Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/AmpembMZnQ3F11s0E_0dYki25Mc.roa
File: AmpembMZnQ3F11s0E_0dYki25Mc.roa (raw, json)
Hash identifier: WDbKJoErc1LVQLx62LO/KjvhetUehDjF17FpYSbvL/4=
Subject key identifier: 02:6A:5E:99:B3:19:9D:0D:C5:D7:5B:34:13:FD:1D:62:48:B6:E4:C7
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 019D72C6BBEB59753EA110AC30F3D3B84728
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/AmpembMZnQ3F11s0E_0dYki25Mc.roa
Signing time: Thu 09 Apr 2026 15:05:20 +0000
ROA not before: Thu 09 Apr 2026 15:05:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44646
IP address blocks: 93.93.80.0/24 maxlen: 24
93.93.81.0/24 maxlen: 24
93.93.82.0/24 maxlen: 24
93.93.83.0/24 maxlen: 24
93.93.84.0/24 maxlen: 24
93.93.85.0/24 maxlen: 24
93.93.86.0/24 maxlen: 24
93.93.87.0/24 maxlen: 24
103.39.40.0/24 maxlen: 24
103.39.41.0/24 maxlen: 24
185.40.204.0/24 maxlen: 24
185.40.205.0/24 maxlen: 24
185.40.206.0/24 maxlen: 24
185.40.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:c6:bb:eb:59:75:3e:a1:10:ac:30:f3:d3:b8:47:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Apr 9 15:05:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=026a5e99b3199d0dc5d75b3413fd1d6248b6e4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:08:1b:d3:27:e1:d5:35:ff:b7:30:cd:94:
09:ad:ef:ee:9a:46:e0:ac:5c:1b:9b:ec:57:eb:cd:
0d:f2:f2:c0:64:fc:b4:ef:6e:c0:6c:fc:b6:ae:a4:
4b:04:fc:ff:eb:65:a2:c0:d4:3a:40:69:25:f5:8b:
7e:3d:51:c7:44:f3:bf:e9:17:4e:cb:61:91:35:b7:
34:35:b9:2f:a5:f9:ed:98:bc:61:3b:b4:6f:5f:df:
95:b0:64:f2:70:16:af:4c:e3:be:a5:80:7d:3b:29:
61:c0:e8:06:52:c5:8c:77:0b:24:2f:66:81:e5:d2:
23:3f:1d:5d:ec:58:73:db:3c:b9:52:b6:9b:d2:9b:
62:9f:00:99:cd:6f:a4:06:bf:e6:87:3d:a0:3d:66:
49:98:d5:35:07:34:61:64:16:c7:0b:0a:c7:43:65:
18:48:55:fa:2e:b9:34:35:5e:b2:aa:d2:f8:d4:b2:
00:be:7c:b3:1a:fc:5f:f4:49:06:b4:d3:c9:2a:b1:
74:b5:d2:2e:c5:49:fa:b6:bf:bb:94:1f:22:0b:57:
8e:62:0b:51:90:95:0f:63:2a:54:46:73:93:d0:88:
30:bd:37:07:b5:87:15:3f:8d:4a:78:c3:55:36:d9:
dd:4b:4a:82:1d:8c:a9:3d:60:de:52:13:66:12:19:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6A:5E:99:B3:19:9D:0D:C5:D7:5B:34:13:FD:1D:62:48:B6:E4:C7
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/AmpembMZnQ3F11s0E_0dYki25Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.80.0/21
103.39.40.0/23
185.40.204.0/22
Signature Algorithm: sha256WithRSAEncryption
54:69:dc:61:e1:59:27:56:eb:64:95:3f:48:d8:12:a4:b0:ab:
59:9e:8b:1f:90:6c:57:ea:d6:0d:26:2c:94:02:51:75:1a:cd:
6c:5e:41:8c:8a:e2:09:b9:d6:28:cf:01:bf:5f:42:da:e7:dd:
5c:e0:27:3f:05:14:7e:83:5c:a4:d6:3d:c3:e9:f4:35:be:86:
e5:02:ae:91:ad:c5:d9:ce:03:a2:cc:87:98:4f:3d:78:46:a1:
a3:f0:60:7d:39:f8:a7:27:50:3c:67:d7:4c:1f:6b:9a:97:2f:
7e:d1:2c:ef:e3:52:80:97:68:d2:29:4a:b8:3e:07:42:55:02:
7c:d8:a6:44:ec:63:98:06:38:94:b0:2b:e6:69:1f:e3:d3:39:
7d:c8:63:a0:15:00:c2:29:9a:24:ad:d6:fc:20:c1:28:2e:ff:
2d:1c:d7:db:9a:b5:a5:6b:2b:11:1d:06:65:f3:26:7b:46:27:
e7:27:a4:51:73:1d:93:62:6f:3f:9f:97:4d:e7:63:22:81:74:
8f:ab:b8:58:a0:c6:ab:bc:97:ad:dd:25:6c:e5:70:25:cc:61:
01:17:21:af:a4:ea:9c:8f:6c:df:9d:1f:29:56:4e:7b:3b:41:
52:ea:43:b9:26:1c:a2:46:c3:5a:ae:d3:58:be:da:af:5e:92:
6c:3a:ed:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:53:08 2026 by rpki-client