Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/usickz1JkHSllPbZAi4fwIOVzHk.roa
File: usickz1JkHSllPbZAi4fwIOVzHk.roa (raw, json)
Hash identifier: WEX+IonYma3tMGJoZDK3/oEc0wu/mpt2bYpraiX2Bz0=
Subject key identifier: BA:C8:9C:93:3D:49:90:74:A5:94:F6:D9:02:2E:1F:C0:83:95:CC:79
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01A0922A1802CD3F91CE18297901826E0D64
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/usickz1JkHSllPbZAi4fwIOVzHk.roa
Signing time: Fri 11 Sep 2026 20:30:27 +0000
ROA not before: Fri 11 Sep 2026 20:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219288
IP address blocks: 93.89.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:92:2a:18:02:cd:3f:91:ce:18:29:79:01:82:6e:0d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Sep 11 20:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bac89c933d499074a594f6d9022e1fc08395cc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:95:41:26:70:5f:7c:dc:b7:c9:e1:42:92:
5f:34:24:ee:29:91:63:38:42:91:25:87:4f:10:63:
a3:fd:b5:05:63:ac:13:7d:77:6f:5a:3e:d4:6c:fe:
00:70:7b:bc:d1:d5:d5:04:12:51:f8:2e:e8:d0:43:
b1:62:35:dd:d4:2e:1b:ca:05:dc:84:be:7f:10:8c:
3c:c1:59:0b:a8:91:94:db:4e:a2:79:f4:db:e8:4f:
ff:a6:3f:85:fb:17:ad:ce:8f:b7:cd:01:42:b1:0e:
22:c2:8c:f8:ac:c3:bf:9e:8f:a9:a9:8c:69:16:1f:
96:c5:df:50:14:57:6d:aa:11:bf:bc:4c:ee:bd:c6:
36:f6:d6:0d:02:11:20:18:d4:e3:87:b8:a5:dd:20:
cb:bc:f3:89:3e:19:6a:c1:fa:8d:57:35:f5:82:53:
c5:75:cc:d0:bd:88:74:13:ad:8f:d8:19:0e:cf:f7:
23:3c:06:e1:0a:cb:64:8f:dc:d3:0c:78:a6:82:87:
a3:cc:69:43:7d:43:db:5d:a7:9a:d0:c7:4a:3e:7d:
0e:45:b1:04:21:52:3c:0f:4c:ef:93:ff:b6:d7:af:
bd:20:d0:24:82:60:89:31:e9:3a:fd:ee:34:b0:b5:
25:e9:a3:8f:4d:77:1c:18:0b:80:8f:27:aa:65:8c:
80:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C8:9C:93:3D:49:90:74:A5:94:F6:D9:02:2E:1F:C0:83:95:CC:79
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/usickz1JkHSllPbZAi4fwIOVzHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.220.0/24
Signature Algorithm: sha256WithRSAEncryption
99:11:e1:a0:16:92:22:2e:0a:50:00:60:a6:08:d4:ca:55:0c:
8c:73:6f:61:33:c6:df:26:a4:0f:e3:d4:70:38:dc:19:e3:48:
4e:05:3c:ee:8f:9c:d0:02:d0:99:4f:55:2d:5d:05:27:cf:05:
4e:53:23:4e:c6:87:5c:90:37:6c:c4:07:7a:c5:4c:94:8f:21:
0c:b1:c9:b2:e3:c3:3c:cf:7d:ca:d6:11:a6:1e:35:1f:8f:ec:
3d:11:15:1b:c8:76:f4:e5:15:1e:81:25:24:70:5d:81:80:d8:
ee:ff:01:2b:3a:34:0d:c4:be:61:01:4a:9b:74:5a:73:58:8a:
cf:b2:0a:79:64:ec:b8:92:02:10:db:d2:f6:4a:34:e5:24:62:
8c:42:da:a1:8e:10:e9:2f:9c:44:7a:bd:fd:22:a5:7e:d3:27:
81:ab:0a:96:c3:ee:27:29:b5:61:dd:e7:63:2e:26:49:2a:d5:
38:d8:64:e8:b0:a8:72:4b:cf:aa:39:bf:f4:97:c8:00:d5:72:
5a:62:fb:f9:a7:d7:3a:b0:25:e0:55:69:3d:7b:e7:7a:db:1f:
c2:50:05:3c:f2:05:49:54:dd:aa:75:25:be:b0:75:08:8a:05:
ce:fe:41:d9:c4:bd:a0:29:9b:1b:c3:20:1b:d5:d8:12:c3:7a:
70:f4:fd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:09:19 2026 by rpki-client