Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/93UVF_CSKr9HS2r9ivD-x0ZdZcA.roa
File: 93UVF_CSKr9HS2r9ivD-x0ZdZcA.roa (raw, json)
Hash identifier: fggiKiNlO1nsG4KLwAlscuPV1NUEC9Woors8sqJhB4M=
Subject key identifier: F7:75:15:17:F0:92:2A:BF:47:4B:6A:FD:8A:F0:FE:C7:46:5D:65:C0
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 019C89C666ABEBA5FF8CD21C712199EE0220
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/93UVF_CSKr9HS2r9ivD-x0ZdZcA.roa
Signing time: Mon 23 Feb 2026 09:13:26 +0000
ROA not before: Mon 23 Feb 2026 09:13:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24768
IP address blocks: 5.253.181.0/24 maxlen: 24
5.253.182.0/24 maxlen: 24
5.253.183.0/24 maxlen: 24
82.102.7.0/24 maxlen: 24
94.46.12.0/22 maxlen: 22
94.46.12.0/24 maxlen: 24
94.46.13.0/24 maxlen: 24
94.46.14.0/24 maxlen: 24
94.46.15.0/24 maxlen: 24
94.46.16.0/22 maxlen: 22
94.46.16.0/24 maxlen: 24
94.46.20.0/22 maxlen: 22
94.46.20.0/24 maxlen: 24
94.46.21.0/24 maxlen: 24
94.46.22.0/24 maxlen: 24
94.46.23.0/24 maxlen: 24
94.46.25.0/24 maxlen: 24
94.46.26.0/24 maxlen: 24
94.46.27.0/24 maxlen: 24
94.46.28.0/22 maxlen: 22
94.46.28.0/24 maxlen: 24
94.46.29.0/24 maxlen: 24
94.46.30.0/24 maxlen: 24
94.46.31.0/24 maxlen: 24
94.46.128.0/21 maxlen: 21
94.46.132.0/24 maxlen: 24
94.46.133.0/24 maxlen: 24
94.46.160.0/20 maxlen: 24
94.46.176.0/21 maxlen: 21
94.46.179.0/24 maxlen: 24
94.46.182.0/24 maxlen: 24
109.71.40.0/21 maxlen: 21
109.71.40.0/24 maxlen: 24
109.71.41.0/24 maxlen: 24
109.71.42.0/24 maxlen: 24
109.71.43.0/24 maxlen: 24
109.71.44.0/24 maxlen: 24
109.71.45.0/24 maxlen: 24
109.71.46.0/24 maxlen: 24
109.71.47.0/24 maxlen: 24
130.185.80.0/21 maxlen: 21
130.185.81.0/24 maxlen: 24
130.185.82.0/24 maxlen: 24
130.185.83.0/24 maxlen: 24
130.185.84.0/24 maxlen: 24
130.185.85.0/24 maxlen: 24
130.185.86.0/24 maxlen: 24
130.185.87.0/24 maxlen: 24
185.15.20.0/22 maxlen: 22
185.15.20.0/24 maxlen: 24
185.15.22.0/24 maxlen: 24
185.15.23.0/24 maxlen: 24
2a00:1650::/33 maxlen: 33
2a00:1650:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:89:c6:66:ab:eb:a5:ff:8c:d2:1c:71:21:99:ee:02:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Feb 23 09:13:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7751517f0922abf474b6afd8af0fec7465d65c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:be:9f:30:0d:13:b6:4e:89:36:e6:22:58:bc:
23:30:61:e6:82:68:d8:88:14:28:c9:7e:77:44:09:
07:84:bd:fc:9f:d7:ca:c2:25:56:bf:64:00:25:39:
39:e9:4c:bf:3f:d9:67:f1:de:88:c7:c3:06:2d:ae:
9a:64:35:5c:1a:4b:e8:7f:ec:bb:96:e5:2a:d1:7b:
ee:7f:f4:7d:0d:a0:bd:2c:00:66:67:c2:e0:58:a1:
b6:21:a2:32:4a:c6:f9:44:fe:78:ad:e3:d6:ac:12:
fb:f7:bb:7c:dc:dd:70:5d:8a:ef:a2:53:a5:54:68:
e6:4c:3d:da:7d:3e:c1:ac:f8:3d:c5:5e:19:6f:55:
9c:fb:a8:ae:c4:fc:fb:67:2c:7a:ae:f3:dc:7d:d9:
a7:83:67:44:eb:40:4e:2e:f5:45:09:9b:c1:b1:a8:
5b:04:cd:9f:83:3d:7b:0b:6b:35:25:11:a4:93:c0:
6d:3d:cf:55:4a:f4:95:55:77:4c:eb:57:7f:45:f6:
b3:b2:b6:85:d6:97:1b:57:09:e3:74:67:bf:9e:95:
85:5c:f8:62:ff:96:c3:f0:dd:f7:cb:e6:1c:d0:da:
9d:1d:d3:42:dc:52:67:7c:20:9e:a8:60:16:a8:b0:
4c:d4:5b:cc:b4:0c:34:b6:5b:03:51:39:7a:55:59:
bd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:75:15:17:F0:92:2A:BF:47:4B:6A:FD:8A:F0:FE:C7:46:5D:65:C0
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/93UVF_CSKr9HS2r9ivD-x0ZdZcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.181.0-5.253.183.255
82.102.7.0/24
94.46.12.0-94.46.23.255
94.46.25.0-94.46.31.255
94.46.128.0/21
94.46.160.0-94.46.183.255
109.71.40.0/21
130.185.80.0/21
185.15.20.0/22
IPv6:
2a00:1650::/32
Signature Algorithm: sha256WithRSAEncryption
3b:df:22:2b:e9:4e:57:69:69:fe:d6:c7:a9:49:74:1a:27:84:
1c:b6:5a:0f:fe:76:ed:38:08:30:99:13:a8:9a:48:ee:8b:e2:
ed:5c:13:8e:38:c9:2e:8a:e4:6b:13:5e:12:7c:f5:d0:5d:56:
3b:c2:a7:22:a3:2e:13:93:2b:74:6a:0a:f5:0e:ca:b0:d4:95:
f7:3d:01:ca:a9:a4:fa:cd:8d:0b:cb:12:fb:06:fd:0d:55:6f:
35:42:04:30:e1:14:75:28:08:73:0d:dd:e1:66:7e:76:58:7e:
e1:d5:04:3a:bf:73:80:a6:ad:e4:f2:7d:38:5c:b6:2e:40:a8:
23:43:14:b9:c4:d8:73:79:40:e3:2a:bd:36:c2:ac:e4:0d:ff:
67:53:9a:b7:d8:0a:bd:10:cd:03:70:c8:bc:18:b3:77:7f:14:
b9:af:45:1d:39:8a:e0:57:c9:89:db:79:d6:da:61:86:92:5e:
4e:24:8c:06:9b:41:6f:ea:2b:2c:4d:1a:bb:a8:c6:c3:ed:a1:
c3:46:88:fa:85:0f:cc:18:e3:b0:89:35:4a:78:69:e7:65:e6:
55:40:4f:13:e7:6c:6c:b4:45:10:f8:58:0a:88:6f:be:de:dd:
14:3b:d1:1c:03:bf:49:c3:70:42:b1:58:56:81:33:72:51:24:
fa:6f:55:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:55 2026 by rpki-client