Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/AfduxSN1SqOg0aKf5FU_XQALTr8.roa
File: AfduxSN1SqOg0aKf5FU_XQALTr8.roa (raw, json)
Hash identifier: kPd+LfkEHs2o4OobJadkEFl47ocILdokYCwjEf01FHw=
Subject key identifier: 01:F7:6E:C5:23:75:4A:A3:A0:D1:A2:9F:E4:55:3F:5D:00:0B:4E:BF
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019E02E055CC38C622D8788042B40E029CE8
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/AfduxSN1SqOg0aKf5FU_XQALTr8.roa
Signing time: Thu 07 May 2026 14:38:36 +0000
ROA not before: Thu 07 May 2026 14:38:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28708
IP address blocks: 80.10.4.0/23 maxlen: 24
80.10.43.0/24 maxlen: 24
80.10.46.0/24 maxlen: 24
80.10.159.0/24 maxlen: 24
80.10.161.0/24 maxlen: 24
80.12.66.0/23 maxlen: 24
80.12.68.0/23 maxlen: 24
80.12.70.0/24 maxlen: 24
80.12.100.0/23 maxlen: 24
80.12.102.0/24 maxlen: 24
80.12.209.0/24 maxlen: 24
80.12.210.0/24 maxlen: 24
81.253.0.0/18 maxlen: 24
81.253.64.0/19 maxlen: 24
90.84.144.0/23 maxlen: 23
90.84.146.0/24 maxlen: 24
90.84.147.0/24 maxlen: 24
193.251.116.0/24 maxlen: 24
193.253.10.0/24 maxlen: 24
193.253.78.0/23 maxlen: 24
193.253.141.0/24 maxlen: 24
193.253.142.0/23 maxlen: 24
193.253.168.0/24 maxlen: 24
193.253.169.0/24 maxlen: 24
193.253.170.0/24 maxlen: 24
194.250.131.0/24 maxlen: 24
2a01:cd00::/31 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:e0:55:cc:38:c6:22:d8:78:80:42:b4:0e:02:9c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: May 7 14:38:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01f76ec523754aa3a0d1a29fe4553f5d000b4ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:de:ca:a4:78:09:17:d2:61:29:13:3b:b8:
67:ee:86:88:20:dc:69:f0:ad:19:2e:ee:7b:20:d7:
1d:99:ce:39:7c:71:d6:31:7c:da:31:73:dd:b4:8d:
3e:fa:70:c2:bc:fd:28:0b:7e:dd:0d:6c:d7:bc:95:
25:da:b9:2b:c4:e2:2b:f0:c8:72:4d:07:f2:68:01:
d4:2a:f0:20:5e:d5:e8:11:24:59:bb:d4:25:a2:48:
50:04:fc:b5:c3:6c:b7:a8:61:dd:57:3b:c2:6a:df:
0c:d2:ac:ea:80:ed:fe:b6:3f:c6:34:da:95:a3:58:
55:a8:00:d2:61:05:6e:52:81:5d:b3:1e:ce:ec:cd:
45:91:33:4e:e6:21:7e:c0:4d:b8:ed:41:c9:32:ae:
3e:7c:00:5c:9b:c1:90:94:b9:cc:36:94:56:fa:b4:
9c:d9:45:cb:fe:be:d7:c8:43:8d:f5:35:d6:ea:3c:
06:27:ee:ab:8c:13:9d:1e:f2:93:25:eb:12:0c:21:
0d:ba:1b:df:8f:2e:07:11:e3:e1:21:f3:d2:73:67:
12:d8:42:c5:b3:06:f0:2f:2e:0d:8e:ae:09:9f:ed:
f7:e1:19:51:7d:a4:1d:8a:f7:2c:64:70:da:2a:f2:
ae:2e:d8:ed:f5:48:51:7e:fb:19:9e:65:cd:c0:1b:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F7:6E:C5:23:75:4A:A3:A0:D1:A2:9F:E4:55:3F:5D:00:0B:4E:BF
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/AfduxSN1SqOg0aKf5FU_XQALTr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.10.4.0/23
80.10.43.0/24
80.10.46.0/24
80.10.159.0/24
80.10.161.0/24
80.12.66.0-80.12.70.255
80.12.100.0-80.12.102.255
80.12.209.0-80.12.210.255
81.253.0.0-81.253.95.255
90.84.144.0/22
193.251.116.0/24
193.253.10.0/24
193.253.78.0/23
193.253.141.0-193.253.143.255
193.253.168.0-193.253.170.255
194.250.131.0/24
IPv6:
2a01:cd00::/31
Signature Algorithm: sha256WithRSAEncryption
0b:96:c9:cf:9c:14:74:f2:17:bb:ea:af:d6:76:68:8f:12:d1:
df:2e:f5:dc:90:b3:a5:1c:38:18:bc:75:94:33:ff:43:4c:a2:
8e:71:a2:16:46:20:73:b8:6e:ce:c3:da:18:e9:42:b1:06:e9:
54:ff:dc:94:25:15:c0:ba:31:6c:de:24:17:b9:3f:19:d2:5a:
0c:64:ef:00:cf:12:03:e8:9a:f7:ff:9b:56:4d:4b:a9:6f:cd:
44:45:e1:47:60:83:63:3b:52:bb:68:26:0c:de:a8:75:7b:90:
ae:54:79:fe:96:c0:87:3a:a0:1e:49:65:af:2c:e5:f5:b0:62:
e3:56:fb:d9:43:a9:c2:59:cb:f7:d2:5b:a1:96:27:79:f9:e3:
8d:95:93:e2:1e:e3:e0:b4:e5:3d:f8:ff:fb:ac:76:ca:57:ca:
97:cb:2f:e1:04:85:82:c0:f3:30:bf:5f:4e:76:69:ce:b0:ae:
0e:71:3a:fe:4a:54:d5:97:90:fa:d9:b8:e9:cc:90:ac:49:1c:
58:2f:3a:63:50:3d:b1:81:51:23:e2:9f:6c:20:a7:a8:d7:32:
0b:2a:d7:eb:e6:ab:d6:b2:11:8f:b6:3c:ef:d8:1a:51:79:a7:
72:45:26:dd:0f:bd:fd:53:b4:36:3f:6d:3a:bb:b7:ab:ec:8c:
fd:cc:56:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:25:42 2026 by rpki-client