Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/1V2N8PP3W6pg2dn86MMXMCFavbg.roa
File: 1V2N8PP3W6pg2dn86MMXMCFavbg.roa (raw, json)
Hash identifier: 6GyZmIlJdg5hYdJcaopJTcDcXE9f3YbiakWtgZ82HCg=
Subject key identifier: D5:5D:8D:F0:F3:F7:5B:AA:60:D9:D9:FC:E8:C3:17:30:21:5A:BD:B8
Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2
Certificate serial: 019D95DFBA89A4D8D488631E66807B2EEDEC
Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/1V2N8PP3W6pg2dn86MMXMCFavbg.roa
Signing time: Thu 16 Apr 2026 10:39:20 +0000
ROA not before: Thu 16 Apr 2026 10:39:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5411
IP address blocks: 93.190.195.0/24 maxlen: 24
93.190.198.0/23 maxlen: 23
93.190.198.0/24 maxlen: 24
93.190.199.0/24 maxlen: 24
213.153.96.0/19 maxlen: 19
213.153.96.0/20 maxlen: 20
213.153.112.0/20 maxlen: 20
2a01:6d00::/32 maxlen: 32
2a01:6d00::/33 maxlen: 33
2a01:6d00:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:df:ba:89:a4:d8:d4:88:63:1e:66:80:7b:2e:ed:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2
Validity
Not Before: Apr 16 10:39:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d55d8df0f3f75baa60d9d9fce8c31730215abdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:e6:2e:50:6c:e7:ba:3b:a1:87:58:48:21:
bd:a0:a9:89:25:c1:38:95:cd:78:f0:86:b2:f2:01:
6e:68:e9:8d:7a:34:e3:b9:bf:0e:fa:77:4d:3a:5d:
78:6a:4b:e9:d2:a5:c6:f2:5d:70:ee:91:fc:2c:ba:
31:04:7f:ed:c1:e9:06:34:b0:8f:63:9d:73:32:75:
4c:c8:87:33:28:1a:3b:61:73:06:fa:18:3a:b1:df:
28:13:19:2c:d8:48:5f:72:cb:15:31:df:32:40:db:
fa:2e:54:0f:58:93:6f:1d:80:47:d9:e4:50:f4:61:
b1:6b:f1:db:16:3e:d4:9c:30:98:d5:5e:2a:ae:f6:
26:a2:ce:e1:1c:21:20:d7:74:4c:6f:ae:b8:19:fc:
6f:b4:d6:9f:61:b6:a6:cb:2c:60:c8:85:3f:0f:7c:
c2:90:5b:a9:b8:5d:3d:9a:2f:f9:29:6e:af:74:2c:
36:7c:07:91:d4:3c:9e:d6:fb:f2:aa:c7:a4:3c:4a:
25:6c:6e:36:11:f4:ff:31:43:68:03:b9:5b:29:ed:
ce:e4:3b:8e:9f:17:45:bf:9a:c2:cb:ae:e6:4c:45:
a2:e6:3a:40:16:c3:6d:8e:a6:9f:86:bf:ce:6e:04:
4b:72:42:73:5e:41:7a:53:b6:83:ff:c3:0b:68:76:
d9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5D:8D:F0:F3:F7:5B:AA:60:D9:D9:FC:E8:C3:17:30:21:5A:BD:B8
X509v3 Authority Key Identifier:
keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/1V2N8PP3W6pg2dn86MMXMCFavbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.195.0/24
93.190.198.0/23
213.153.96.0/19
IPv6:
2a01:6d00::/32
Signature Algorithm: sha256WithRSAEncryption
98:c6:e1:9d:11:4b:c7:e0:67:fe:ab:6f:97:9c:30:91:ef:0b:
19:78:e5:8a:8a:2c:33:0b:98:0b:d1:fa:56:67:02:62:10:17:
98:cf:a4:99:2c:72:30:be:fb:69:9b:74:d9:08:87:2e:99:4e:
2f:ca:b9:9b:3d:9b:d4:48:1a:91:47:d6:8b:ff:e4:e0:cc:bd:
37:66:94:04:6a:e3:a6:06:3c:58:e9:cc:4a:23:15:ed:ea:51:
ac:f7:b4:4b:46:ce:2f:48:52:bc:96:70:24:1f:5d:f5:73:38:
6c:57:42:4e:f7:11:fd:eb:8e:35:40:09:f5:72:0b:73:26:2b:
ef:d3:14:ef:01:09:7b:28:df:83:51:60:c4:8e:05:f6:57:15:
7e:14:2d:c9:3e:8b:b0:f7:17:13:89:44:a4:02:15:6f:f8:8c:
dd:91:5f:92:4c:29:78:22:fe:02:99:84:10:4e:90:96:fb:38:
a3:b8:09:f7:97:c8:2f:f2:83:e9:1f:6a:fd:4a:7f:fd:2c:87:
0d:4e:81:df:25:4c:11:1d:1c:53:85:da:7f:28:20:19:e9:12:
ef:4a:8d:ed:c4:ce:b6:da:b9:a5:81:1a:5e:6d:7b:31:4a:44:
19:3e:ee:f5:e3:56:07:96:9b:08:33:a9:01:71:24:6c:f0:05:
78:c6:33:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:15:02 2026 by rpki-client