Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/AMpnzyhYQ7V0ivkPgxFinozh8t8.roa
File: AMpnzyhYQ7V0ivkPgxFinozh8t8.roa (raw, json)
Hash identifier: 8o30akyQRir0f8xUZavCnmMHTgJGbLRFq1/OxwOyPiY=
Subject key identifier: 00:CA:67:CF:28:58:43:B5:74:8A:F9:0F:83:11:62:9E:8C:E1:F2:DF
Certificate issuer: /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Certificate serial: 01994C9150138B763BF882D1241F968860BD
Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/AMpnzyhYQ7V0ivkPgxFinozh8t8.roa
Signing time: Mon 15 Sep 2025 08:50:15 +0000
ROA not before: Mon 15 Sep 2025 08:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211501
IP address blocks: 46.33.27.0/24 maxlen: 24
194.26.238.0/24 maxlen: 24
2a11:75c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4c:91:50:13:8b:76:3b:f8:82:d1:24:1f:96:88:60:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Validity
Not Before: Sep 15 08:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00ca67cf285843b5748af90f8311629e8ce1f2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:f3:bb:20:c5:c4:07:41:dd:eb:91:02:03:
f5:9b:ad:29:f2:43:10:7d:cd:8e:c6:80:32:30:7c:
0e:f2:35:46:43:a3:0f:18:3d:e8:a9:2f:11:b6:61:
23:b4:7e:7a:8c:e6:ac:9a:55:25:df:ae:6d:53:22:
da:ea:5a:5e:9b:4c:f2:8b:a5:54:94:48:1b:f3:49:
59:31:99:24:72:b1:26:fa:80:14:50:49:27:bf:45:
9f:87:ad:6c:e8:14:a9:81:50:91:de:30:1f:c0:1a:
af:32:35:b0:a7:17:91:73:0c:eb:1e:3d:c9:97:47:
a0:99:28:2e:c7:76:45:7a:75:10:40:fd:d6:74:4d:
84:51:38:62:57:ae:96:66:3b:dd:bd:c2:8c:cc:cd:
47:73:e7:fd:99:b2:65:cc:5e:0c:80:d0:ae:ac:3f:
5d:2c:4d:17:5d:7c:45:a6:4c:8d:54:da:07:3e:00:
83:bc:83:e9:aa:fe:d8:52:a9:fb:da:68:55:28:4e:
b3:78:f2:2b:d7:04:c6:4a:30:cd:15:11:76:e5:c9:
d7:f7:f7:d3:ff:e1:6b:0f:d3:ef:1e:7a:44:59:e5:
10:44:9f:8f:7f:e1:b6:e7:80:7d:88:f8:b5:c1:91:
55:da:ea:d8:5c:06:93:d2:72:ab:a7:6f:a3:69:ed:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CA:67:CF:28:58:43:B5:74:8A:F9:0F:83:11:62:9E:8C:E1:F2:DF
X509v3 Authority Key Identifier:
keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/AMpnzyhYQ7V0ivkPgxFinozh8t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.27.0/24
194.26.238.0/24
IPv6:
2a11:75c0::/29
Signature Algorithm: sha256WithRSAEncryption
42:d8:a6:16:f4:3f:f5:4c:c0:be:eb:03:af:40:f6:7e:70:eb:
6f:c2:7a:23:01:06:07:32:38:1b:53:93:93:e2:65:c0:4f:ae:
23:b1:84:be:8a:38:4c:e5:fc:1e:e3:b0:20:89:fd:2f:d4:28:
86:c9:d7:82:ae:16:f4:39:e3:1c:93:b6:9a:56:0d:5d:a1:5f:
7f:6f:93:98:97:70:77:f5:30:77:44:6c:31:aa:ef:4c:b5:4c:
a8:1f:52:90:33:d7:60:3b:78:15:85:ea:4e:89:71:5d:99:cb:
26:f9:a8:a6:64:48:9d:ea:ad:b8:30:4a:c4:ef:fa:cf:a1:cb:
3c:65:7b:e8:2f:9e:3a:ee:ce:c6:ed:f2:a2:63:21:af:3d:91:
a2:d2:5a:6b:ee:e0:30:1a:18:11:e6:6e:ae:f0:a8:b7:51:d4:
88:9f:fd:b8:3b:d1:aa:3c:a1:94:0b:aa:33:b0:95:0e:0f:9a:
74:e0:8c:3b:f1:3e:9b:22:fd:af:40:92:3d:8a:f0:cf:91:00:
15:45:5f:47:c0:9e:1f:64:6e:42:a9:1a:23:24:e1:dc:5e:2e:
fb:e2:49:b0:df:c5:06:a0:d0:de:56:fb:02:08:38:b5:80:d2:
35:3f:d0:ba:9a:18:d9:ce:6f:56:c7:52:5b:d6:67:df:0b:10:
ec:40:9c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:00 2025 by rpki-client