Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/AVsM_B91QLOYyB85frvoW_2vxzY.roa
File: AVsM_B91QLOYyB85frvoW_2vxzY.roa (raw, json)
Hash identifier: VQM9sTnQP9CeLBnxtCMo3/J75hwrr3cYanvudd+GT6Q=
Subject key identifier: 01:5B:0C:FC:1F:75:40:B3:98:C8:1F:39:7E:BB:E8:5B:FD:AF:C7:36
Certificate issuer: /CN=47f0b860e1350e087a06793181074f47b7953fa1
Certificate serial: 01A0CEDDE49BD8EC85CAA5160100967E752F
Authority key identifier: 47:F0:B8:60:E1:35:0E:08:7A:06:79:31:81:07:4F:47:B7:95:3F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/AVsM_B91QLOYyB85frvoW_2vxzY.roa
Signing time: Wed 23 Sep 2026 15:24:03 +0000
ROA not before: Wed 23 Sep 2026 15:24:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24326
IP address blocks: 153.76.232.0/21 maxlen: 24
153.76.232.0/22 maxlen: 24
153.76.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:dd:e4:9b:d8:ec:85:ca:a5:16:01:00:96:7e:75:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f0b860e1350e087a06793181074f47b7953fa1
Validity
Not Before: Sep 23 15:24:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=015b0cfc1f7540b398c81f397ebbe85bfdafc736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:c3:60:81:f3:2e:4a:32:a1:c0:03:54:53:
09:75:cd:4e:80:d3:a3:1f:9a:55:1f:1e:85:01:b8:
23:0e:6a:fb:da:64:85:3f:46:90:e7:cd:be:49:74:
6b:96:ad:37:2a:2c:69:34:cf:a3:4f:4c:44:74:d1:
f3:83:fb:7c:d4:89:a0:15:3b:86:5e:9f:e8:01:dc:
18:52:6c:b8:9a:37:b7:ac:2c:c7:ee:53:60:18:ee:
f8:21:60:2d:5d:c2:2a:10:53:60:82:2d:53:f4:45:
bb:cb:29:5b:07:ac:43:1d:a6:f1:ad:23:5e:e0:1c:
5c:49:7c:aa:3a:14:57:ea:9c:81:e0:c6:d0:23:d7:
cb:c8:f4:e1:ba:01:a1:24:7a:ee:4e:a9:ea:fe:93:
2b:05:80:96:3e:91:61:6d:2b:c7:0d:6b:21:b8:df:
16:4f:18:6f:43:76:54:50:18:7b:47:8c:30:2b:44:
6b:1c:62:68:92:95:35:77:0a:87:10:51:6e:3a:c6:
82:85:40:eb:7b:f9:a0:4a:3a:09:b9:6c:4c:66:12:
48:12:90:1b:90:91:cf:d0:a9:7c:2c:28:cc:52:25:
5a:73:5b:2b:43:f0:cc:8f:ae:e5:9e:d4:9d:b9:1c:
56:76:94:46:e9:bd:b1:39:25:25:7e:84:02:34:c0:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5B:0C:FC:1F:75:40:B3:98:C8:1F:39:7E:BB:E8:5B:FD:AF:C7:36
X509v3 Authority Key Identifier:
keyid:47:F0:B8:60:E1:35:0E:08:7A:06:79:31:81:07:4F:47:B7:95:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/AVsM_B91QLOYyB85frvoW_2vxzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.232.0/21
Signature Algorithm: sha256WithRSAEncryption
46:c7:71:d0:c7:20:57:f7:f5:19:63:8f:d4:4e:b4:45:cd:ac:
72:ac:1c:34:d7:e1:83:e0:1c:5e:00:0c:e5:42:1d:80:4c:65:
e4:a9:e5:0f:e9:ac:b7:34:4e:aa:63:05:6d:f1:bc:95:7f:3a:
7b:c4:10:0d:8c:f5:d6:75:33:55:e2:ab:3c:49:d0:b4:52:93:
41:3a:c4:11:43:81:50:fa:0d:6b:bc:ed:6d:85:9e:2f:0b:a4:
e1:22:35:08:c4:2b:b1:45:53:db:bf:5b:de:e5:ad:99:3c:18:
08:fe:db:86:28:74:bb:96:b2:57:3b:2d:25:d2:9d:3d:0e:04:
e3:30:8d:b5:6a:c5:54:72:35:41:6c:15:29:df:54:5a:3d:83:
af:1d:3f:06:4a:8b:0b:a0:2e:15:2c:76:8b:24:d3:26:a7:8f:
1e:0c:c3:41:f6:db:90:fa:c9:79:22:03:99:ca:fa:c5:5c:dc:
57:db:d3:30:bf:13:df:78:7b:d1:25:4a:2f:51:50:28:17:7b:
7d:29:3f:13:79:93:18:4e:64:94:4c:f0:e3:bb:50:7c:9b:56:
8b:3d:01:53:f9:82:99:bc:bd:2e:57:89:e8:ff:f9:31:cd:7f:
19:ab:8a:45:2c:a0:92:09:8b:01:e2:a1:8b:b2:43:73:0d:7a:
d3:90:43:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:51:15 2026 by rpki-client