0:39:84:
8b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3D:79:9D:8D:E4:95:79:61:73:CC:1B:7A:30:4D:C7:9A:53:DF:81
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sT15nY3klXlhc8wbejBNx5pT34E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.20.0/24
Signature Algorithm: sha256WithRSAEncryption
99:82:49:a0:67:3e:25:4b:0c:60:5c:7f:15:c3:82:e5:fe:aa:
c0:d6:40:87:bf:77:11:0c:2b:fd:3e:03:49:ee:8d:f4:ed:5c:
6a:55:f3:de:35:6d:03:8b:bc:7d:5f:93:3d:9b:56:89:63:bb:
ec:06:4a:5f:e5:65:65:c5:0c:0b:90:d4:ae:6b:a2:26:16:07:
37:88:62:24:33:f0:a4:1a:74:d9:db:04:13:ae:2a:89:4e:9f:
85:1f:a9:63:fe:e1:4c:fb:af:77:a9:f4:68:42:a0:79:d5:ee:
37:bc:dd:09:48:e9:a7:8e:1d:bf:83:6e:e4:40:ba:ee:6b:0c:
f6:6b:87:f3:0d:eb:55:fa:45:22:69:eb:30:13:0b:19:77:d9:
32:46:4d:c2:ea:2e:78:d7:67:f3:32:a6:e2:1f:2d:2c:47:f7:
91:93:69:1e:eb:95:e9:42:3a:98:cd:b0:7a:88:ff:f6:55:ab:
51:1d:d4:f4:92:e8:19:7c:1e:9d:ef:e4:20:e4:4a:c7:89:2f:
4e:15:9c:6c:b9:9f:07:f9:32:d8:50:25:85:59:82:51:94:09:
72:0e:fb:15:a7:e4:30:31:aa:e6:d4:f6:d5:ee:2f:e0:59:32:
36:68:37:34:70:ea:ac:84:ee:a1:54:72:c7:42:88:e3:41:11:
d3:7d:a9:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFyqzmoXNd9uQIj+2Wtv3xBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMDI1MTA0NjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTNkNzk5ZDhkZTQ5NTc5NjE3M2NjMWI3YTMwNGRjNzlhNTNkZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ/ELKzX9p/N940dwQI9+4h7rF97
t1LycXC8tPYli1fuL8yzOfhcQxAuJPx0V4ix29dQJ35+mHayMF3hqGTXQ9z3MzE8
1KgIZPazNx0hvTZyD7kyjFZX8OIEfi1nKDlDVMrE2Vo9gygY8FDoNn7Lx+imGxjV
u30V/eEU1Rw23TbcEMDlzmTrIgVaky4No2SeSq1rGpB+COhBCY/BLZ8f4L44xUi/
l9Tz5QB+zVDjEs7Dvn56Rk9bwjqrYTOu82NjkpGhhQ4Y9sFzHwp8JUCdibBihHfB
n0madzoWUsOhG9HKEzSIIllAiBx+3zzObnmFm0naWsXlA86XxNDQOYSLnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLE9eZ2N5JV5YXPMG3owTceaU9+BMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvc1QxNW5ZM2tsWGxoYzh3YmVqQk54NXBUMzRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVV0UMA0G
CSqGSIb3DQEBCwUAA4IBAQCZgkmgZz4lSwxgXH8Vw4Ll/qrA1kCHv3cRDCv9PgNJ
7o307VxqVfPeNW0Di7x9X5M9m1aJY7vsBkpf5WVlxQwLkNSua6ImFgc3iGIkM/Ck
GnTZ2wQTriqJTp+FH6lj/uFM+693qfRoQqB51e43vN0JSOmnjh2/g27kQLruawz2
a4fzDetV+kUiaeswEwsZd9kyRk3C6i5412fzMqbiHy0sR/eRk2ke65XpQjqYzbB6
iP/2VatRHdT0kugZfB6d7+Qg5ErHiS9OFZxsuZ8H+TLYUCWFWYJRlAlyDvsVp+Qw
Marm1PbV7i/gWTI2aDc0cOqshO6hVHLHQojjQRHTfana
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:28:49 2026 by rpki-client