Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/NRr2UI5e4wiswqTD1lGv01pJ4xk.roa
File: NRr2UI5e4wiswqTD1lGv01pJ4xk.roa (raw, json)
Hash identifier: 4mb2TEhQ6KvVYtVWs2U8Cn19nMjJqwA+tVusB1WoNvw=
Subject key identifier: 35:1A:F6:50:8E:5E:E3:08:AC:C2:A4:C3:D6:51:AF:D3:5A:49:E3:19
Certificate issuer: /CN=099faab2161118db1b77c1a74ecccb73e7681c36
Certificate serial: 01A08648B64966D86383262762B765073E9C
Authority key identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/NRr2UI5e4wiswqTD1lGv01pJ4xk.roa
Signing time: Wed 09 Sep 2026 13:08:27 +0000
ROA not before: Wed 09 Sep 2026 13:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20860
IP address blocks: 93.174.10.0/24 maxlen: 24
93.174.11.0/24 maxlen: 24
93.174.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:48:b6:49:66:d8:63:83:26:27:62:b7:65:07:3e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099faab2161118db1b77c1a74ecccb73e7681c36
Validity
Not Before: Sep 9 13:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=351af6508e5ee308acc2a4c3d651afd35a49e319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:fb:9c:50:43:ee:f5:67:9c:53:33:81:15:
fd:f2:bf:a6:32:59:f3:33:ce:de:dc:01:e1:e8:ff:
5c:31:76:1d:15:ca:38:1a:a5:60:f6:6c:88:89:55:
9a:55:37:0a:80:cf:79:89:de:b7:76:fc:a1:e5:65:
9c:56:1a:30:7c:b4:94:f1:97:7a:d1:83:da:d5:83:
3b:ea:97:ca:b4:3b:b9:a3:21:f9:61:00:0e:35:5c:
76:8e:40:d6:b5:4a:77:d1:58:ee:d6:1e:8e:11:00:
86:a7:34:a7:33:83:e2:55:84:07:90:31:a6:69:63:
a8:d6:eb:f4:58:9c:9c:b8:3a:2d:36:c0:3a:b6:49:
ac:46:1d:31:72:cd:ab:52:99:b3:ec:61:86:41:15:
10:4b:7f:39:82:3c:5a:fc:19:41:f3:3b:10:99:cd:
f3:5f:1f:a6:6e:eb:18:25:73:6c:ec:b6:67:84:8a:
56:5e:7a:bd:d9:80:a7:d5:bc:ff:d6:3c:c7:ae:6f:
12:45:59:16:97:dc:40:83:07:2b:cb:7f:3c:89:a4:
01:1e:1c:72:63:45:f6:88:81:b4:29:f4:f4:0f:70:
f0:a7:c7:88:42:7f:32:8b:ad:78:33:72:f8:f1:b0:
c8:be:b9:19:9b:00:39:d3:34:d4:f0:78:69:68:f6:
28:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1A:F6:50:8E:5E:E3:08:AC:C2:A4:C3:D6:51:AF:D3:5A:49:E3:19
X509v3 Authority Key Identifier:
keyid:09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/NRr2UI5e4wiswqTD1lGv01pJ4xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.10.0-93.174.12.255
Signature Algorithm: sha256WithRSAEncryption
4d:3a:91:df:05:f5:79:7b:28:41:10:46:65:e7:7f:20:66:f8:
5c:60:17:08:aa:b6:07:04:bd:b5:81:99:cf:29:68:7b:cd:97:
f3:9d:64:14:f5:fe:11:20:8a:41:d3:ab:9f:c7:eb:b3:50:cf:
27:67:5b:c3:af:88:4a:af:75:80:57:27:d3:14:bc:34:2f:6a:
6c:20:8e:1a:3c:75:5e:8b:f9:20:81:15:63:2f:74:f0:64:62:
97:ec:36:6f:3c:9c:92:52:4a:df:6c:57:42:b0:3c:7d:de:4b:
2a:d1:b1:e3:3b:0b:fb:ae:7f:73:98:da:9e:0d:49:79:49:b3:
76:dc:bd:ed:42:a1:29:2f:a9:fc:7b:6a:d4:11:e3:d2:3e:4b:
25:d5:0b:9a:d6:be:22:20:e2:d2:64:e8:9e:e5:5f:91:0d:d1:
2e:01:5c:c3:14:e3:93:10:6e:83:b6:7a:49:0f:e9:fd:5f:2d:
be:c1:60:fa:30:be:4d:6c:46:ec:d3:fb:34:5e:ad:6b:5e:a3:
62:b9:97:96:73:85:1f:fc:41:1e:9e:99:1a:00:fa:fe:b6:ee:
7f:98:24:e4:18:a8:33:98:f3:82:ca:9e:e0:51:12:07:b9:55:
e0:1d:af:5c:37:de:01:07:54:93:9a:d7:03:a2:cc:39:eb:e4:
6a:76:91:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:30:55 2026 by rpki-client