Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/Aa1Io9t3sIo-WtxsEohOkeWJdAM.roa
File: Aa1Io9t3sIo-WtxsEohOkeWJdAM.roa (raw, json)
Hash identifier: S+aGx+n6ISxqCC55cjAbl1MbyTBL4Nwo2Wu4VXGYGf0=
Subject key identifier: 01:AD:48:A3:DB:77:B0:8A:3E:5A:DC:6C:12:88:4E:91:E5:89:74:03
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: 01A0CE710D8E510AA4EBFFC66F3BBD3DA6FB
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/Aa1Io9t3sIo-WtxsEohOkeWJdAM.roa
Signing time: Wed 23 Sep 2026 13:25:10 +0000
ROA not before: Wed 23 Sep 2026 13:25:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35303
IP address blocks: 46.70.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:71:0d:8e:51:0a:a4:eb:ff:c6:6f:3b:bd:3d:a6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Sep 23 13:25:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01ad48a3db77b08a3e5adc6c12884e91e5897403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:e6:90:c9:26:a6:0f:61:65:1e:79:5f:a7:
59:12:c2:b9:bf:99:94:0c:a4:96:cc:b3:8d:44:21:
7d:ea:71:9a:e2:54:2f:b2:e4:d4:c6:14:40:ca:04:
4b:85:b2:21:ac:b6:ca:10:66:d9:e9:5d:11:89:76:
89:21:4d:2e:fc:2b:d1:16:4b:60:c8:ac:a3:c0:ae:
fa:5b:8c:ca:b0:c8:76:9f:11:70:63:79:11:18:9b:
cb:af:83:a0:4a:73:0f:d1:5e:d8:25:56:46:de:48:
85:5c:39:e5:d3:f1:d5:9f:91:fc:64:c5:56:56:e0:
23:87:df:cf:b5:97:69:e7:06:2c:c2:48:54:cd:22:
82:4c:a8:92:b2:48:02:2b:12:23:22:32:2e:f7:ff:
b5:ef:4b:03:1a:33:e6:a0:f7:2f:12:b8:7c:27:ac:
5d:a1:b5:26:f2:45:6b:7d:9e:49:52:19:b9:cd:ab:
6c:59:98:7b:ab:52:2a:78:e0:9a:5a:4e:7a:95:86:
76:96:96:a5:e5:f8:23:ac:f5:14:88:09:7c:c0:03:
06:ba:09:9f:39:ea:95:f1:ab:8e:dc:c6:68:8a:cc:
b2:5e:de:b3:40:a5:49:49:bf:2e:bb:26:e6:72:60:
01:70:64:79:f1:ee:b3:2f:1f:1d:7a:22:89:03:6d:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AD:48:A3:DB:77:B0:8A:3E:5A:DC:6C:12:88:4E:91:E5:89:74:03
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/Aa1Io9t3sIo-WtxsEohOkeWJdAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.70.248.0/23
Signature Algorithm: sha256WithRSAEncryption
98:6b:88:bd:0c:cc:1e:45:58:de:ca:7c:8c:a4:e5:7f:f8:d9:
b9:00:61:a1:68:f2:0a:7c:33:65:31:a0:5a:67:67:57:c4:7e:
c7:6e:00:2b:13:1f:05:78:49:99:8b:21:79:be:e9:6c:38:b3:
5f:aa:2d:93:71:1b:32:11:94:98:07:31:07:36:1a:dc:8a:10:
c0:2e:d5:1c:25:28:41:5b:0d:dc:e5:6d:d2:5f:3d:f3:f4:f0:
c6:e7:a0:68:05:02:d9:08:fd:93:15:03:43:3d:96:87:a9:cf:
5c:a0:bf:6f:d4:ea:3c:70:f0:7a:7b:8a:87:21:b8:9a:b3:1f:
8c:60:08:ed:fd:ac:c7:67:96:e7:35:33:7c:b7:e6:13:90:29:
2a:dc:fa:3b:86:06:70:e2:9d:33:28:9a:cd:03:40:70:f4:7c:
cc:e6:dd:82:c0:0c:fe:e3:fb:c1:95:66:ed:43:cd:92:ef:4d:
2d:92:c5:8e:84:9a:d6:e6:28:39:79:45:ac:e8:86:8c:d5:d8:
93:25:87:dd:1b:1d:82:5b:9c:b5:d6:90:31:12:55:0f:df:b6:
12:3c:22:03:38:3f:96:6d:f0:7c:bc:6d:5f:53:dd:43:f8:44:
da:44:6c:98:95:dd:13:6a:e8:ce:ef:b0:a3:9c:88:c9:03:46:
64:35:59:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDOcQ2OUQqk6//Gbzu9Pab7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZmYxNTI3OGY1M2Y3NzYxYzJmM2QzM2RkOWJlNzdhOGE0
ZmJkOTQwHhcNMjYwOTIzMTMyNTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWFkNDhhM2RiNzdiMDhhM2U1YWRjNmMxMjg4NGU5MWU1ODk3NDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKbmkMkmpg9hZR55X6dZEsK5v5mU
DKSWzLONRCF96nGa4lQvsuTUxhRAygRLhbIhrLbKEGbZ6V0RiXaJIU0u/CvRFktg
yKyjwK76W4zKsMh2nxFwY3kRGJvLr4OgSnMP0V7YJVZG3kiFXDnl0/HVn5H8ZMVW
VuAjh9/PtZdp5wYswkhUzSKCTKiSskgCKxIjIjIu9/+170sDGjPmoPcvErh8J6xd
obUm8kVrfZ5JUhm5zatsWZh7q1IqeOCaWk56lYZ2lpal5fgjrPUUiAl8wAMGugmf
OeqV8auO3MZoisyyXt6zQKVJSb8uuybmcmABcGR58e6zLx8deiKJA20I4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAGtSKPbd7CKPlrcbBKITpHliXQDMB8GA1UdIwQY
MBaAFJv/FSePU/d2HC89M92b53qKT72UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDIt
NTY5NzI0OWY1MTI0LzEvQWExSW85dDNzSW8tV3R4c0VvaE9rZVdKZEFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDItNTY5NzI0OWY1MTI0
LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLkb4MA0G
CSqGSIb3DQEBCwUAA4IBAQCYa4i9DMweRVjeynyMpOV/+Nm5AGGhaPIKfDNlMaBa
Z2dXxH7HbgArEx8FeEmZiyF5vulsOLNfqi2TcRsyEZSYBzEHNhrcihDALtUcJShB
Ww3c5W3SXz3z9PDG56BoBQLZCP2TFQNDPZaHqc9coL9v1Oo8cPB6e4qHIbiasx+M
YAjt/azHZ5bnNTN8t+YTkCkq3Po7hgZw4p0zKJrNA0Bw9HzM5t2CwAz+4/vBlWbt
Q82S700tksWOhJrW5ig5eUWs6IaM1diTJYfdGx2CW5y11pAxElUP37YSPCIDOD+W
bfB8vG1fU91D+ETaRGyYld0TaujO77CjnIjJA0ZkNVnv
-----END CERTIFICATE-----
Generated at Tue Sep 29 13:07:22 2026 by rpki-client