Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/U_aK72jJa-ON6gMyyHq3rWjkxhU.roa
File: U_aK72jJa-ON6gMyyHq3rWjkxhU.roa (raw, json)
Hash identifier: /1YQ5iJbTHBFdQHsTl7LBGFueR1LkqoE0aary4QG3rs=
Subject key identifier: 53:F6:8A:EF:68:C9:6B:E3:8D:EA:03:32:C8:7A:B7:AD:68:E4:C6:15
Certificate issuer: /CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
Certificate serial: 019F92176540352ED959B2B3891ECD67F00B
Authority key identifier: EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/U_aK72jJa-ON6gMyyHq3rWjkxhU.roa
Signing time: Fri 24 Jul 2026 03:07:14 +0000
ROA not before: Fri 24 Jul 2026 03:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 93.191.148.0/23 maxlen: 23
93.191.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:17:65:40:35:2e:d9:59:b2:b3:89:1e:cd:67:f0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
Validity
Not Before: Jul 24 03:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53f68aef68c96be38dea0332c87ab7ad68e4c615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:5d:33:30:76:4c:c3:f4:da:d4:93:24:18:
f5:7f:7f:5e:bb:75:bc:a1:ef:1e:b7:7f:8e:75:e6:
bc:1f:05:ac:33:1d:4d:6a:82:61:f7:08:2b:36:68:
d4:52:d7:88:1e:4a:c3:8c:1f:29:43:5d:6a:f7:78:
2d:da:ff:29:b2:3f:42:0d:18:e9:b4:88:fe:8a:81:
56:6c:72:b3:e9:4c:b7:88:e4:33:e5:73:76:83:cc:
5a:b4:cf:2e:bf:80:f3:4d:fb:e1:7c:62:c8:db:84:
4f:96:19:1f:17:3a:12:ad:86:dc:e1:7d:b2:76:cf:
a5:1d:c9:ef:be:ca:de:15:56:b0:bb:e3:0b:6f:f8:
0b:d8:9c:66:75:61:c1:61:d2:65:8c:bd:3f:57:12:
6c:ef:3c:7c:39:46:81:39:ca:73:a9:48:49:17:4a:
60:81:81:b3:e8:02:ae:c5:f0:23:86:9e:a1:f4:45:
5e:27:05:30:46:7f:13:88:63:56:05:2d:b1:62:f4:
0f:5e:08:b3:a9:de:c8:04:f3:df:91:ef:5b:f7:dd:
4c:fb:fb:9f:01:cb:5c:a5:bf:0e:bd:86:2a:f7:7c:
9f:0e:24:97:ac:c6:a5:0c:27:15:82:28:a0:02:45:
e8:f9:f5:11:2f:f6:cd:3b:e1:09:de:c7:2e:4c:13:
af:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F6:8A:EF:68:C9:6B:E3:8D:EA:03:32:C8:7A:B7:AD:68:E4:C6:15
X509v3 Authority Key Identifier:
keyid:EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/U_aK72jJa-ON6gMyyHq3rWjkxhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.148.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:a5:60:a8:20:d3:01:e4:5b:64:18:22:91:c3:d7:fe:65:30:
fc:9c:b7:e7:90:10:71:30:d7:6e:44:f4:a6:f9:75:72:4e:12:
14:d5:da:30:b5:b6:a9:35:a1:18:d9:ce:30:7e:6b:fc:5a:da:
bf:95:af:63:9c:36:7f:4e:3a:ab:6d:fd:04:8f:01:63:0b:ee:
82:95:0c:64:b3:27:f9:bc:bd:cf:11:bc:4e:aa:f4:21:95:12:
89:1f:df:f0:2e:5d:e4:6e:55:d3:b6:6f:de:5d:94:47:a8:42:
35:12:bb:28:28:c9:c8:71:2f:20:07:ac:b7:5c:c6:43:bb:11:
64:c6:0d:d1:c2:67:0e:f5:17:dc:dd:08:aa:25:73:81:ea:90:
49:bf:56:06:b3:dc:ad:96:83:d7:c3:81:1b:89:d3:9d:2d:cb:
5d:2b:a1:4c:16:63:31:3c:78:60:0e:a7:13:10:08:ff:77:4a:
98:38:ec:fe:93:e2:2e:63:85:47:42:da:4c:1e:00:a3:35:11:
9f:95:bc:c4:3d:6b:fd:b3:0c:b6:97:3d:01:26:f7:ae:f1:f4:
45:ee:25:15:de:92:d7:2e:6b:38:ca:93:93:1a:18:3a:a4:9c:
4a:ff:3c:7b:d8:0e:34:72:99:36:5c:23:99:c9:d7:a6:db:66:
94:cf:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:26:57 2026 by rpki-client