Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/b0HKN9ab1P1Sr3YvvuEwkf7syng.roa
File: b0HKN9ab1P1Sr3YvvuEwkf7syng.roa (raw, json)
Hash identifier: 9hsVaqxhAVdgsjntPxtz6LrMJOjEjADE4hMXgvvmdoo=
Subject key identifier: 6F:41:CA:37:D6:9B:D4:FD:52:AF:76:2F:BE:E1:30:91:FE:EC:CA:78
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 019B7DCAFE3E70398FD6980631B282C688AE
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/b0HKN9ab1P1Sr3YvvuEwkf7syng.roa
Signing time: Fri 02 Jan 2026 08:20:13 +0000
ROA not before: Fri 02 Jan 2026 08:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31234
IP address blocks: 93.157.24.0/22 maxlen: 22
93.157.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:fe:3e:70:39:8f:d6:98:06:31:b2:82:c6:88:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Jan 2 08:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f41ca37d69bd4fd52af762fbee13091feecca78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:8a:07:2f:29:86:9f:a6:45:f8:44:bd:c7:
c4:bd:22:36:ab:0d:51:9c:b6:f6:41:1f:40:12:64:
a3:1c:93:14:c8:77:ed:67:cb:b9:46:b4:0c:0c:69:
49:a8:b0:d1:3a:d8:a6:c3:47:8c:59:1d:4d:da:02:
9b:bc:46:43:e0:36:4d:42:d1:00:2d:2d:40:f9:ce:
df:36:21:d2:b6:89:02:6f:53:8a:77:c8:f4:63:93:
19:d4:95:29:63:14:f7:47:ba:fa:d4:d7:49:36:bf:
eb:a5:50:b9:d0:44:02:2f:80:41:fa:6b:4c:f9:93:
e7:c8:e9:54:98:06:f9:2b:97:ba:ff:f0:42:6c:6d:
cf:49:0d:01:96:04:2a:25:e1:15:0f:c8:94:90:e8:
bd:84:b8:d8:8a:6b:86:fe:b7:e0:a8:06:b6:73:c0:
cd:57:82:43:37:aa:d0:39:a4:76:6a:70:29:9f:19:
83:83:27:6f:a7:5f:4e:a5:e2:1c:f8:7b:08:bf:33:
d2:2f:5f:57:39:9a:2c:15:6a:3e:74:f9:c5:5d:a7:
df:0d:d7:b0:fe:43:be:d3:73:a7:d9:50:c0:5d:02:
a1:3a:dd:a1:4f:6b:4c:71:34:83:b7:ba:fd:25:40:
bc:91:8e:cd:fa:1a:3c:d5:49:29:9c:76:b8:6c:c7:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:41:CA:37:D6:9B:D4:FD:52:AF:76:2F:BE:E1:30:91:FE:EC:CA:78
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/b0HKN9ab1P1Sr3YvvuEwkf7syng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.24.0/22
93.157.30.0/23
Signature Algorithm: sha256WithRSAEncryption
28:6c:3d:1b:b5:a3:ed:26:2f:c9:04:73:00:1d:03:cb:f7:d3:
04:b6:9b:56:bb:6c:4a:cd:92:01:56:98:ae:ec:5e:da:60:b0:
fc:fb:1f:4d:ca:27:65:1b:43:80:56:e2:2f:df:7c:e1:59:c0:
af:d2:f7:cf:fd:9f:ac:e7:75:a7:89:4d:2e:88:79:be:f2:12:
40:38:1d:4a:a6:70:8c:f7:a7:b6:6b:b9:17:67:8e:e2:6a:a5:
db:77:31:6f:7e:f2:a5:e2:8c:9e:d5:78:af:9f:9b:1e:5c:8c:
d0:a3:63:ff:0f:c5:73:bf:72:a9:7f:97:0e:14:ba:cd:9e:c5:
69:ea:f0:68:c5:d9:65:71:80:b9:0d:a2:55:56:d3:b8:83:bf:
a6:30:2b:97:75:a1:7f:89:32:f1:cc:9a:7a:7a:60:bb:28:df:
55:47:3d:67:fa:4c:b5:a3:e4:70:4c:6e:0c:70:14:df:0b:af:
40:ea:58:a9:5d:b5:0e:2a:d6:56:74:95:b2:f8:1b:b1:59:63:
a7:5e:6d:89:5e:fe:92:4e:0a:0e:91:d5:66:ec:2e:c3:f4:1d:
d7:50:39:ed:01:ed:04:72:9c:8e:10:7d:c0:68:c2:34:6a:23:
ec:49:a4:bc:ac:d8:07:9c:82:24:48:3b:27:e9:e9:8c:f9:dc:
d9:33:2f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:31 2026 by rpki-client