Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OFxsKhfb3YGNJ5cDYYyIRGQGuvc.roa
File: OFxsKhfb3YGNJ5cDYYyIRGQGuvc.roa (raw, json)
Hash identifier: jBMc5tHO2nKlDwTqvZ4wPzd/X44g3JchlsJANdIcn4k=
Subject key identifier: 38:5C:6C:2A:17:DB:DD:81:8D:27:97:03:61:8C:88:44:64:06:BA:F7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019D3F5320ADB8107177D614C0D97817B16F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OFxsKhfb3YGNJ5cDYYyIRGQGuvc.roa
Signing time: Mon 30 Mar 2026 15:18:25 +0000
ROA not before: Mon 30 Mar 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57562
IP address blocks: 93.170.248.0/23 maxlen: 24
93.171.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3f:53:20:ad:b8:10:71:77:d6:14:c0:d9:78:17:b1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 30 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=385c6c2a17dbdd818d279703618c88446406baf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:fd:2a:9d:a6:d0:f9:c5:be:94:fb:01:2e:
d8:76:d4:ab:fb:35:60:f4:24:10:7a:ef:62:10:83:
f9:7b:e3:0d:ee:05:99:d6:49:cf:77:d1:d4:d5:28:
47:e6:f3:d1:d8:ab:29:53:29:a4:99:cf:74:99:a7:
ff:9b:19:c5:98:31:14:50:d1:e0:55:fb:3d:53:78:
ab:2e:1e:14:74:92:e8:48:b1:db:d3:07:c2:97:df:
f3:d6:67:d2:7a:55:a5:06:66:39:cf:82:17:d0:f1:
cf:62:b0:b6:06:f6:88:89:61:d1:aa:5e:fc:06:e7:
e9:3e:80:f9:5d:ab:1c:1b:87:98:7b:51:0b:0a:97:
ea:f2:4e:80:6c:14:13:81:69:5d:ce:cb:66:10:08:
9f:96:f7:36:3b:c8:e5:cf:78:5a:8b:e5:cc:e0:eb:
0e:c2:d9:2a:cf:78:d9:59:2f:24:9d:4a:d8:f4:0e:
f0:d1:5e:6d:16:c0:72:1f:7b:a3:1c:c3:68:6f:5b:
d8:2c:f7:ae:e9:52:bb:0f:d3:6e:eb:f7:cb:ef:d9:
ae:e5:de:57:eb:b7:3d:5d:b1:e9:12:be:ea:f7:81:
55:21:cc:14:9f:30:39:78:e8:d2:88:14:56:67:c7:
19:a0:d2:1a:c4:5f:6c:6f:1a:b9:66:a6:04:03:fe:
be:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5C:6C:2A:17:DB:DD:81:8D:27:97:03:61:8C:88:44:64:06:BA:F7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OFxsKhfb3YGNJ5cDYYyIRGQGuvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.248.0/23
93.171.166.0/23
Signature Algorithm: sha256WithRSAEncryption
62:1c:da:d6:ec:93:db:4c:3d:8c:a3:f5:a0:a5:2f:11:cf:0b:
98:93:3a:c2:aa:d2:48:53:19:14:b4:bc:1c:66:db:1e:cc:39:
01:76:8b:97:ed:0a:b7:f1:f1:a7:0f:09:be:47:6a:89:3b:a0:
31:86:aa:8b:a6:4f:3c:8d:20:97:8a:40:7f:e7:ed:b3:e2:10:
ad:2c:53:38:b1:d5:fb:f6:00:05:11:79:cc:14:93:56:e8:5a:
be:fa:fe:db:93:07:9b:cb:bc:2d:33:e1:81:d8:56:16:fb:e9:
a1:d9:2c:b6:50:51:e5:97:80:bb:03:3e:2c:62:eb:98:a9:47:
81:76:11:a1:73:a8:13:c9:c4:b3:c0:df:20:b2:df:01:6e:7e:
7c:b9:76:46:5a:07:f6:d5:bb:76:e6:8d:c4:86:79:cc:d1:23:
86:74:35:6c:c9:c1:91:32:fe:51:74:47:7a:6d:90:c1:d3:23:
9c:11:c3:89:77:fc:32:08:54:96:e4:b9:d7:38:df:3e:a3:64:
04:24:a7:35:5e:97:01:5a:cd:fe:1f:5b:7f:6b:0c:d9:7b:2f:
bf:5e:e4:68:6a:79:15:3a:d9:f3:bf:36:b7:54:d3:47:a9:d3:
b0:6f:69:0e:4b:eb:da:12:f4:a6:2b:f9:2f:26:d1:11:94:70:
be:73:d9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:51:19 2026 by rpki-client