Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/1-A4EU1ApAufBvEjd-muSLr7ANu8.roa
File: 1-A4EU1ApAufBvEjd-muSLr7ANu8.roa (raw, json)
Hash identifier: RnoopnV8A6AgkKLGp6MuOa3nwgjKcYP0z+JNGgWdgZU=
Subject key identifier: F8:0E:04:53:50:29:02:E7:C1:BC:48:DD:FA:6B:92:2E:BE:C0:36:EF
Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial: 019D1FEC15D96391BD4857AD78D092D42406
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/1-A4EU1ApAufBvEjd-muSLr7ANu8.roa
Signing time: Tue 24 Mar 2026 12:57:38 +0000
ROA not before: Tue 24 Mar 2026 12:57:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207006
IP address blocks: 185.196.232.0/22 maxlen: 24
2a0a:73c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:ec:15:d9:63:91:bd:48:57:ad:78:d0:92:d4:24:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
Validity
Not Before: Mar 24 12:57:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f80e0453502902e7c1bc48ddfa6b922ebec036ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:b3:3e:3e:d0:bd:19:67:54:a5:cf:71:bd:
68:39:75:46:db:da:88:e6:42:b6:05:6c:ba:1f:67:
3a:18:c2:84:e1:48:d8:0f:70:cf:79:43:73:c0:a7:
3d:48:be:69:bf:08:a4:2f:1d:c6:b1:b6:13:fb:6c:
ec:e7:a0:d4:0a:b8:e1:f0:5f:eb:f8:2c:17:db:8b:
31:d0:3f:85:31:10:c6:fb:62:34:2a:08:37:dc:e9:
56:a9:f7:04:e2:d0:c1:fd:c4:ba:b1:bb:6e:4e:6d:
7b:12:89:05:3f:8a:e0:51:ad:69:9e:21:39:12:43:
1c:9a:f7:4d:4d:97:31:de:f9:04:7d:1e:5a:3e:26:
64:a1:17:db:0b:ad:81:bc:08:47:84:89:7c:97:b2:
3e:8b:5a:32:a2:75:55:8a:66:57:68:c9:fc:2a:db:
d4:1a:7f:22:d7:c2:17:0f:3a:e5:c4:f8:a1:07:c3:
73:ef:84:d4:86:4b:7f:ae:1a:86:86:f8:da:e1:a2:
ac:21:20:99:60:66:cf:97:9a:e4:5d:bf:83:a8:09:
7c:cb:ab:d8:c8:84:69:13:ac:93:88:ea:f3:a5:e5:
8b:95:83:00:6b:b4:d1:42:b9:3c:e9:d5:1d:46:90:
11:86:14:8b:31:05:27:0f:63:9c:eb:00:34:f6:7f:
70:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0E:04:53:50:29:02:E7:C1:BC:48:DD:FA:6B:92:2E:BE:C0:36:EF
X509v3 Authority Key Identifier:
keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/1-A4EU1ApAufBvEjd-muSLr7ANu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.232.0/22
IPv6:
2a0a:73c0::/29
Signature Algorithm: sha256WithRSAEncryption
30:db:8a:09:87:e2:d6:b9:0d:fb:cb:1f:11:f3:25:cb:d9:f9:
7e:c5:c8:f1:68:97:fe:47:59:db:60:64:e6:fa:1b:c4:b1:b7:
4c:b4:5b:cd:6f:fe:48:bf:66:89:8b:0e:c2:a6:a0:ab:38:ef:
ae:79:06:99:ad:a3:fc:b4:d3:99:ea:af:7b:42:72:d7:9b:ed:
21:7e:6d:00:c9:b4:25:bf:4f:e7:b1:30:a5:78:91:78:a7:6a:
5f:85:9b:d7:8a:fd:ac:41:a2:4b:c2:42:3b:61:39:a8:86:ec:
80:3d:4e:d4:a6:61:54:f2:e3:8d:6d:2f:32:f9:7d:e3:7f:33:
9c:d2:3e:51:be:57:99:e7:5b:37:49:d5:cb:38:26:e5:03:0c:
21:ed:79:a7:c1:03:f6:87:13:fc:e5:0c:0f:54:a2:18:a4:e0:
1a:41:91:70:0a:98:a4:74:ce:0d:70:ba:64:a4:db:3f:1a:59:
6b:23:22:a9:d7:6a:8e:e8:b8:fa:7d:ca:c6:78:0d:64:37:21:
45:cc:70:33:68:21:66:33:b9:82:52:2b:25:76:5f:50:84:5c:
3e:23:fe:51:12:b7:95:69:a1:1e:7c:00:26:07:bb:07:b7:85:
de:19:45:ff:9b:e9:e3:2f:8e:aa:e1:c3:d8:ca:c2:6b:04:76:
67:84:6f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:53 2026 by rpki-client