Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/AWbOy_liNGdmx811xpn2huXogl0.roa
File: AWbOy_liNGdmx811xpn2huXogl0.roa (raw, json)
Hash identifier: s8PFr9TztoBDWe3VrYxnh1Hk1tgm8rWogms1QJku0RY=
Subject key identifier: 01:66:CE:CB:F9:62:34:67:66:C7:CD:75:C6:99:F6:86:E5:E8:82:5D
Certificate issuer: /CN=d539b8682f3d5ceaa395cbcf7adedad9114fa9f9
Certificate serial: 019EF9C67BDC261D5BA1D425D6B824DA56EB
Authority key identifier: D5:39:B8:68:2F:3D:5C:EA:A3:95:CB:CF:7A:DE:DA:D9:11:4F:A9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Tm4aC89XOqjlcvPet7a2RFPqfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/AWbOy_liNGdmx811xpn2huXogl0.roa
Signing time: Wed 24 Jun 2026 13:16:34 +0000
ROA not before: Wed 24 Jun 2026 13:16:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219358
IP address blocks: 202.36.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Tm4aC89XOqjlcvPet7a2RFPqfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:c6:7b:dc:26:1d:5b:a1:d4:25:d6:b8:24:da:56:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d539b8682f3d5ceaa395cbcf7adedad9114fa9f9
Validity
Not Before: Jun 24 13:16:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0166cecbf962346766c7cd75c699f686e5e8825d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:94:f6:d9:25:98:d9:ad:b7:cc:f1:8a:a1:
9a:59:50:03:81:b2:05:60:e5:c9:1d:47:e0:31:f4:
00:80:2c:4e:9e:81:37:11:bc:ac:47:3d:12:ef:93:
ad:55:bb:a4:8b:ab:46:81:2f:91:bb:94:f5:e0:28:
78:2d:fd:d0:16:a5:f6:3e:06:f6:11:1a:9b:69:29:
b3:a0:10:2d:84:dc:4d:c2:29:3b:c2:86:36:a7:60:
f4:d0:24:19:47:ba:c5:f6:c7:cf:a1:6b:1c:0a:d9:
07:bf:33:0b:db:4e:63:f6:11:96:d8:52:e9:4f:bb:
a6:4f:ca:22:91:40:f1:d0:b2:96:81:d6:ef:a4:7f:
1b:39:cb:c1:23:e8:de:20:dc:b4:5e:68:4c:05:4c:
33:12:92:08:70:8b:15:5e:f9:d8:55:83:8d:32:04:
5c:90:ef:20:e2:f0:49:b7:7b:b2:f3:47:ee:73:d5:
66:3c:c2:60:c7:d9:df:0d:5d:31:6c:41:83:31:cb:
cb:39:29:eb:bf:77:4a:fa:46:25:69:49:c8:6c:16:
43:cc:d3:57:a0:2e:35:db:27:62:95:04:f3:85:53:
f2:95:7f:95:9a:1c:d7:81:16:b2:83:ec:3c:2e:7d:
2a:b4:70:42:ee:cb:85:ce:0e:31:63:74:b6:c9:e1:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:66:CE:CB:F9:62:34:67:66:C7:CD:75:C6:99:F6:86:E5:E8:82:5D
X509v3 Authority Key Identifier:
keyid:D5:39:B8:68:2F:3D:5C:EA:A3:95:CB:CF:7A:DE:DA:D9:11:4F:A9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Tm4aC89XOqjlcvPet7a2RFPqfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/AWbOy_liNGdmx811xpn2huXogl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.36.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:9e:8f:2d:28:68:e0:82:1d:74:d4:e5:5b:7c:14:ca:45:5b:
6e:f5:e4:21:a4:b0:b6:4f:8c:0f:4a:2f:f3:e0:00:2a:be:0c:
89:8e:5e:3b:a3:ca:9d:f0:95:e0:55:9c:93:88:1e:12:fc:64:
d5:49:d2:3b:18:bd:21:13:ec:d5:3f:aa:dc:b0:e5:18:42:ba:
de:1b:85:68:19:be:91:4b:27:23:5a:87:04:91:07:14:e9:e4:
80:2b:85:36:93:5b:d4:d8:b4:31:70:d5:51:11:94:89:3d:1a:
d4:ff:bf:71:4a:97:e5:97:14:fe:fa:6a:cc:76:76:df:58:cb:
eb:6f:b5:75:8b:41:6c:54:b0:88:25:15:08:fe:4e:15:c9:76:
cd:69:79:64:3f:d7:b4:17:72:71:7c:7a:7c:9c:35:ca:62:9a:
17:70:2e:d4:97:b1:67:61:f7:f5:3d:d7:61:b2:34:09:d1:f0:
ee:47:11:b1:cc:dd:e9:00:08:93:d7:02:9c:5e:c8:18:f1:91:
25:1f:82:4e:ed:56:32:d9:fb:43:e9:55:bb:ea:2d:f1:b0:c3:
f0:c6:55:4e:6b:96:f5:24:ff:9d:d7:8c:97:29:88:67:e2:e9:
57:3f:3f:87:2b:13:cb:f3:9a:6f:0b:83:14:e9:c2:f7:bc:99:
92:57:ea:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:13 2026 by rpki-client