Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/avFeJzeNceTZTxgWB0Vf-8t-ZkE.roa
File: avFeJzeNceTZTxgWB0Vf-8t-ZkE.roa (raw, json)
Hash identifier: beBEou6fd488ivp+sJOLYpaVgifJh3L5ZvDFtpx5WkU=
Subject key identifier: 6A:F1:5E:27:37:8D:71:E4:D9:4F:18:16:07:45:5F:FB:CB:7E:66:41
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01A11BE750DB039FF68F5D7153EB7A500899
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/avFeJzeNceTZTxgWB0Vf-8t-ZkE.roa
Signing time: Thu 08 Oct 2026 14:25:06 +0000
ROA not before: Thu 08 Oct 2026 14:25:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 800
IP address blocks: 92.181.171.0/24 maxlen: 24
92.181.172.0/24 maxlen: 24
92.181.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:e7:50:db:03:9f:f6:8f:5d:71:53:eb:7a:50:08:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Oct 8 14:25:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6af15e27378d71e4d94f181607455ffbcb7e6641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e7:ae:98:ea:58:1d:2b:6b:c5:ae:7f:4b:cb:
e5:ba:06:4e:c6:92:06:a6:5e:66:d5:f8:05:f7:a6:
b3:5a:5a:9e:69:f8:53:8a:fd:0e:dd:3c:a3:58:28:
25:c4:1a:16:6a:d0:0c:ef:71:d7:48:87:e0:0a:11:
2b:d9:34:72:ac:ff:f4:af:c5:a7:49:7e:31:c7:74:
81:ae:5a:46:d7:f2:61:63:20:e1:42:53:52:53:cb:
72:49:b1:93:d3:25:6f:ae:c9:9b:63:9a:1e:90:95:
a4:f2:9f:b1:47:8a:37:22:95:d8:0f:30:d2:f5:9b:
87:4b:3c:d3:b8:53:28:34:f6:ff:5d:ef:53:e2:2b:
19:6d:21:3b:c2:d1:86:ae:b7:0a:0f:af:77:eb:04:
fc:f4:0b:e7:18:c2:4b:04:10:cc:d8:d1:fe:7a:72:
be:4d:eb:25:28:f9:70:d9:26:c8:44:6d:2e:98:17:
5e:45:80:61:e0:40:53:ba:a6:2a:c9:b5:56:6b:04:
63:b0:85:12:28:73:cf:0a:18:7f:4e:f7:4b:27:8f:
0b:3e:4d:39:f6:d3:48:06:9d:16:a4:b0:d9:0b:7b:
05:54:32:f0:f2:ae:8e:d4:0c:d7:ea:f3:39:66:17:
15:03:dd:dc:0f:51:4f:dc:d5:48:90:c9:29:e4:e0:
a4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F1:5E:27:37:8D:71:E4:D9:4F:18:16:07:45:5F:FB:CB:7E:66:41
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/avFeJzeNceTZTxgWB0Vf-8t-ZkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.181.171.0-92.181.173.255
Signature Algorithm: sha256WithRSAEncryption
ad:43:b7:4e:e2:3c:6e:4f:f7:00:ae:0e:6e:83:80:1e:f5:a3:
41:cf:54:6c:d5:8f:e7:88:d4:23:0a:8b:2a:1b:d7:6d:ca:e5:
8e:97:3b:46:c7:d1:2c:27:16:8c:f1:e9:a9:cc:32:5a:59:e1:
e8:3f:0c:3c:27:a8:e9:72:58:7c:36:e3:e6:70:2b:bf:26:86:
18:a7:28:da:5d:0b:60:5b:3a:fc:6e:bd:3d:e5:20:04:8b:ae:
d8:34:62:b1:92:e2:1a:38:55:79:28:62:4a:40:61:3d:c0:34:
c9:65:9c:41:7b:cb:06:a8:a7:ac:9f:c1:4e:9c:11:bd:b2:70:
bf:e0:cb:a9:bc:a9:98:6b:44:2b:b5:85:d4:0c:34:35:c2:aa:
63:95:3b:46:98:9a:87:5a:a8:89:79:3d:64:48:2f:e6:e0:a4:
39:5b:3b:07:81:17:d3:51:d7:95:80:24:c4:c8:ce:37:93:54:
c5:00:3a:3b:4f:b8:50:7b:3d:14:db:70:02:f2:50:a3:f7:88:
5f:b8:9c:6c:59:e7:1f:ec:59:d7:ef:2e:1d:3d:06:5f:59:53:
5f:fa:9b:a1:9d:a5:e5:73:b8:0c:0c:99:6e:15:66:c8:70:d1:
96:7d:5d:19:b9:f7:67:ce:9c:23:f4:5b:42:72:97:b2:11:d1:
85:44:28:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:19:48 2026 by rpki-client