Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/aVmzMHPlxeyetIkGiXHw6OpjmXo.roa
File: aVmzMHPlxeyetIkGiXHw6OpjmXo.roa (raw, json)
Hash identifier: YrHKrHLca2iabjabrN2u5KCH0KbS3RXiM9KfCPPF7x4=
Subject key identifier: 69:59:B3:30:73:E5:C5:EC:9E:B4:89:06:89:71:F0:E8:EA:63:99:7A
Certificate issuer: /CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Certificate serial: 01A09121815CC0D255D54A0BB457A85B6BB9
Authority key identifier: E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/aVmzMHPlxeyetIkGiXHw6OpjmXo.roa
Signing time: Fri 11 Sep 2026 15:41:27 +0000
ROA not before: Fri 11 Sep 2026 15:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39444
IP address blocks: 46.30.200.0/21 maxlen: 24
103.50.14.0/23 maxlen: 24
185.204.104.0/22 maxlen: 24
185.204.106.0/24 maxlen: 24
2a03:2680::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:21:81:5c:c0:d2:55:d5:4a:0b:b4:57:a8:5b:6b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Validity
Not Before: Sep 11 15:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6959b33073e5c5ec9eb489068971f0e8ea63997a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:c1:80:42:64:00:54:ee:c3:a7:49:a8:4b:
26:9b:5a:c8:ec:c7:da:6b:92:93:62:78:bf:29:6d:
8f:00:af:ec:9e:10:08:ca:74:78:04:0c:fb:d0:e2:
d7:cd:50:47:64:81:a3:18:f3:3f:89:b7:ac:b6:98:
77:6f:63:09:02:68:c4:f9:67:fa:85:7c:3c:f8:6e:
3c:32:da:68:82:22:b2:44:d0:93:b1:e5:29:78:91:
82:b9:9d:db:c0:af:7e:42:81:d3:ec:3a:53:d3:78:
32:45:88:29:8e:d3:55:0f:7f:b9:db:ef:88:d1:d1:
33:c0:16:10:60:da:f7:17:5a:50:e8:a9:4b:1b:59:
b3:7b:07:85:d4:a7:61:ef:23:e5:55:d2:c6:4f:7a:
05:82:43:76:c0:d9:64:63:20:a8:9e:70:c8:66:20:
a3:c0:c8:19:32:3b:4d:b8:b7:8e:ae:15:8f:ee:85:
02:a0:7d:4b:ee:72:aa:71:12:31:9c:49:6a:7a:94:
32:20:1b:e6:af:c4:5c:b4:af:af:ac:28:3e:f0:20:
42:0b:ec:fb:43:e7:b2:cf:7c:d0:bf:f4:f2:e6:a1:
16:0d:a9:98:24:1b:80:54:bb:fb:c6:ea:bd:b0:c7:
6b:45:09:92:80:ae:f5:dd:8a:7d:63:1d:c6:55:85:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:59:B3:30:73:E5:C5:EC:9E:B4:89:06:89:71:F0:E8:EA:63:99:7A
X509v3 Authority Key Identifier:
keyid:E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/aVmzMHPlxeyetIkGiXHw6OpjmXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.200.0/21
103.50.14.0/23
185.204.104.0/22
IPv6:
2a03:2680::/32
Signature Algorithm: sha256WithRSAEncryption
4f:4e:27:71:d4:bd:54:34:cf:0c:b9:fe:c2:84:72:48:6b:a6:
35:49:05:02:de:d6:5a:35:84:1f:e5:c0:69:73:e9:09:0d:5b:
84:88:ee:5a:35:08:83:ce:36:31:b2:97:84:99:54:c4:5b:ff:
f2:8c:ef:72:70:6e:0a:9f:4f:98:7a:e6:92:54:83:1c:a3:fd:
29:21:d1:40:e0:f6:ae:7c:71:f0:f1:7c:4e:2b:3b:8f:ad:3a:
03:a9:37:e3:26:2e:d3:33:5d:fd:21:6c:7b:65:7b:23:ee:b3:
5f:a5:70:1d:d8:81:76:f2:46:c7:bf:f2:d5:70:91:e6:31:e2:
8f:d6:51:ce:16:dd:ee:ee:f5:2c:a1:a8:d5:1b:79:e9:b2:1f:
3b:9e:8b:df:89:e4:f0:2b:ad:51:10:02:58:ff:c3:5b:c9:76:
4d:3b:f9:40:99:45:36:68:2a:1d:b2:49:27:a1:25:89:6f:9f:
dc:3f:f5:3d:76:9e:80:7a:44:f2:8c:85:c6:75:ef:a5:80:69:
67:d3:9b:f1:4b:85:1c:0f:a2:00:b6:87:e7:56:ac:e5:16:e5:
96:54:ea:03:ea:f6:99:64:9e:53:67:bc:fe:29:50:78:db:46:
d9:da:2d:8c:d1:7a:86:ad:b5:09:47:5f:be:01:fd:c4:c7:0c:
0f:86:31:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:02:35 2026 by rpki-client