Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/5a1c87-7739-4672-8058-4a44776ac219/1/Aj4yGccKYxmPnz1OvemeX_dzpL8.roa
File: Aj4yGccKYxmPnz1OvemeX_dzpL8.roa (raw, json)
Hash identifier: zSjpA7YXoTF8npOilyW1ra1bi1isDJneYVXWLE3M1nk=
Subject key identifier: 02:3E:32:19:C7:0A:63:19:8F:9F:3D:4E:BD:E9:9E:5F:F7:73:A4:BF
Certificate issuer: /CN=f602d7f2418ae74fff15d2f49c4765be848305cf
Certificate serial: 01A059AE075D2B7287F8349AABF88EFC8312
Authority key identifier: F6:02:D7:F2:41:8A:E7:4F:FF:15:D2:F4:9C:47:65:BE:84:83:05:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gLX8kGK50__FdL0nEdlvoSDBc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a1c87-7739-4672-8058-4a44776ac219/1/Aj4yGccKYxmPnz1OvemeX_dzpL8.roa
Signing time: Mon 31 Aug 2026 21:16:12 +0000
ROA not before: Mon 31 Aug 2026 21:16:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219430
IP address blocks: 206.109.204.0/23 maxlen: 23
2a02:d540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/5a1c87-7739-4672-8058-4a44776ac219/1/9gLX8kGK50__FdL0nEdlvoSDBc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/5a1c87-7739-4672-8058-4a44776ac219/1/9gLX8kGK50__FdL0nEdlvoSDBc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gLX8kGK50__FdL0nEdlvoSDBc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:ae:07:5d:2b:72:87:f8:34:9a:ab:f8:8e:fc:83:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f602d7f2418ae74fff15d2f49c4765be848305cf
Validity
Not Before: Aug 31 21:16:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=023e3219c70a63198f9f3d4ebde99e5ff773a4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:9a:4a:e3:0d:f3:13:76:42:27:32:71:60:
73:b2:15:24:d8:d2:c7:86:8c:69:bb:b3:dd:f4:a9:
7f:65:47:9d:9d:49:d8:91:41:d8:7e:f7:c9:1b:c3:
65:eb:01:51:64:df:a5:29:d7:e9:7b:c6:25:7a:6f:
0b:ab:09:51:85:72:8c:bc:6d:6e:0c:e7:ed:b7:41:
13:71:18:36:57:c3:34:1c:2c:67:d8:03:2d:0b:f2:
b5:08:26:cf:db:28:a9:37:04:c8:3f:4e:c7:58:e8:
7d:a1:c0:64:36:64:17:d0:5c:5f:70:96:bc:2a:05:
31:26:b4:da:89:75:c5:10:9f:ae:d9:2e:40:b5:48:
c9:05:93:7d:eb:32:07:83:e3:0d:31:01:3a:68:ec:
a8:64:12:81:ba:1e:f3:b8:4a:83:e3:30:a5:40:d3:
97:d7:b5:7c:e5:10:6e:79:fc:20:30:c3:67:93:1f:
01:4a:2b:e1:db:7b:e0:c3:b5:30:76:32:87:6a:bb:
e3:9b:e3:29:86:a9:b3:c5:0a:b7:fa:12:1e:75:24:
bd:d8:7c:f9:28:77:a5:f7:b3:e5:73:04:92:de:27:
39:d4:e9:dd:8d:28:82:69:48:c5:cb:e3:5a:34:eb:
c4:ec:67:e1:3f:89:aa:a0:b8:38:27:46:d6:b5:eb:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3E:32:19:C7:0A:63:19:8F:9F:3D:4E:BD:E9:9E:5F:F7:73:A4:BF
X509v3 Authority Key Identifier:
keyid:F6:02:D7:F2:41:8A:E7:4F:FF:15:D2:F4:9C:47:65:BE:84:83:05:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gLX8kGK50__FdL0nEdlvoSDBc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a1c87-7739-4672-8058-4a44776ac219/1/Aj4yGccKYxmPnz1OvemeX_dzpL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a1c87-7739-4672-8058-4a44776ac219/1/9gLX8kGK50__FdL0nEdlvoSDBc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.109.204.0/23
IPv6:
2a02:d540::/29
Signature Algorithm: sha256WithRSAEncryption
df:12:c5:2b:a0:ee:e5:39:d6:b0:db:d8:ad:68:09:18:f5:14:
d2:29:9d:be:e0:7b:51:66:b1:8f:0e:63:d9:9b:f9:dc:8b:6c:
26:d5:ac:9f:0e:64:47:9f:74:0a:c5:93:a7:5a:1a:2e:ae:a9:
9b:24:c5:54:8f:b2:47:de:cc:6a:ee:fd:0f:50:ed:7d:c8:a9:
c1:c7:a3:6f:1e:91:3a:51:e7:48:4d:d7:5a:2e:9f:c8:c2:e0:
e2:4e:3f:4b:b0:3c:dd:27:50:66:c1:ba:f3:59:b8:f1:83:e1:
63:f2:2e:14:5d:68:51:80:b9:c8:70:4e:c1:dc:d3:81:a9:f6:
48:ea:ac:c6:b7:a4:a5:77:8a:c9:7b:03:ec:1a:aa:1b:6a:e9:
11:cb:de:18:e6:4b:61:72:8f:ae:c7:9e:28:d4:92:4b:ac:33:
e1:7e:65:9d:02:02:ab:de:c2:03:4b:47:ec:ad:6e:dc:49:8a:
81:54:8e:9a:23:eb:6b:04:59:44:cd:52:f4:55:79:23:a3:4c:
98:e0:ba:d7:f9:bb:db:b1:1c:fb:e3:e4:b3:d1:6e:34:17:28:
14:88:6a:32:80:ae:b0:cb:65:b2:77:26:03:ae:22:c5:db:4f:
61:d3:f6:73:d7:5e:77:5f:d8:3f:b3:28:f0:6d:30:4d:2d:16:
bf:3e:33:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:51:13 2026 by rpki-client