Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/aVNO7wBRcBwIBoNq8C6Ia75p9PA.roa
File: aVNO7wBRcBwIBoNq8C6Ia75p9PA.roa (raw, json)
Hash identifier: Ny00tkObpDMzIea2Mvtv5ehjNSFjUFs7nY2oyCKURaI=
Subject key identifier: 69:53:4E:EF:00:51:70:1C:08:06:83:6A:F0:2E:88:6B:BE:69:F4:F0
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01A0C559BB9B0EAF5A361D73F67111A046CE
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/aVNO7wBRcBwIBoNq8C6Ia75p9PA.roa
Signing time: Mon 21 Sep 2026 19:03:07 +0000
ROA not before: Mon 21 Sep 2026 19:03:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.100.157.0/24 maxlen: 24
185.177.239.0/24 maxlen: 24
193.221.200.0/23 maxlen: 24
217.145.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:59:bb:9b:0e:af:5a:36:1d:73:f6:71:11:a0:46:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Sep 21 19:03:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69534eef0051701c0806836af02e886bbe69f4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:3c:fb:9e:43:a0:0d:c8:9d:99:f1:0c:51:
90:ad:05:6e:6f:f3:24:35:0f:37:e4:6d:24:bd:bc:
a0:b0:8b:20:eb:bc:46:a6:d1:5d:2c:a0:38:ff:79:
5a:f7:95:a4:cf:85:eb:27:8e:80:36:c2:7c:7b:9a:
33:3e:f7:8a:ef:d1:f0:c2:15:60:e3:8f:6b:54:1a:
aa:a9:81:78:15:cf:bd:0d:04:22:7c:0b:97:5b:64:
71:c0:48:bb:6d:27:77:17:04:81:32:83:1b:07:b2:
80:1e:9b:d2:af:b3:43:b4:99:06:d1:7a:b0:a6:ed:
d6:cc:f1:40:f6:66:8a:23:d0:04:2c:84:c0:3d:98:
7f:04:ba:08:18:72:61:c7:9f:72:60:67:1f:22:e7:
94:9f:31:47:32:f1:ab:57:a9:c9:3a:41:cf:b2:a4:
68:58:9b:c0:2d:c0:16:43:24:a0:50:0c:97:6d:f1:
2f:c5:5f:c5:02:78:98:b3:16:59:77:a4:91:ba:cd:
19:73:54:e1:1d:1d:ad:b2:74:c6:40:89:11:0a:8f:
1b:60:ba:ed:bf:e6:f4:62:e5:7c:f6:51:bb:43:5c:
81:18:25:42:cf:9c:65:10:e9:9b:6b:2e:45:23:89:
c0:3e:f1:84:f1:b7:6d:e8:d6:b0:b9:e7:4e:04:d4:
0c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:53:4E:EF:00:51:70:1C:08:06:83:6A:F0:2E:88:6B:BE:69:F4:F0
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/aVNO7wBRcBwIBoNq8C6Ia75p9PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.157.0/24
185.177.239.0/24
193.221.200.0/23
217.145.226.0/23
Signature Algorithm: sha256WithRSAEncryption
62:a2:f9:79:b0:f9:68:28:c0:fc:ee:11:53:f2:bb:f0:09:d1:
f0:ff:1a:cb:a3:31:8e:f9:84:e7:f4:76:57:63:ee:dd:7e:6d:
18:23:ba:36:92:61:88:4d:f9:57:09:ae:9d:27:a5:97:38:55:
ee:b4:1c:4b:1d:d7:99:23:8b:1a:a7:4c:8a:b7:06:49:a2:3b:
be:74:fd:41:c4:69:1d:3f:bc:3a:16:02:72:10:86:ff:2f:ad:
87:21:8c:2d:fa:b6:11:60:67:95:f9:be:42:65:1b:c3:87:40:
21:86:4b:3f:ac:fe:35:a8:da:ea:e8:ba:3f:39:ce:3c:c2:06:
9b:ee:d9:bd:3a:5f:f5:a3:3c:a4:00:a4:f7:cc:d0:30:b7:dc:
34:a6:e0:ba:05:13:90:00:db:56:c9:3d:a6:b8:31:b6:19:c6:
58:7b:8c:43:b2:5e:75:87:dd:01:af:1f:39:8d:22:77:90:fe:
4d:94:d8:24:0b:92:1f:5a:b1:12:b5:b4:5f:86:85:e4:04:eb:
a9:26:99:9e:7e:0a:9b:03:82:4c:00:a2:15:30:52:2a:3c:22:
46:fb:8c:00:79:ae:57:20:02:79:61:1e:4e:26:8d:00:7d:09:
71:1f:7e:37:31:db:8b:2f:b1:ec:cc:4f:51:0c:24:d2:29:b4:
f4:2b:58:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:23:58 2026 by rpki-client