Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/RfnkqIe2fHDUVZT4yILbhKXutw4.roa
File: RfnkqIe2fHDUVZT4yILbhKXutw4.roa (raw, json)
Hash identifier: GT4F8iAiZzVkJzzHLTAMNw/dN/RUobDqO6F2Kw345n4=
Subject key identifier: 45:F9:E4:A8:87:B6:7C:70:D4:55:94:F8:C8:82:DB:84:A5:EE:B7:0E
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 019ED980F7AA4977A8634252461C7B90A9A1
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/RfnkqIe2fHDUVZT4yILbhKXutw4.roa
Signing time: Thu 18 Jun 2026 06:52:48 +0000
ROA not before: Thu 18 Jun 2026 06:52:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29664
IP address blocks: 82.196.32.0/20 maxlen: 20
82.196.46.0/24 maxlen: 24
82.196.52.0/23 maxlen: 23
82.196.56.0/24 maxlen: 24
82.196.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:80:f7:aa:49:77:a8:63:42:52:46:1c:7b:90:a9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: Jun 18 06:52:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45f9e4a887b67c70d45594f8c882db84a5eeb70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:6f:e0:58:f7:de:df:0c:1f:3b:83:bf:6a:
a7:2a:85:ba:27:03:32:31:fb:3d:c2:ab:80:33:e8:
a9:38:28:e3:f9:85:84:c1:5b:72:03:1f:01:3f:94:
c9:31:0d:6e:70:ad:28:f5:c9:09:75:42:21:93:bd:
75:30:e4:4c:b3:05:58:6b:79:2e:44:01:41:e9:65:
b8:26:b7:37:aa:3a:68:ef:a3:c4:37:51:9c:c1:a7:
1a:34:b4:f8:f9:5f:fd:af:19:a3:30:d3:28:d0:28:
c2:89:02:8d:42:b3:05:43:16:e5:66:0c:b9:e3:e4:
d9:7b:28:c3:f6:ea:20:f0:c2:8e:32:3a:a8:a5:0b:
26:0d:01:a3:8c:34:6d:d2:ab:29:4b:31:1c:58:ba:
71:0c:a2:13:fb:7e:fa:3e:67:18:48:52:8b:c9:db:
8a:c6:ea:bc:e0:4d:01:7a:2e:3a:88:d0:70:40:d9:
1e:72:19:52:a5:b6:ef:61:47:53:54:e1:88:5b:e1:
aa:51:e9:62:0f:23:c0:00:a9:11:61:69:9b:a5:ec:
87:89:94:29:58:f7:d3:31:c1:83:d3:51:a1:ac:59:
8a:e7:a9:fd:bc:79:9a:18:a2:78:54:69:58:aa:99:
6f:4a:1b:6f:4b:ad:9c:87:9c:d5:06:e6:50:37:fb:
d0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F9:E4:A8:87:B6:7C:70:D4:55:94:F8:C8:82:DB:84:A5:EE:B7:0E
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/RfnkqIe2fHDUVZT4yILbhKXutw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.196.32.0/20
82.196.52.0/23
82.196.56.0/23
Signature Algorithm: sha256WithRSAEncryption
09:1c:9b:18:5d:b2:23:2e:ac:1f:df:16:98:f4:1a:7f:dc:66:
a6:17:7b:43:58:c8:c9:48:d3:11:df:d7:57:17:42:70:b2:3e:
f3:7b:f7:f3:01:48:1c:aa:de:ad:13:4a:3d:89:5c:46:5b:94:
4b:2e:9e:2b:50:63:b5:90:51:dc:42:48:84:a7:39:9a:c6:df:
41:ab:22:9b:db:81:51:eb:40:31:4c:29:8b:d6:0f:a8:26:e4:
71:db:3a:34:d0:b7:5e:80:72:87:f0:f2:f0:85:ef:70:da:c7:
b1:ec:b0:93:e0:ee:77:e9:ac:dd:c4:20:df:4d:bf:57:4f:da:
ff:77:7e:1d:71:23:43:8a:05:15:5d:38:53:8b:3b:68:36:c2:
bc:24:df:9d:5a:37:d5:34:05:d9:e0:97:91:c9:82:0d:e5:91:
67:35:b3:87:b7:67:a9:b6:c1:d0:50:8a:89:39:d2:52:f7:03:
c5:2d:1e:f7:e9:1d:f7:67:b7:c1:b8:fd:6a:27:ca:d0:07:0a:
0e:52:bc:8d:fe:8d:94:e2:0a:c6:1a:9b:db:4c:b4:de:34:d0:
7c:4e:8b:62:7a:df:8d:5e:46:0e:fb:d7:60:7c:9b:94:9a:d5:
c6:66:10:a4:28:57:de:f3:5e:84:06:5c:12:73:1b:30:d0:82:
e7:26:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:05 2026 by rpki-client