Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/93jVDH-zB17GHVV4CvC_Vu4ZAjg.roa
File: 93jVDH-zB17GHVV4CvC_Vu4ZAjg.roa (raw, json)
Hash identifier: e8hjU0chelgASP0m/iz7CcB1JuMpCP/VF205/UzfQOE=
Subject key identifier: F7:78:D5:0C:7F:B3:07:5E:C6:1D:55:78:0A:F0:BF:56:EE:19:02:38
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 019C70FB80D760111FA5065E0A1838B5C56B
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/93jVDH-zB17GHVV4CvC_Vu4ZAjg.roa
Signing time: Wed 18 Feb 2026 13:40:56 +0000
ROA not before: Wed 18 Feb 2026 13:40:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51896
IP address blocks: 31.209.144.0/21 maxlen: 21
31.209.152.0/21 maxlen: 21
157.157.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:fb:80:d7:60:11:1f:a5:06:5e:0a:18:38:b5:c5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Feb 18 13:40:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f778d50c7fb3075ec61d55780af0bf56ee190238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:1f:49:60:c3:05:31:f0:e8:1b:a2:71:2b:
a8:32:90:70:65:41:57:cd:aa:b4:49:ce:aa:6d:39:
1b:d5:db:2a:e5:91:70:af:dd:43:71:5d:1c:7d:a8:
60:23:6f:33:55:10:b0:0b:d7:31:49:1c:2f:2b:76:
00:bd:c1:d3:37:f7:97:13:09:72:5c:3b:fa:dd:85:
6d:a9:41:af:2b:dc:e0:e7:c4:3b:2b:26:07:69:f4:
f5:4a:60:64:3e:68:9c:9a:ac:8b:31:ef:89:55:30:
ca:1c:02:04:b5:73:da:e1:08:3b:0f:2c:dd:fb:98:
99:7f:b7:99:ad:cd:9d:63:85:60:91:68:36:c1:d1:
92:e1:ac:6d:56:04:2f:68:4c:6d:69:b0:06:92:44:
e5:26:74:a9:40:3a:c3:b6:ec:3f:a3:42:96:f9:7c:
57:5b:f4:5e:e6:48:8e:18:19:41:71:2f:1f:ca:12:
da:2a:32:0d:8f:25:c8:eb:af:2a:32:01:aa:8f:f9:
9f:5d:79:13:e1:ca:37:9f:7a:d6:8f:5c:0d:07:77:
26:38:ed:0d:86:49:86:3a:c7:3d:bd:9d:47:e4:c1:
bb:de:ae:59:88:24:d8:c4:9e:b6:92:43:c6:df:ab:
9e:72:96:2d:3c:4c:f3:94:89:14:17:58:e0:11:74:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:78:D5:0C:7F:B3:07:5E:C6:1D:55:78:0A:F0:BF:56:EE:19:02:38
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/93jVDH-zB17GHVV4CvC_Vu4ZAjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.209.144.0/20
157.157.184.0/22
Signature Algorithm: sha256WithRSAEncryption
56:5c:a1:41:9c:81:96:3e:da:30:97:15:87:75:2c:24:c2:9f:
0a:9d:db:2d:54:95:80:1c:8a:73:14:24:99:19:fd:72:cc:b9:
bc:44:41:0d:f7:09:04:1d:0c:ff:96:be:f2:33:41:fb:9f:ef:
b0:be:fc:02:6d:1c:7a:1e:ab:8f:63:a4:0a:be:62:d8:ab:e4:
32:06:d1:e3:22:0a:a8:b8:9e:36:73:f2:d6:9f:8d:8b:72:0e:
88:11:b4:b1:54:f9:dc:e8:c2:3e:61:b1:ec:32:84:f3:c0:b6:
83:60:e2:d9:93:10:01:b6:41:88:d3:37:58:2e:61:9f:88:0c:
fb:a1:e0:a9:69:7f:21:0c:8b:ad:88:a8:65:ee:15:57:89:04:
c5:9e:d8:0d:9d:3a:6d:b5:46:56:b3:dd:8c:21:c0:3d:41:a9:
2b:28:3a:08:9c:d7:89:7d:81:85:50:5a:9d:96:9e:3a:a0:58:
5f:49:c9:27:df:a8:0a:20:97:6f:de:91:31:8f:c9:b1:30:8f:
6c:5b:66:14:10:43:3a:5c:91:fb:8c:66:f0:d1:c1:bf:bd:be:
90:2b:02:cb:f9:14:8c:ac:b3:d4:ba:de:75:3d:e8:57:44:bd:
d9:cc:20:6e:e9:66:c2:5b:cd:94:fc:9b:d9:a1:40:b9:76:fe:
63:cb:a2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:49:10 2026 by rpki-client