Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/0OuuyqY3IwdsfAtd88x0rLTDEmc.roa
File: 0OuuyqY3IwdsfAtd88x0rLTDEmc.roa (raw, json)
Hash identifier: Qq6wGpoV1AfHrD9+W3Yp1kNkuV/yBgqjGqUUQJ0ciVY=
Subject key identifier: D0:EB:AE:CA:A6:37:23:07:6C:7C:0B:5D:F3:CC:74:AC:B4:C3:12:67
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019C3CF1EBFB7367C29DF545698251F8B25E
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/0OuuyqY3IwdsfAtd88x0rLTDEmc.roa
Signing time: Sun 08 Feb 2026 11:10:13 +0000
ROA not before: Sun 08 Feb 2026 11:10:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 93.88.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:3c:f1:eb:fb:73:67:c2:9d:f5:45:69:82:51:f8:b2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Feb 8 11:10:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0ebaecaa63723076c7c0b5df3cc74acb4c31267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:d9:a0:81:b8:9f:a1:f7:9f:c6:a2:e1:a6:
6d:3c:2b:f1:bf:b9:40:c8:21:27:41:3f:ae:80:9c:
36:20:19:dd:b8:50:b3:27:77:41:61:67:0a:ec:03:
ff:19:0f:73:03:94:fb:08:44:dc:9e:29:dc:15:a3:
35:7b:d8:49:ae:73:d2:32:c5:9b:eb:d8:bc:38:48:
b9:7a:6e:35:5c:34:c6:73:c9:5f:86:d0:9d:3f:18:
8e:ba:45:57:bb:ec:8f:d2:30:1d:7b:e5:05:f8:4c:
69:70:b1:99:97:ec:46:66:d5:f0:dd:dd:14:5b:5a:
84:2e:c7:b4:e5:17:08:2c:6d:aa:d3:b7:af:25:21:
3c:94:1e:a0:37:6f:82:b7:39:cd:b8:db:2d:43:4d:
c7:52:15:3e:ae:93:35:71:00:eb:21:75:99:d3:e3:
35:89:61:30:20:dd:ca:f2:82:c1:39:6c:91:84:90:
48:75:23:00:1e:49:0e:c6:f9:26:0e:32:b2:53:6e:
a3:e0:d9:ab:42:a4:27:04:9f:eb:18:d6:40:16:9e:
d4:aa:39:6a:4e:fb:c5:db:7b:b6:03:79:c4:cc:be:
2c:5a:e7:61:f2:aa:6b:c8:a5:c2:47:79:42:b8:66:
0e:ce:b9:c6:03:ed:b0:9c:b3:2b:59:fb:6a:d2:6e:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EB:AE:CA:A6:37:23:07:6C:7C:0B:5D:F3:CC:74:AC:B4:C3:12:67
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/0OuuyqY3IwdsfAtd88x0rLTDEmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.153.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d9:85:7b:b9:88:3f:d4:d9:c7:97:4a:f9:4c:c1:46:5b:47:
fd:80:66:96:8a:d0:33:f4:ab:ff:21:f0:ba:c3:12:9c:76:40:
8e:d5:04:e4:3c:ab:7c:6a:b7:0b:b8:87:3c:d5:99:c9:58:06:
e9:00:d0:e4:e0:cd:4c:6e:68:2c:8c:5e:55:50:a3:0c:71:89:
4a:34:95:70:e7:76:a8:d8:eb:4b:7a:12:8a:98:02:7f:4f:1d:
ae:4a:fa:f4:ad:74:35:20:ef:8e:45:0e:58:c8:66:34:f4:ec:
0b:f5:45:21:dc:f0:ed:c1:c5:95:6a:e4:59:84:a1:4c:e4:28:
92:f5:3d:18:1d:4d:fd:54:54:5a:1b:03:3b:de:67:c4:b5:b8:
1d:74:97:62:3f:dc:30:cb:a4:be:49:36:87:8d:c7:4f:f3:eb:
55:d0:62:b9:37:3e:6a:df:a4:38:a7:02:b6:06:f9:f6:2d:73:
22:b3:40:92:c1:ce:db:c0:c1:1e:7b:0e:ce:ba:0a:ed:b9:6f:
76:e7:5c:4d:09:81:44:26:b6:c3:68:30:3d:0c:91:f2:33:41:
d6:2a:71:9a:8b:f2:33:f8:96:18:73:52:ee:ee:28:32:b6:f1:
39:41:e9:d7:3f:2c:08:39:a8:0b:18:55:5d:b5:20:bb:1f:ab:
72:b9:14:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:26:33 2026 by rpki-client