Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/aMJy9IeANZbYVL8CAtiHgm0xoqQ.roa
File: aMJy9IeANZbYVL8CAtiHgm0xoqQ.roa (raw, json)
Hash identifier: E4M6mEfejQMjX8Zwy4Poh/25Qtop8e+0EXBl1KbNADM=
Subject key identifier: 68:C2:72:F4:87:80:35:96:D8:54:BF:02:02:D8:87:82:6D:31:A2:A4
Certificate issuer: /CN=aa41eacdd38950299c9e810a39e9ff5429cbe25a
Certificate serial: 019F23684FA6B56B0DB5E75456584F492A54
Authority key identifier: AA:41:EA:CD:D3:89:50:29:9C:9E:81:0A:39:E9:FF:54:29:CB:E2:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHqzdOJUCmcnoEKOen_VCnL4lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/aMJy9IeANZbYVL8CAtiHgm0xoqQ.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57167
IP address blocks: 193.0.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHqzdOJUCmcnoEKOen_VCnL4lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4f:a6:b5:6b:0d:b5:e7:54:56:58:4f:49:2a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41eacdd38950299c9e810a39e9ff5429cbe25a
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68c272f487803596d854bf0202d887826d31a2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:dd:93:52:f6:f5:3a:b8:cc:47:6a:20:fa:
98:39:2f:f3:e0:9d:42:db:51:10:02:1e:db:44:f1:
19:8c:00:58:14:71:54:9a:cd:c2:f9:dd:7b:32:5a:
0b:22:99:c0:6d:ea:22:92:a9:3c:bd:9b:7e:1c:ba:
df:10:68:a1:5b:45:ba:b7:3d:ee:44:6e:0b:d8:da:
90:ac:57:4a:42:8d:0e:71:56:a7:fb:7c:f4:67:53:
15:fb:25:e6:6c:07:9b:8d:8a:53:79:d7:a1:b4:f2:
3f:e4:df:07:66:2f:5e:b5:4c:d6:88:5b:30:90:e0:
8e:09:71:f5:d4:73:2b:74:cd:c8:8d:3d:15:6b:2b:
6b:e6:1f:64:67:43:af:bc:e9:15:19:0a:e1:ff:3d:
46:93:55:fc:f0:e4:5b:68:bc:4f:81:96:e8:05:77:
b0:d7:b6:ef:f6:70:5f:db:75:42:2e:5c:0b:d7:29:
ef:2f:83:5a:f1:07:70:66:1f:1d:e2:5c:7c:60:2c:
8a:1b:08:e2:99:61:27:73:03:60:90:31:b8:c3:94:
88:44:91:92:a8:d8:e8:9e:68:6f:bb:aa:89:cd:27:
c5:cd:b9:fc:2b:2a:9c:72:ee:04:95:12:ce:cc:a7:
59:2a:34:ad:4f:06:06:18:a6:c6:f0:3d:a8:22:69:
fe:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C2:72:F4:87:80:35:96:D8:54:BF:02:02:D8:87:82:6D:31:A2:A4
X509v3 Authority Key Identifier:
keyid:AA:41:EA:CD:D3:89:50:29:9C:9E:81:0A:39:E9:FF:54:29:CB:E2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHqzdOJUCmcnoEKOen_VCnL4lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/aMJy9IeANZbYVL8CAtiHgm0xoqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e7:85:5b:e0:85:24:22:d5:6d:ed:b8:54:23:f3:16:7c:50:
c2:35:f0:ee:d8:47:2d:8b:6b:fa:5a:47:fc:cb:63:b3:dc:48:
3b:89:48:99:b4:ec:ea:b1:3d:dd:84:1a:a7:7f:44:ed:b5:f6:
09:f9:82:a1:94:87:4d:ea:ef:04:e6:03:27:b4:54:97:a8:24:
7f:02:c4:89:1d:ca:5f:82:53:8d:f3:89:d7:71:37:15:54:e2:
95:b0:da:61:77:b7:33:4c:c2:23:df:da:0e:ed:ac:f1:89:9d:
fd:25:4a:0d:ec:36:7c:20:2b:f4:1a:cb:0c:6a:ff:22:03:0f:
af:ff:c2:e6:b8:60:dc:9f:e4:ea:59:f8:6e:d0:ea:57:cb:d1:
30:a8:72:c9:11:66:bb:20:13:31:39:cc:77:21:01:1d:fa:39:
c1:de:65:32:07:40:fb:03:9e:6a:69:4c:ab:4e:8d:bc:d6:39:
75:7c:cb:27:0f:d6:02:77:ef:6c:23:ce:b3:56:a7:e6:82:9f:
ca:75:fc:ff:f6:de:a2:05:f9:2e:1a:13:0f:41:41:54:ea:5d:
4e:79:2f:1a:1a:7d:ab:7d:9b:9e:ec:8b:66:64:2c:16:4f:7d:
d6:77:3c:4f:fc:33:5f:02:97:c6:18:b8:30:b8:02:86:07:2c:
10:ea:fe:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaE+mtWsNtedUVlhPSSpUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDFlYWNkZDM4OTUwMjk5YzllODEwYTM5ZTlmZjU0Mjlj
YmUyNWEwHhcNMjYwNzAyMTUxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGMyNzJmNDg3ODAzNTk2ZDg1NGJmMDIwMmQ4ODc4MjZkMzFhMmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLLdk1L29Tq4zEdqIPqYOS/z4J1C
21EQAh7bRPEZjABYFHFUms3C+d17MloLIpnAbeoikqk8vZt+HLrfEGihW0W6tz3u
RG4L2NqQrFdKQo0OcVan+3z0Z1MV+yXmbAebjYpTedehtPI/5N8HZi9etUzWiFsw
kOCOCXH11HMrdM3IjT0Vaytr5h9kZ0OvvOkVGQrh/z1Gk1X88ORbaLxPgZboBXew
17bv9nBf23VCLlwL1ynvL4Na8QdwZh8d4lx8YCyKGwjimWEncwNgkDG4w5SIRJGS
qNjonmhvu6qJzSfFzbn8Kyqccu4ElRLOzKdZKjStTwYGGKbG8D2oImn+MQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGjCcvSHgDWW2FS/AgLYh4JtMaKkMB8GA1UdIwQY
MBaAFKpB6s3TiVApnJ6BCjnp/1Qpy+JaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtIcXpkT0pVQ21jbm9FS09lbl9WQ25MNGxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zNTMyODItNTNlMi00NmEyLThmYzQt
NDFkNDlhOGZmYzgxLzEvYU1KeTlJZUFOWmJZVkw4Q0F0aUhnbTB4b3FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zNTMyODItNTNlMi00NmEyLThmYzQtNDFkNDlhOGZmYzgx
LzEvcWtIcXpkT0pVQ21jbm9FS09lbl9WQ25MNGxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQA9MA0G
CSqGSIb3DQEBCwUAA4IBAQA954Vb4IUkItVt7bhUI/MWfFDCNfDu2Ecti2v6Wkf8
y2Oz3Eg7iUiZtOzqsT3dhBqnf0TttfYJ+YKhlIdN6u8E5gMntFSXqCR/AsSJHcpf
glON84nXcTcVVOKVsNphd7czTMIj39oO7azxiZ39JUoN7DZ8ICv0GssMav8iAw+v
/8LmuGDcn+TqWfhu0OpXy9EwqHLJEWa7IBMxOcx3IQEd+jnB3mUyB0D7A55qaUyr
To281jl1fMsnD9YCd+9sI86zVqfmgp/Kdfz/9t6iBfkuGhMPQUFU6l1OeS8aGn2r
fZue7ItmZCwWT33WdzxP/DNfApfGGLgwuAKGBywQ6v4A
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:14 2026 by rpki-client