Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/0x0JagMZAzLM1n-zWoG_bQ6CViE.roa
File: 0x0JagMZAzLM1n-zWoG_bQ6CViE.roa (raw, json)
Hash identifier: SfuDR/8twfPwPJhc0obOew7t3fLekN2kbCMW8MltBXw=
Subject key identifier: D3:1D:09:6A:03:19:03:32:CC:D6:7F:B3:5A:81:BF:6D:0E:82:56:21
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019C51790B69F38BC89BFAF1FCF025BFC759
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/0x0JagMZAzLM1n-zWoG_bQ6CViE.roa
Signing time: Thu 12 Feb 2026 10:50:13 +0000
ROA not before: Thu 12 Feb 2026 10:50:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209896
IP address blocks: 93.152.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:51:79:0b:69:f3:8b:c8:9b:fa:f1:fc:f0:25:bf:c7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Feb 12 10:50:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d31d096a03190332ccd67fb35a81bf6d0e825621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:b5:2b:30:4c:52:36:72:57:b8:85:69:60:
e4:31:0c:e0:41:c8:98:90:b2:0f:ee:7c:5c:99:d8:
51:75:36:11:b5:e5:cb:8a:31:d7:eb:32:4a:0f:5b:
f0:b5:7f:4d:32:1a:98:4d:ae:ae:00:ef:cd:de:4e:
64:3e:29:5a:e1:2a:60:02:70:1d:c9:61:61:2d:dd:
5c:1f:a5:fa:13:72:55:ca:b5:7c:3a:66:3a:4f:85:
ab:33:32:f6:4a:bf:f9:95:d3:3f:c3:3b:e1:8c:0a:
6c:11:b3:e6:aa:43:7f:1f:e1:f4:eb:63:30:6a:c4:
42:2f:72:e8:b6:a4:3b:08:35:a3:e2:0e:9c:46:20:
53:fa:65:cc:4f:cf:78:3b:81:d2:89:b6:5c:d1:82:
a3:4a:a3:99:79:0c:58:3f:70:43:ec:6d:39:3a:9e:
56:30:12:7c:06:7f:0d:ef:ae:7a:b5:2e:6b:ee:ea:
80:66:48:7c:b8:f1:20:dc:e3:79:0c:3f:bd:cb:ac:
77:be:cc:38:1d:87:23:2c:41:f8:13:0c:71:5b:8a:
ec:e6:77:71:60:29:1c:7c:a0:21:d7:b9:a4:b2:ab:
78:70:9a:56:ab:38:46:ae:49:c2:a9:05:fa:72:55:
12:0d:5f:58:18:b6:15:7d:f5:45:3a:34:46:dc:d0:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1D:09:6A:03:19:03:32:CC:D6:7F:B3:5A:81:BF:6D:0E:82:56:21
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/0x0JagMZAzLM1n-zWoG_bQ6CViE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.221.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a3:c6:ce:46:42:f2:27:18:1f:f9:39:ef:3a:10:c6:70:b1:
9c:ed:32:a3:9d:82:60:c9:13:c7:d9:78:6e:3d:00:0d:a9:bc:
44:8d:ee:a8:87:8c:ad:ea:d9:bd:e1:c3:90:ba:19:81:f8:60:
5f:5f:c1:71:a4:e7:9a:86:ff:96:43:8d:eb:f7:63:b6:f5:d8:
73:7c:9c:4a:ce:35:2a:98:3f:25:1b:b4:f9:83:96:47:3d:95:
14:45:df:ac:e3:5a:82:9b:b1:c5:e8:53:c6:00:e7:f2:89:8c:
f8:ab:1f:8c:02:b4:82:33:79:47:ff:74:fc:ed:d1:52:6b:58:
e5:a3:4c:1c:53:6d:65:58:0f:18:b9:87:20:96:c2:4a:9e:3d:
b8:48:30:52:45:ee:ab:c4:d4:ba:c6:87:c2:88:c3:ac:17:06:
fd:74:1d:42:8f:b9:63:75:05:a5:07:15:cd:31:07:2f:d1:e8:
b6:cf:5b:fa:a5:0b:7c:4f:36:a0:78:3d:bd:80:2b:87:85:b0:
16:c7:96:81:7d:d0:7f:3c:9c:f1:db:09:67:a7:19:b7:16:28:
a7:92:a0:4f:bc:42:c6:d4:ab:30:0d:ec:2b:d4:1d:3a:f4:23:
0c:e3:23:05:79:2d:db:ea:b2:ad:43:a2:10:61:3a:d0:65:61:
35:58:6c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:44 2026 by rpki-client