Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/vRS2jZFjxoSx-tm8vDYCL3R4utg.roa
File: vRS2jZFjxoSx-tm8vDYCL3R4utg.roa (raw, json)
Hash identifier: Pn3uKydeyTx0VUXK/a6rHQd1kChS2y8vCNb98B0FpoQ=
Subject key identifier: BD:14:B6:8D:91:63:C6:84:B1:FA:D9:BC:BC:36:02:2F:74:78:BA:D8
Certificate issuer: /CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
Certificate serial: 019FAAFC60691F5E071F9929D2BC563256EC
Authority key identifier: EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/vRS2jZFjxoSx-tm8vDYCL3R4utg.roa
Signing time: Tue 28 Jul 2026 23:08:14 +0000
ROA not before: Tue 28 Jul 2026 23:08:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19137
IP address blocks: 93.191.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:fc:60:69:1f:5e:07:1f:99:29:d2:bc:56:32:56:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
Validity
Not Before: Jul 28 23:08:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd14b68d9163c684b1fad9bcbc36022f7478bad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:45:6a:12:9f:9f:55:5d:83:d6:c4:89:31:3f:
b9:f4:16:f5:85:fa:8a:b7:1c:57:1b:8d:d9:b0:72:
34:68:76:2f:7d:8e:32:1d:84:2d:8e:96:1d:b5:e1:
f2:35:b8:54:d8:8f:e1:2f:12:39:5d:e5:8f:90:e3:
2b:67:14:0a:03:c2:09:93:59:f8:48:b0:be:40:07:
81:1a:cf:35:ba:eb:e6:cf:f4:29:a9:1e:8a:02:51:
9c:ee:a7:d3:31:4e:ca:d5:9e:26:fa:61:f8:46:3c:
10:e8:75:31:d3:6c:91:57:93:a6:37:62:d0:7c:df:
61:c2:1e:38:c4:03:a5:66:ef:f7:c4:8b:e4:af:d0:
99:1d:46:e7:6a:37:1d:19:2e:a9:85:14:8d:c6:92:
e9:5c:d8:33:91:9f:ec:cc:9a:f5:0a:7a:25:eb:b6:
fc:da:64:93:78:33:23:ed:af:0a:44:9d:72:57:90:
2d:d5:a0:a6:7a:e1:22:c6:ec:f8:c5:f7:54:53:70:
2d:73:a2:24:5e:d3:29:06:83:19:63:ec:f3:a4:a6:
f5:8a:27:10:17:ee:57:11:9f:08:dd:09:b1:1a:6d:
e8:60:76:4a:96:a1:83:7a:5b:7b:df:c6:60:18:ef:
23:df:91:19:f5:39:6d:10:13:cc:d6:e4:14:34:b4:
cc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:14:B6:8D:91:63:C6:84:B1:FA:D9:BC:BC:36:02:2F:74:78:BA:D8
X509v3 Authority Key Identifier:
keyid:EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/vRS2jZFjxoSx-tm8vDYCL3R4utg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.148.0/24
Signature Algorithm: sha256WithRSAEncryption
42:25:c4:06:de:ea:20:79:fa:34:26:43:57:88:0a:38:57:a8:
ea:cb:71:ce:10:da:1d:6f:c6:d7:75:33:e5:1b:06:d0:94:eb:
39:35:76:30:7c:79:6a:30:d0:f0:2e:53:c5:10:d7:6d:34:ef:
e2:c2:c4:03:fd:bc:a8:87:16:c9:05:be:f0:37:8f:0a:8c:46:
6b:c6:8a:73:7f:2e:51:e7:ec:36:e5:94:d1:38:99:33:e2:83:
fc:4a:21:ca:72:a5:53:d3:6e:6a:01:b1:31:d0:db:2e:f8:a1:
a2:61:8b:5f:0f:2b:a3:95:24:94:71:32:e9:cf:11:d0:5a:00:
31:9a:d5:21:14:18:85:7b:70:7f:18:aa:4a:45:6c:73:df:28:
75:64:e2:31:4d:a1:21:3b:49:f0:48:f4:eb:f2:40:6d:a8:70:
b1:b3:b7:eb:2d:62:b8:4f:e1:ad:ca:ff:83:a6:75:42:65:c6:
7f:47:d4:0a:59:cb:32:fd:de:b0:bd:77:43:5f:c6:02:c6:55:
52:31:dd:32:5e:79:3d:3a:1b:2e:b1:48:dc:1e:e7:9b:5d:dc:
cf:07:dc:c6:1a:c9:a2:ee:89:3f:8f:ad:0c:97:22:49:4f:46:
5d:bd:eb:68:db:ca:87:38:8a:2f:d1:b3:be:54:91:4c:f2:ad:
f6:e3:9c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:23 2026 by rpki-client