Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/AoaXP5rKSG1JD-gZPfzEhii6ao4.roa
File: AoaXP5rKSG1JD-gZPfzEhii6ao4.roa (raw, json)
Hash identifier: 7/Nb7vLOXW6pgRyVH9E02UaA2MhX8C07cN1CRJM8rIA=
Subject key identifier: 02:86:97:3F:9A:CA:48:6D:49:0F:E8:19:3D:FC:C4:86:28:BA:6A:8E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0199FBBE578B8C0C41AD35AAA099209A5700
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/AoaXP5rKSG1JD-gZPfzEhii6ao4.roa
Signing time: Sun 19 Oct 2025 09:12:59 +0000
ROA not before: Sun 19 Oct 2025 09:12:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 194.58.222.0/24 maxlen: 24
194.87.153.0/24 maxlen: 24
195.58.57.0/24 maxlen: 24
212.193.16.0/24 maxlen: 24
212.193.17.0/24 maxlen: 24
212.193.19.0/24 maxlen: 24
212.193.21.0/24 maxlen: 24
212.193.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:be:57:8b:8c:0c:41:ad:35:aa:a0:99:20:9a:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 19 09:12:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0286973f9aca486d490fe8193dfcc48628ba6a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:5f:bf:1b:1b:38:c6:e9:a2:b9:f3:6c:db:
26:86:b8:b9:3d:c1:c8:41:50:9f:d9:c9:a9:50:21:
8f:66:50:17:4a:cb:cd:73:16:67:9d:15:36:b4:c9:
cf:57:fd:b4:65:04:32:44:10:4a:42:dc:5a:28:89:
be:b9:60:93:a2:85:cc:82:37:89:f7:8b:34:be:09:
7f:f1:a0:5f:fe:cc:10:da:35:a9:17:56:85:0c:07:
c0:84:48:52:be:30:db:de:4f:b8:44:85:83:a4:93:
b5:0f:03:3f:7d:46:d9:f5:64:97:f8:93:58:f2:36:
36:d5:ff:6d:2d:1f:24:a3:ca:21:d4:2d:30:40:d0:
01:0b:9c:9b:fb:94:b5:90:8e:e6:2e:65:e3:0c:7f:
3f:1d:d9:f0:2b:9b:a7:61:e1:7b:2e:2b:6a:7a:ce:
12:69:dc:ec:8e:1b:ba:50:0e:76:1f:05:aa:e1:ea:
c9:eb:35:9a:e5:da:fc:f2:b4:f9:95:f1:0a:c6:a6:
30:eb:1e:87:50:0c:a7:42:d4:da:fb:95:10:a8:82:
ca:c7:c2:1e:8e:cb:f1:f1:c3:a8:31:44:10:07:3e:
8a:5d:fa:30:42:b0:d9:af:35:b3:0e:2a:d0:95:24:
da:0f:8d:d0:7b:a9:de:d8:23:2a:fb:c3:3c:0a:df:
01:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:86:97:3F:9A:CA:48:6D:49:0F:E8:19:3D:FC:C4:86:28:BA:6A:8E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/AoaXP5rKSG1JD-gZPfzEhii6ao4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.222.0/24
194.87.153.0/24
195.58.57.0/24
212.193.16.0/23
212.193.19.0/24
212.193.21.0-212.193.22.255
Signature Algorithm: sha256WithRSAEncryption
4d:84:31:67:e4:7e:e1:d0:35:62:30:53:61:01:13:c7:09:06:
70:8f:88:91:06:3e:ce:28:4c:1c:62:64:9d:91:1e:05:77:47:
40:07:6c:62:0d:97:b8:6a:f5:09:60:5f:42:86:c1:eb:bc:d4:
b3:30:0c:09:ae:28:31:f5:5c:84:bc:02:2f:8c:8c:22:ce:c2:
6d:ba:1f:2a:13:8b:35:b1:33:d8:1b:e3:54:52:ed:4e:bd:e9:
98:1b:63:10:b1:c1:48:c5:da:c0:70:cd:cb:8c:53:7e:4d:f2:
21:c6:c3:c2:51:78:8a:33:94:3a:22:a8:25:24:f1:c9:3f:3f:
e0:f7:e0:2e:68:40:d0:8a:64:fd:30:b0:62:20:df:18:cf:cb:
68:7d:99:ab:50:c7:30:ae:f5:eb:c3:b0:14:56:45:7c:a2:4a:
77:9f:b7:95:54:fe:fc:1b:09:0d:16:da:e7:4b:1a:36:60:34:
74:58:c9:42:02:10:44:b9:7b:66:82:24:03:3f:4d:e8:90:1a:
52:56:73:e1:7a:fc:9d:23:6b:09:77:7c:37:d0:40:8f:37:3a:
bb:cc:61:78:1a:cd:96:32:b6:6c:3c:4c:b1:78:78:e4:11:86:
7f:a8:fa:7d:1f:0e:18:04:5d:5c:7c:d9:68:e1:6c:77:7a:a5:
76:15:6b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:56 2025 by rpki-client