Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/93pagyqbKSx7ojiwk3pCEHwGNqE.roa
File: 93pagyqbKSx7ojiwk3pCEHwGNqE.roa (raw, json)
Hash identifier: Awi9xJvRaRCnDHEl0mlXSjCv4wxBbmDwhwg9tE5Uqe4=
Subject key identifier: F7:7A:5A:83:2A:9B:29:2C:7B:A2:38:B0:93:7A:42:10:7C:06:36:A1
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019A348639D8B7E55B1020FE924CC559B829
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/93pagyqbKSx7ojiwk3pCEHwGNqE.roa
Signing time: Thu 30 Oct 2025 09:50:03 +0000
ROA not before: Thu 30 Oct 2025 09:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64289
IP address blocks: 94.247.44.0/24 maxlen: 24
178.251.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:86:39:d8:b7:e5:5b:10:20:fe:92:4c:c5:59:b8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Oct 30 09:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f77a5a832a9b292c7ba238b0937a42107c0636a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:c3:df:ef:1f:fe:d9:60:ac:3d:64:0a:ed:
03:c9:1f:44:57:a2:0e:d9:f7:f3:fb:90:5a:60:cd:
f7:79:02:6e:66:ce:00:89:41:ec:bb:7d:37:ee:3f:
0e:31:a1:1d:e6:a5:79:8c:0a:8a:8f:11:5c:26:14:
4d:b0:cc:aa:91:54:15:8d:4b:17:57:57:4a:d0:8c:
21:e2:da:37:df:2a:db:83:7a:9e:54:aa:a2:ef:b5:
0e:a3:96:ac:af:9d:c7:8e:32:73:29:79:71:0f:ce:
e8:45:05:d6:bb:16:38:11:d5:73:6d:84:cd:87:77:
6a:b8:1d:f9:72:55:17:d3:8c:11:57:b8:05:1c:57:
ff:c8:a7:8d:a3:1b:5a:74:34:30:4e:aa:da:a8:db:
20:cc:2a:2f:42:23:d7:ab:e1:65:5c:65:cf:f6:18:
fc:86:d4:2e:54:f1:84:4b:1e:92:76:21:6f:68:d1:
98:50:46:14:4b:50:20:fe:e1:71:f8:7c:e8:7b:b1:
a7:39:89:2e:cf:15:d6:58:67:05:33:b5:1b:c5:aa:
ae:5b:97:c5:6e:9d:60:f7:70:8a:4f:46:d1:66:4a:
f4:59:c0:d9:30:09:75:1c:7e:88:77:bb:3b:79:3d:
b0:bb:b2:1d:7c:4d:8d:3f:12:70:10:d8:2d:06:5b:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7A:5A:83:2A:9B:29:2C:7B:A2:38:B0:93:7A:42:10:7C:06:36:A1
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/93pagyqbKSx7ojiwk3pCEHwGNqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.44.0/24
178.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:f3:f3:44:73:20:68:b0:82:d3:a7:8e:22:0e:fb:68:4d:a6:
2f:0a:43:4c:15:fa:ab:5a:8e:ba:c5:bf:1b:85:34:93:fe:d7:
72:7e:9f:3a:d7:7e:12:46:8e:6f:ff:b0:86:5c:0b:74:a3:64:
f1:c1:33:75:33:00:f7:2e:59:13:c8:b3:5a:d4:d2:9f:c1:3b:
2f:da:16:b9:d7:81:2f:91:1d:84:bb:39:5b:fe:39:ac:67:65:
12:41:6d:d7:4d:b8:2c:34:15:10:ca:a1:82:a6:bd:f7:e9:32:
d4:ce:2c:61:fe:a2:ca:78:da:b1:56:45:84:42:39:7b:9e:50:
d6:56:ef:ea:0f:cc:80:cf:04:8a:81:e8:dc:2a:74:d3:f3:b6:
49:f0:29:6d:3d:cd:3b:d9:43:d6:15:3c:cf:73:d2:3a:e4:9f:
39:5b:3f:09:15:79:c8:08:b3:e2:f9:38:45:33:40:33:7e:4a:
a1:b7:33:1f:28:d8:50:00:1f:c9:6e:31:9c:9b:8b:df:54:2e:
8b:16:a7:49:1a:2d:49:14:2b:48:44:69:4f:df:5c:93:d3:06:
cb:64:25:34:3f:2d:58:c0:f7:35:8d:65:88:28:36:91:34:a8:
48:e6:77:e6:0d:15:fb:ce:94:2c:78:1a:22:54:c0:3e:31:2b:
37:5a:72:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:48 2025 by rpki-client