Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/EKu4hBYmJLfCxSRA8GO0yizX0_4.roa
File: EKu4hBYmJLfCxSRA8GO0yizX0_4.roa (raw, json)
Hash identifier: CyxqfRb/7CLNfbmeM0B5aw2STBWYkaVDeroOuwjiMCA=
Subject key identifier: 10:AB:B8:84:16:26:24:B7:C2:C5:24:40:F0:63:B4:CA:2C:D7:D3:FE
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019D4D62FD4B93313410D48AA581002AB043
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/EKu4hBYmJLfCxSRA8GO0yizX0_4.roa
Signing time: Thu 02 Apr 2026 08:50:26 +0000
ROA not before: Thu 02 Apr 2026 08:50:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201136
IP address blocks: 93.113.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4d:62:fd:4b:93:31:34:10:d4:8a:a5:81:00:2a:b0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Apr 2 08:50:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10abb884162624b7c2c52440f063b4ca2cd7d3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:c1:4a:a8:2d:86:7e:a6:4d:18:fb:0f:12:
91:51:7d:f6:71:af:7f:c0:f4:16:a3:b6:e4:72:00:
23:ae:26:b8:77:3f:ce:d4:73:15:76:85:e9:34:7c:
3c:6e:50:7e:2e:37:5b:10:04:b0:ce:10:11:58:00:
3c:9d:3b:4d:6c:9c:21:2a:7e:c4:89:b3:ae:19:f7:
d6:6f:04:73:16:55:ba:51:04:3f:38:d7:21:f7:15:
0e:a8:29:90:05:24:b5:d6:63:75:6b:ca:ad:71:b2:
f7:9b:f8:bf:05:08:59:11:78:38:65:5e:7b:47:49:
d2:21:03:dd:f9:6c:23:a8:dd:14:de:76:76:4a:50:
58:22:de:e6:25:22:3b:5f:4f:91:dd:31:c6:09:64:
58:34:d4:58:54:f3:60:a4:e7:5f:1f:dc:7d:2d:55:
ce:a7:f9:b7:6c:a2:3b:b2:4b:71:b6:59:27:eb:28:
76:52:13:39:4e:e5:35:4b:2f:72:9b:64:05:e8:1b:
0d:77:50:15:8c:55:74:8e:99:25:85:c2:18:9c:26:
a7:06:05:f5:17:f8:cf:6f:64:14:7e:74:94:78:0a:
7c:44:85:0d:ee:d5:d0:ed:d9:b8:2e:d3:63:d2:79:
ab:65:7f:2d:4a:78:8e:e5:94:d2:7f:71:bf:30:b4:
ea:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AB:B8:84:16:26:24:B7:C2:C5:24:40:F0:63:B4:CA:2C:D7:D3:FE
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/EKu4hBYmJLfCxSRA8GO0yizX0_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.176.0/24
Signature Algorithm: sha256WithRSAEncryption
35:25:7a:c8:43:f5:55:a5:b7:98:99:e9:d2:bc:47:f6:2e:e0:
e8:58:54:4b:38:3e:3e:dc:d1:52:6f:5b:b4:56:37:c8:02:7e:
f7:7c:52:85:d3:c1:22:e4:27:eb:0c:4e:54:d1:09:66:41:52:
53:f2:cf:91:db:52:a1:17:bf:db:eb:8a:50:c1:2c:ee:2f:d6:
3e:c0:b4:38:7e:be:05:09:45:b1:41:fc:7d:17:40:78:e5:93:
b5:39:98:7c:9e:b4:1a:0d:3e:c9:f6:b9:14:a0:c0:1c:77:8d:
ff:d6:fe:1b:9b:36:5e:e9:88:ee:3c:9f:3c:69:47:20:f6:ce:
e3:b9:07:2c:9a:4f:62:a3:32:81:30:ca:ab:c1:96:72:82:09:
12:37:ec:d4:83:8f:ce:f6:e4:f9:3e:fa:54:63:b7:6e:a9:5a:
db:90:33:fa:96:66:82:46:bf:c7:3f:1d:73:99:07:db:c7:5d:
fd:c0:15:8f:60:e0:e9:c4:9e:71:f3:aa:12:eb:4d:73:75:83:
a6:7e:20:88:9f:a5:bc:d3:bf:30:c8:2c:10:6a:06:60:db:e3:
ec:ba:ef:a0:64:d5:f6:ed:7e:e4:bf:b3:a5:a1:39:c3:2c:fe:
22:42:f7:cc:3d:d1:98:97:c3:7a:02:c1:9c:55:49:bd:00:e9:
5d:08:eb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:37:52 2026 by rpki-client