Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/avN83jqKe3pVmgyNQu2vodgnoyg.roa
File: avN83jqKe3pVmgyNQu2vodgnoyg.roa (raw, json)
Hash identifier: 6u809XbosbPnWFy52nIeCTN2ra34AhDdLwJ93rm/VaE=
Subject key identifier: 6A:F3:7C:DE:3A:8A:7B:7A:55:9A:0C:8D:42:ED:AF:A1:D8:27:A3:28
Certificate issuer: /CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
Certificate serial: 019B7F855E06267E52DF242726A3A8647457
Authority key identifier: C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/avN83jqKe3pVmgyNQu2vodgnoyg.roa
Signing time: Fri 02 Jan 2026 16:23:25 +0000
ROA not before: Fri 02 Jan 2026 16:23:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213342
IP address blocks: 194.116.239.0/24 maxlen: 24
2a0e:9b42::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:85:5e:06:26:7e:52:df:24:27:26:a3:a8:64:74:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
Validity
Not Before: Jan 2 16:23:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6af37cde3a8a7b7a559a0c8d42edafa1d827a328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:c9:66:ed:c3:e5:ba:a3:e4:76:78:a7:f7:
5b:38:22:ff:89:03:a6:98:32:63:42:8b:21:1c:af:
2a:b2:51:04:60:ab:4b:65:25:ef:38:9f:7d:d6:50:
a0:4b:9c:e2:1f:75:27:c7:0e:86:40:38:09:94:10:
a3:0d:9d:94:c2:26:ac:23:06:77:d6:7b:cc:dc:84:
7e:ec:d1:4b:65:20:20:0f:09:30:71:31:17:38:4a:
20:55:72:d3:e2:e1:fa:a6:12:8f:e7:d3:eb:55:26:
fb:53:b8:ee:d9:8b:3c:9a:60:e1:5c:18:f7:b4:fe:
a4:ce:ef:4d:7d:64:e8:bd:7d:cb:a4:20:25:68:00:
74:f1:3e:f4:03:d4:6b:89:93:73:b9:c2:8b:e4:20:
60:e0:f0:97:e8:ae:c3:b6:52:cd:a1:93:21:54:3a:
bc:c6:5c:93:1a:17:9a:fc:79:5d:c2:f1:8b:82:0a:
11:31:1c:e9:23:32:9a:ba:7f:f7:fc:17:e3:47:96:
67:e7:c2:cc:18:08:07:91:e1:a9:73:4b:70:1e:57:
53:2e:70:37:a5:99:e6:27:83:44:14:66:a1:35:f5:
7e:0f:9c:fc:ec:0c:ea:0a:4d:c2:17:e6:c2:d8:61:
cd:e6:0f:70:e2:37:a3:21:ef:34:5f:54:81:e9:1e:
36:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F3:7C:DE:3A:8A:7B:7A:55:9A:0C:8D:42:ED:AF:A1:D8:27:A3:28
X509v3 Authority Key Identifier:
keyid:C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/avN83jqKe3pVmgyNQu2vodgnoyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.239.0/24
IPv6:
2a0e:9b42::/32
Signature Algorithm: sha256WithRSAEncryption
2a:c8:ea:34:3e:e6:87:e4:ff:3d:35:3b:e3:c0:a7:1f:88:52:
4e:1e:9a:ce:7c:fe:b6:f4:e1:b8:ba:ba:7c:8d:83:c2:ee:07:
f4:e0:cf:15:bb:af:7f:13:41:8f:db:0d:46:9c:4c:ac:4e:17:
0d:ff:8c:36:ef:10:35:6d:bd:91:8b:aa:e6:25:19:f0:ed:57:
33:ba:5a:5d:bd:a0:ba:56:4f:94:66:92:b9:de:6e:f5:95:ea:
57:48:3a:01:2c:bb:27:b4:88:df:38:e2:42:37:c4:c5:d6:f6:
7f:1b:fb:ca:74:e6:8e:43:92:61:c4:87:89:2d:3b:3e:db:3f:
46:9f:3e:37:4f:44:7e:7b:5c:4f:c3:c2:44:6f:7d:15:c8:dd:
2e:65:e1:b8:99:64:75:40:77:35:49:bb:48:4c:9d:ac:bb:6e:
5b:fa:48:05:10:c5:30:ac:2b:9a:27:41:da:ed:37:6d:b2:a9:
3a:82:86:9c:3d:99:f5:65:89:30:03:72:3b:47:75:b8:2c:f9:
1b:0a:df:91:52:82:a8:b1:35:ec:c4:74:e6:6a:1f:bb:20:3a:
96:a4:b5:59:1d:22:19:25:b2:75:f0:f9:07:db:21:52:d6:93:
d6:46:35:bb:42:2a:88:de:46:06:aa:aa:94:24:9b:1d:17:7c:
5e:ac:70:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:09 2026 by rpki-client