Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9P02UVWo-gwi8Ff2oinrIvB277c.roa
File: 9P02UVWo-gwi8Ff2oinrIvB277c.roa (raw, json)
Hash identifier: QCXSykv56pgHukOt9XiVsEwqqP6cqfyHMs/x965Xbjk=
Subject key identifier: F4:FD:36:51:55:A8:FA:0C:22:F0:57:F6:A2:29:EB:22:F0:76:EF:B7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C8F0BE5F980C3C2D7C28336E143773E56
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9P02UVWo-gwi8Ff2oinrIvB277c.roa
Signing time: Tue 24 Feb 2026 09:47:27 +0000
ROA not before: Tue 24 Feb 2026 09:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 93.190.244.0/24 maxlen: 24
2a0e:15c6::/32 maxlen: 32
2a0f:1203::/32 maxlen: 32
2a0f:dfc0::/29 maxlen: 29
2a0f:e204::/32 maxlen: 32
2a0f:e7c1::/32 maxlen: 32
2a12:f440::/29 maxlen: 29
2a13:c907::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:0b:e5:f9:80:c3:c2:d7:c2:83:36:e1:43:77:3e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 24 09:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4fd365155a8fa0c22f057f6a229eb22f076efb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:0e:4f:f9:ce:00:7d:33:0d:77:50:87:e8:
86:d2:f4:7e:00:bb:24:66:ab:53:ba:90:42:dd:76:
24:27:fd:6f:d7:98:42:7a:ac:6b:1f:7f:e7:c2:8c:
c3:67:a7:1b:b0:31:52:25:79:44:98:d7:c6:26:a3:
b7:38:70:cd:5b:6f:35:0f:f6:68:43:26:22:b7:ba:
c8:11:79:a8:8a:2f:b8:97:d8:c5:ff:ec:14:f8:25:
0d:b6:e6:11:6f:13:fb:75:b4:b2:29:7c:92:d9:88:
e7:e6:e8:f1:8e:ad:ff:6d:dc:c8:18:eb:29:05:33:
90:99:0c:26:83:0f:55:ee:19:8c:a4:7d:85:85:1c:
67:80:bd:bf:e6:07:da:44:01:0d:93:3e:a4:4b:02:
75:f6:e2:46:21:bd:4c:c8:ba:ec:bd:44:a2:1f:d8:
eb:a9:b0:3e:d7:2f:6b:39:95:9d:23:db:3a:83:f0:
a0:ae:fe:70:80:97:f2:62:9a:a9:0e:2a:2c:15:67:
ae:f8:9a:fc:92:65:2c:6d:1e:80:4f:eb:9d:e1:00:
17:22:b3:28:0e:eb:b0:c8:73:0d:5d:5c:39:76:63:
84:b2:47:bd:11:4b:00:f8:5d:bd:b9:c8:f8:29:32:
fa:e4:7a:10:26:7e:4a:52:cd:78:c8:1a:62:2c:5e:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FD:36:51:55:A8:FA:0C:22:F0:57:F6:A2:29:EB:22:F0:76:EF:B7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9P02UVWo-gwi8Ff2oinrIvB277c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.244.0/24
IPv6:
2a0e:15c6::/32
2a0f:1203::/32
2a0f:dfc0::/29
2a0f:e204::/32
2a0f:e7c1::/32
2a12:f440::/29
2a13:c907::/32
Signature Algorithm: sha256WithRSAEncryption
3c:94:3e:c4:59:00:68:ed:91:56:22:c5:3e:78:43:5a:cc:d9:
d7:18:3a:a9:a4:bd:74:73:f8:1c:8e:38:45:3d:a3:d4:cb:40:
0d:77:e8:1c:be:2a:b7:e8:5d:b2:a3:3b:54:f8:50:a4:06:08:
f3:32:da:19:31:04:8f:b8:d6:59:66:28:5a:d7:a8:57:a7:7c:
38:8d:b2:0b:e4:c9:b5:43:23:4c:7f:ed:85:3e:e8:80:6d:c0:
8a:41:ba:77:69:f7:b0:51:46:fa:de:58:7e:41:4c:20:71:1d:
c6:9a:d8:2f:b8:d3:51:e0:e9:e8:25:c6:80:56:32:06:ac:7f:
82:58:51:04:41:7f:76:d0:53:09:7a:03:6c:aa:d6:97:30:44:
b0:14:82:89:6a:5f:30:96:32:bc:71:e9:fd:10:da:3b:3a:ad:
23:ed:c9:e3:93:7f:bf:41:c6:ac:1d:79:09:85:d0:fb:b1:48:
ea:90:9f:44:f1:80:34:61:0d:94:d3:0b:84:bf:cf:7f:35:e6:
78:7e:6f:d2:4f:c5:3a:96:e1:79:a2:98:4c:a7:4e:ce:87:0a:
40:d8:bd:2e:62:73:a3:f5:54:b2:ce:8d:9e:00:9d:d6:f3:65:
f0:c9:9f:20:ec:77:de:3b:da:65:76:35:5c:78:c2:97:a6:f2:
f2:8c:cf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:38:35 2026 by rpki-client