Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/IMr3NO1SrUrQt7cnrfSqxhavDeg.roa
File: IMr3NO1SrUrQt7cnrfSqxhavDeg.roa (raw, json)
Hash identifier: svZlzOG84qB/ubvVsJUgoWUNTAczB6CkyCQMs1ByCnU=
Subject key identifier: 20:CA:F7:34:ED:52:AD:4A:D0:B7:B7:27:AD:F4:AA:C6:16:AF:0D:E8
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A0E1BDE93FBFC4DEA62EC4571EFA9FB1F2
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/IMr3NO1SrUrQt7cnrfSqxhavDeg.roa
Signing time: Sun 27 Sep 2026 07:21:54 +0000
ROA not before: Sun 27 Sep 2026 07:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42831
IP address blocks: 93.88.152.0/24 maxlen: 24
93.88.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:bd:e9:3f:bf:c4:de:a6:2e:c4:57:1e:fa:9f:b1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Sep 27 07:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20caf734ed52ad4ad0b7b727adf4aac616af0de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:bc:e1:59:9f:5f:3e:8f:16:f9:0f:c4:c8:
4e:69:42:70:0d:63:b4:22:36:17:f2:83:74:38:6f:
46:54:b3:a7:54:e2:ab:29:47:a0:cb:8a:a2:fe:14:
88:fc:24:7e:12:3f:1f:3a:4a:56:16:03:96:f2:f4:
cb:e5:87:ef:9f:b8:97:32:3f:7c:0e:0b:42:3b:ae:
28:0c:de:eb:e5:25:ce:90:4b:a7:7c:29:10:c3:8f:
fd:e9:14:82:bc:d9:d6:45:15:a1:56:11:12:3a:86:
25:a2:d2:74:f3:a0:fe:d3:cd:70:f1:12:fd:ba:e7:
47:ee:0a:6b:38:80:ef:4e:89:fd:36:80:03:3b:09:
a4:41:51:86:29:5e:49:20:47:ca:43:02:62:1a:7e:
f3:02:2d:25:3b:7b:8c:07:13:45:4c:06:50:27:5d:
a2:27:aa:d6:e0:0f:f6:b8:b8:1c:74:74:25:82:83:
3a:89:e3:3c:2f:d7:10:7e:d2:4b:e4:94:30:a5:8e:
37:8e:7a:f3:ac:a0:7e:5d:00:8a:fa:09:c2:ac:f5:
81:24:fa:7e:ba:e9:e3:18:a7:17:11:35:31:f5:c5:
2f:40:6a:91:90:c2:99:0d:bd:99:73:40:49:c5:07:
cc:70:6d:5a:4b:67:94:f7:83:87:4c:4f:0f:c9:9c:
18:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CA:F7:34:ED:52:AD:4A:D0:B7:B7:27:AD:F4:AA:C6:16:AF:0D:E8
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/IMr3NO1SrUrQt7cnrfSqxhavDeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.152.0/24
93.88.159.0/24
Signature Algorithm: sha256WithRSAEncryption
86:3a:f2:62:a3:2c:7b:29:15:36:07:c8:82:d0:40:38:7c:63:
9d:81:0a:98:45:da:68:fa:ea:98:04:19:17:d9:81:d7:d2:4f:
61:11:12:b3:4e:31:ae:86:49:98:7d:ef:c1:57:ac:b0:10:28:
2c:ec:f3:01:87:5b:3c:f9:67:0e:3b:c2:ec:29:28:68:f1:9c:
5c:ec:3d:a6:ea:ef:5d:52:f7:56:8c:71:11:c2:0a:25:9b:8a:
48:0e:12:7b:d7:f0:2d:f7:a3:f3:09:47:28:cd:77:e6:42:1f:
b1:3e:a9:79:db:ee:b3:62:76:0b:c3:47:26:f2:cc:7b:f8:05:
09:59:4e:2f:5f:e2:1b:94:3f:bb:97:b8:6e:ce:22:5f:a1:68:
4e:57:24:62:70:eb:ec:40:b8:18:df:8d:60:6c:3a:03:47:9f:
1f:8d:90:0b:cc:ec:5e:18:45:98:82:dd:c3:9b:16:19:88:43:
9d:90:bf:b3:e4:f3:82:14:fa:49:c2:c5:51:20:5e:fa:b4:5e:
b4:4e:06:33:fe:0b:92:04:a0:d2:f3:8a:ed:e7:9f:81:ff:e9:
9c:b0:bf:7d:f5:cc:56:02:0b:45:1c:31:c0:4b:62:12:1c:d7:
a7:9f:95:d5:8d:d7:f2:42:89:56:ed:60:cd:6c:f7:91:11:f4:
15:0c:25:7e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDhvek/v8Tepi7EVx76n7HyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjYwOTI3MDcyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGNhZjczNGVkNTJhZDRhZDBiN2I3MjdhZGY0YWFjNjE2YWYwZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti284VmfXz6PFvkPxMhOaUJwDWO0
IjYX8oN0OG9GVLOnVOKrKUegy4qi/hSI/CR+Ej8fOkpWFgOW8vTL5Yfvn7iXMj98
DgtCO64oDN7r5SXOkEunfCkQw4/96RSCvNnWRRWhVhESOoYlotJ086D+081w8RL9
uudH7gprOIDvTon9NoADOwmkQVGGKV5JIEfKQwJiGn7zAi0lO3uMBxNFTAZQJ12i
J6rW4A/2uLgcdHQlgoM6ieM8L9cQftJL5JQwpY43jnrzrKB+XQCK+gnCrPWBJPp+
uunjGKcXETUx9cUvQGqRkMKZDb2Zc0BJxQfMcG1aS2eU94OHTE8PyZwY+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCDK9zTtUq1K0Le3J630qsYWrw3oMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvSU1yM05PMVNyVXJRdDdjbnJmU3F4aGF2RGVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXViYAwQA
XVifMA0GCSqGSIb3DQEBCwUAA4IBAQCGOvJioyx7KRU2B8iC0EA4fGOdgQqYRdpo
+uqYBBkX2YHX0k9hERKzTjGuhkmYfe/BV6ywECgs7PMBh1s8+WcOO8LsKSho8Zxc
7D2m6u9dUvdWjHERwgolm4pIDhJ71/At96PzCUcozXfmQh+xPql52+6zYnYLw0cm
8sx7+AUJWU4vX+IblD+7l7huziJfoWhOVyRicOvsQLgY341gbDoDR58fjZALzOxe
GEWYgt3DmxYZiEOdkL+z5POCFPpJwsVRIF76tF60TgYz/guSBKDS84rt55+B/+mc
sL999cxWAgtFHDHAS2ISHNenn5XVjdfyQolW7WDNbPeREfQVDCV+
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:33:43 2026 by rpki-client