Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pAT5zIe75X3DVfTGi0vTKLHv92E.roa
File: pAT5zIe75X3DVfTGi0vTKLHv92E.roa (raw, json)
Hash identifier: TN1aKDLxVEapuFYOFlUrJNl2RpoE4GXtrZvlk2EdDAQ=
Subject key identifier: A4:04:F9:CC:87:BB:E5:7D:C3:55:F4:C6:8B:4B:D3:28:B1:EF:F7:61
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019C9F2B1ABF0C4239CACB45C36D5B962017
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pAT5zIe75X3DVfTGi0vTKLHv92E.roa
Signing time: Fri 27 Feb 2026 12:55:28 +0000
ROA not before: Fri 27 Feb 2026 12:55:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202995
IP address blocks: 93.171.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:2b:1a:bf:0c:42:39:ca:cb:45:c3:6d:5b:96:20:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 27 12:55:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a404f9cc87bbe57dc355f4c68b4bd328b1eff761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:33:ca:1c:de:a1:1f:b3:47:9f:fb:e3:7e:
18:9e:14:dc:2b:54:8b:10:aa:59:d1:36:19:d9:de:
44:1f:0e:5d:2d:10:41:fc:ec:a7:a7:b1:88:9b:eb:
bd:b6:3f:00:d4:40:84:81:0a:46:42:49:5b:7e:87:
6d:39:11:1e:d0:b3:d8:3d:9d:37:51:92:2a:a3:a4:
d2:d1:38:12:d7:19:fa:b7:24:0b:64:79:9d:63:61:
c7:63:e0:9a:7a:89:7a:8b:d4:5a:b9:a3:d5:92:5e:
76:03:38:0c:ce:91:67:08:c6:1f:35:f5:c7:16:0c:
81:3e:68:bf:ee:c7:8c:0d:2b:0b:42:98:83:ed:76:
f6:f6:2a:2e:39:b6:4f:86:69:8b:86:71:01:99:6f:
22:40:89:59:3c:78:dc:ec:b6:64:ed:14:8c:3f:89:
bd:c9:77:23:ed:ef:c6:20:98:4b:fe:4b:59:b8:8e:
b6:26:ff:ac:87:71:cb:2b:81:63:e2:99:8c:11:81:
4b:11:4b:65:c3:e9:fb:e0:34:70:94:f6:2f:68:b1:
b7:29:04:6a:61:38:5c:f1:df:5b:29:8f:bd:ac:bd:
7e:2b:db:b4:7a:50:02:44:f7:f9:ec:ff:d9:c3:2e:
05:47:b6:28:78:c1:60:5d:8d:a5:e7:94:d6:6f:ad:
2f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:04:F9:CC:87:BB:E5:7D:C3:55:F4:C6:8B:4B:D3:28:B1:EF:F7:61
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pAT5zIe75X3DVfTGi0vTKLHv92E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.234.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ca:20:3a:2c:c7:7d:75:e4:f9:e1:b8:c5:8b:43:8e:0e:77:
3b:87:ec:9e:1f:07:77:e8:80:93:0d:a1:47:8a:b1:a4:f8:38:
09:34:6c:6d:34:0c:e1:5d:d1:ad:1f:14:78:6f:bb:1d:51:27:
1f:1c:2a:1a:de:f0:3a:7f:0d:be:c5:d5:3f:38:c7:12:a1:c2:
89:aa:bf:c2:2d:d0:b6:bc:92:18:09:32:3d:e3:8b:49:64:98:
26:85:b1:9e:6d:bc:cb:8b:5d:fa:47:d0:43:7a:64:5b:2c:43:
2c:85:e5:94:86:08:64:94:bf:b0:7e:37:34:7b:26:a1:37:66:
b5:0a:01:40:46:0f:d1:8c:09:94:ce:60:f0:a4:db:2f:81:b0:
de:56:a0:97:dc:4b:42:0e:63:a8:fa:fa:2c:bc:b5:59:8c:98:
91:b8:31:b9:27:23:19:ab:fe:2b:fd:bd:61:be:1a:6f:c2:fb:
bf:40:c4:cb:57:d1:08:3e:97:51:06:01:db:20:23:a1:2c:eb:
e6:38:b7:9b:1a:20:1e:fb:3f:bf:d6:5e:98:90:e9:19:24:11:
d1:9e:c2:b2:c4:45:ae:9a:62:54:a0:23:99:ba:44:69:53:2b:
8b:51:4b:31:4e:a4:ab:e4:24:8a:36:da:a2:e9:37:97:94:82:
fc:d8:f8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:59 2026 by rpki-client