Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0saqxF8cIYX91SmgcU9DDuKdHvc.roa
File: 0saqxF8cIYX91SmgcU9DDuKdHvc.roa (raw, json)
Hash identifier: zqF5u2H+1IzImJ4Nuj/vLtXOcuKIwS0uWu/5prR0Zew=
Subject key identifier: D2:C6:AA:C4:5F:1C:21:85:FD:D5:29:A0:71:4F:43:0E:E2:9D:1E:F7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0A3F5C6ACD8C443F2849172429653FC21
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0saqxF8cIYX91SmgcU9DDuKdHvc.roa
Signing time: Tue 15 Sep 2026 07:26:28 +0000
ROA not before: Tue 15 Sep 2026 07:26:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55286
IP address blocks: 93.152.46.0/23 maxlen: 23
93.152.52.0/23 maxlen: 23
93.152.76.0/23 maxlen: 23
93.152.80.0/23 maxlen: 23
93.152.84.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:f5:c6:ac:d8:c4:43:f2:84:91:72:42:96:53:fc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 15 07:26:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2c6aac45f1c2185fdd529a0714f430ee29d1ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:40:ec:32:90:8c:70:31:a3:a5:e3:26:da:
36:3c:4c:18:1f:4b:a8:2f:9d:94:34:d6:29:d1:06:
24:a8:22:81:6a:1b:a0:92:3e:50:0f:86:99:0c:0d:
37:18:4d:fa:b4:1e:72:77:69:8e:0b:b2:96:18:1c:
02:7e:f0:0d:47:33:b0:4c:c0:91:43:59:fa:82:9b:
c9:6a:33:d4:5f:06:3e:ff:b8:fd:57:43:07:01:ea:
74:9d:c7:74:e3:3c:96:1c:c1:b9:45:39:5d:b6:e6:
ac:d0:d6:cd:38:13:a0:dd:1b:c7:99:7a:9e:a4:f8:
61:0d:bf:42:46:8c:a9:38:83:20:32:d5:37:0d:7e:
df:98:38:83:e8:9c:82:d1:e7:0a:54:ae:87:c6:ae:
56:21:bb:16:19:f1:2b:63:10:ee:80:41:57:26:42:
80:4a:85:b1:0e:f4:7e:dd:b2:a3:2c:0d:9b:2d:8d:
b4:37:e4:6d:24:3f:16:c4:6f:29:2b:17:67:80:ef:
33:77:1d:18:41:4d:7b:c9:ff:f0:9a:39:f1:33:36:
db:ce:7f:2e:4a:cb:66:09:08:8e:d2:83:c4:65:d0:
4c:14:66:c8:0c:7a:f5:c6:56:69:6d:24:01:95:8d:
5e:23:20:4b:bf:77:fb:59:15:fc:e3:df:e8:09:f7:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C6:AA:C4:5F:1C:21:85:FD:D5:29:A0:71:4F:43:0E:E2:9D:1E:F7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0saqxF8cIYX91SmgcU9DDuKdHvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.46.0/23
93.152.52.0/23
93.152.76.0/23
93.152.80.0/23
93.152.84.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:6d:f9:b0:93:df:1e:da:cb:94:ba:c7:18:6d:d3:3a:7a:62:
d1:20:f7:fb:10:7d:fb:86:b8:64:9e:ed:3e:60:a4:d4:27:de:
30:7d:bd:a5:30:8a:80:55:9e:e4:2f:b0:50:31:2e:89:94:d2:
78:cc:d9:e2:27:97:a5:5b:43:4f:68:9e:6e:cc:49:7e:96:6f:
0d:09:17:41:b1:e0:71:35:34:34:df:00:2d:25:99:ac:ff:97:
89:e8:8f:cf:93:9f:13:16:69:9c:34:e9:d1:89:e0:a4:5f:41:
38:87:01:37:ec:b2:94:a0:d5:60:ab:be:46:3c:c9:a3:41:8d:
5c:76:e5:23:67:52:85:6f:26:5d:04:54:b3:96:e6:17:0c:c6:
df:3d:e6:9d:13:ee:14:ef:b0:3b:74:4f:ec:09:0b:bc:a5:9c:
79:c9:60:bb:8d:c3:c9:86:62:13:a9:4c:ce:1c:31:54:ef:eb:
0a:2c:d6:61:db:8a:17:90:bf:cb:5b:2c:1f:cc:70:b4:04:a1:
ae:84:ac:9f:28:c0:08:65:fc:31:16:ee:45:63:6a:e9:d8:a5:
60:26:57:82:68:08:8b:c0:fb:36:fd:48:5b:a7:04:16:d4:2c:
44:ab:b0:ce:a6:c6:6c:e4:31:11:16:20:e4:87:55:44:cf:e1:
86:10:80:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:14 2026 by rpki-client