Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/auhpAsK9BelasEARcaUL1Mcirio.roa
File: auhpAsK9BelasEARcaUL1Mcirio.roa (raw, json)
Hash identifier: EBpa+BNSqRLOw7bnVUHpyS0fxWBhefs5K0f7xdHUXKg=
Subject key identifier: 6A:E8:69:02:C2:BD:05:E9:5A:B0:40:11:71:A5:0B:D4:C7:22:AE:2A
Certificate issuer: /CN=eaa00b0a134cc3e59c3bed5f06e90e97acc69226
Certificate serial: 019DE20EBA05772D0F7D704F369D5E0E85DE
Authority key identifier: EA:A0:0B:0A:13:4C:C3:E5:9C:3B:ED:5F:06:E9:0E:97:AC:C6:92:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qALChNMw-WcO-1fBukOl6zGkiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/auhpAsK9BelasEARcaUL1Mcirio.roa
Signing time: Fri 01 May 2026 05:41:49 +0000
ROA not before: Fri 01 May 2026 05:41:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42290
IP address blocks: 185.202.20.0/24 maxlen: 24
185.202.21.0/24 maxlen: 24
185.202.22.0/24 maxlen: 24
185.202.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/6qALChNMw-WcO-1fBukOl6zGkiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/6qALChNMw-WcO-1fBukOl6zGkiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qALChNMw-WcO-1fBukOl6zGkiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:0e:ba:05:77:2d:0f:7d:70:4f:36:9d:5e:0e:85:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaa00b0a134cc3e59c3bed5f06e90e97acc69226
Validity
Not Before: May 1 05:41:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ae86902c2bd05e95ab0401171a50bd4c722ae2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:3e:ee:ab:af:f3:9b:bc:f0:7d:cb:e0:78:
37:b1:fd:72:8c:84:79:7f:ae:e7:20:36:60:7d:39:
84:f5:af:dd:8e:c0:b8:33:ea:91:d1:15:d7:11:97:
9b:d1:e7:7a:81:8c:07:14:51:74:72:ca:5c:99:87:
75:40:d2:91:cd:5e:fe:83:45:be:05:e1:2c:25:03:
0a:84:d0:3b:e4:5b:e5:c5:36:29:63:4a:f2:81:04:
67:f9:3b:49:ae:e7:76:ce:dd:28:b9:c4:d4:c3:60:
fe:1d:04:22:9e:84:35:5c:03:5a:98:6c:57:59:17:
71:15:ab:5c:f0:4d:36:89:d7:ae:6f:2e:92:b4:bc:
42:d5:5b:41:f0:43:3d:dd:96:23:30:52:1c:7f:01:
16:88:75:d9:11:bc:39:45:23:ea:1d:75:c0:66:c2:
ba:9e:f3:77:e2:3c:dc:5b:88:61:11:b6:15:b7:ac:
77:a8:b9:9a:64:66:c7:63:0c:e9:7a:5a:63:ef:30:
ba:84:ff:69:6d:e7:98:ba:b2:69:90:e1:76:5a:d1:
a3:bf:f7:bf:69:21:70:7d:ca:0f:40:65:40:4e:8f:
fc:0a:6e:b5:b8:9c:da:19:35:c9:f2:8e:fd:73:4c:
47:dc:5a:55:19:de:07:a1:a5:dd:28:49:4f:8a:77:
75:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E8:69:02:C2:BD:05:E9:5A:B0:40:11:71:A5:0B:D4:C7:22:AE:2A
X509v3 Authority Key Identifier:
keyid:EA:A0:0B:0A:13:4C:C3:E5:9C:3B:ED:5F:06:E9:0E:97:AC:C6:92:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qALChNMw-WcO-1fBukOl6zGkiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/auhpAsK9BelasEARcaUL1Mcirio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/6qALChNMw-WcO-1fBukOl6zGkiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.20.0/22
Signature Algorithm: sha256WithRSAEncryption
23:8d:e4:19:e6:f1:ae:ae:55:6a:18:3a:1c:a8:4c:e5:07:2e:
3d:8f:ce:6f:e3:18:8f:f0:97:a1:98:27:20:6f:af:5d:4c:76:
f2:d5:77:6b:82:64:1b:bf:0e:68:ed:fe:4a:8c:06:0b:d4:58:
ff:e2:e9:71:d6:1a:59:fa:4d:de:81:73:32:7d:b9:96:80:02:
39:20:55:2e:0e:6b:72:f6:94:74:f3:84:a0:b9:d8:99:e9:b3:
c2:9e:de:9c:81:f3:49:9e:a1:45:8e:cd:f0:c5:ca:d9:89:b4:
98:31:bc:70:5f:42:5f:90:5b:aa:3f:1f:17:94:98:93:2f:d3:
9d:d1:3a:af:2e:cb:e7:de:6a:b3:38:ee:62:bf:e3:ed:ae:01:
b3:77:16:5d:9b:ae:b3:77:06:0e:0a:c8:87:eb:9a:be:6d:4d:
78:72:aa:ef:26:b2:93:48:0a:ff:7a:d2:b9:f4:6b:73:9c:4a:
4f:5b:d0:b5:af:50:2f:e2:d9:1f:0f:24:ca:f4:87:68:e5:c1:
ce:c2:a2:e9:4c:45:00:b4:4f:38:75:82:87:2d:7d:71:95:22:
81:f8:30:17:b1:14:eb:de:36:b8:9a:9e:cb:00:ff:1a:7d:8f:
91:09:42:d2:f8:1d:8c:74:a0:c3:9d:df:15:82:35:fb:31:9c:
88:f4:f0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:36 2026 by rpki-client