Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/an-A_ARrqd3dSC5Jrx2G08_htKo.roa
File: an-A_ARrqd3dSC5Jrx2G08_htKo.roa (raw, json)
Hash identifier: DE0wDTKj8Brp7GZ//nugmy7FeLq9/aRydb1hf9zHvPU=
Subject key identifier: 6A:7F:80:FC:04:6B:A9:DD:DD:48:2E:49:AF:1D:86:D3:CF:E1:B4:AA
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019CE21CA0A8202AE8DBDA8ABAD1D9361906
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/an-A_ARrqd3dSC5Jrx2G08_htKo.roa
Signing time: Thu 12 Mar 2026 12:54:12 +0000
ROA not before: Thu 12 Mar 2026 12:54:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209089
IP address blocks: 94.20.83.0/24 maxlen: 24
94.20.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:1c:a0:a8:20:2a:e8:db:da:8a:ba:d1:d9:36:19:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Mar 12 12:54:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a7f80fc046ba9dddd482e49af1d86d3cfe1b4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:76:45:75:37:3c:f9:24:99:e4:27:0d:df:
b8:d5:43:d3:c2:7a:01:08:1e:39:84:df:44:64:c8:
29:1e:ae:7e:5f:f1:76:51:11:f5:51:87:d7:86:db:
b9:a6:8b:2b:c8:3a:f0:d8:1f:3b:bf:26:e8:88:b0:
44:d9:a4:db:3d:fd:f9:f0:b3:36:e0:f1:5f:ae:07:
96:53:8e:a0:b0:6e:65:d0:55:5b:b7:27:ac:a0:64:
91:fb:89:a4:51:89:e3:cc:ea:3f:87:9d:a7:75:73:
ac:48:bb:04:89:33:0e:38:68:77:2a:67:45:60:34:
9e:21:06:2b:16:f3:ce:0b:f6:c6:fe:bb:01:75:48:
3c:de:62:ca:c5:58:ae:49:64:93:33:50:99:3c:fb:
49:51:d7:8e:9e:44:ee:b0:aa:9d:f5:72:09:b6:25:
ec:9e:b5:82:c3:2f:8e:19:41:e7:2a:c1:0b:2e:1c:
15:5a:af:03:d0:cf:61:bd:e5:42:21:48:ac:11:d6:
ff:7e:94:da:54:99:15:ae:0b:5c:03:04:49:fd:2a:
4f:46:4b:59:35:82:5d:9a:16:c3:04:f2:61:24:18:
75:2e:9f:c3:87:bc:45:32:76:d0:e1:3d:23:68:26:
a6:e6:eb:79:76:8c:8d:7c:6c:c5:96:cf:a3:66:1a:
c9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7F:80:FC:04:6B:A9:DD:DD:48:2E:49:AF:1D:86:D3:CF:E1:B4:AA
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/an-A_ARrqd3dSC5Jrx2G08_htKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.20.83.0/24
94.20.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:07:c8:f1:42:4b:70:01:7a:89:d8:67:56:95:f5:1b:95:33:
59:24:dd:8b:1c:b4:9c:92:7c:c9:f0:1f:3f:6f:30:f3:4c:a1:
5a:5e:10:4f:3f:a8:39:05:4a:54:df:f0:88:25:f9:6c:26:c9:
6a:b8:7f:51:6a:15:40:e4:bd:17:84:b1:63:66:b2:0e:78:32:
1d:67:f9:f0:3a:02:59:7f:64:8e:24:da:5b:ad:84:5d:c6:1a:
90:66:6b:2a:59:2d:ea:b8:79:19:17:f1:44:c1:22:15:4e:3f:
0c:2d:eb:bd:59:90:7b:13:11:f2:25:f2:04:4d:f2:1a:33:9c:
7d:db:41:96:6e:54:51:69:53:ea:3e:7b:4e:1d:9b:f4:9e:ad:
91:ec:75:33:3d:9a:72:b5:11:aa:f9:da:78:70:a5:d1:02:3b:
3e:9f:5e:8c:10:3f:87:24:6a:f3:42:34:75:19:6d:87:ca:62:
fc:ab:37:cc:a3:36:d6:84:d7:30:ab:95:66:c2:5e:17:0b:b3:
0d:7b:82:4c:ca:4e:01:25:97:d0:c4:0c:a1:fa:f9:ff:09:40:
af:8a:84:a2:42:4a:c2:f4:c4:8d:4f:c0:1f:03:e1:25:89:95:
47:d1:2a:d2:4d:3c:d4:28:2e:aa:91:7b:1a:4d:55:de:b7:d0:
aa:2d:28:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:59:53 2026 by rpki-client