Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/aRQ9uwskWeFhYTdPjO7Okig-UjE.roa
File: aRQ9uwskWeFhYTdPjO7Okig-UjE.roa (raw, json)
Hash identifier: BkfwV9uzeeugOlyi0Sysa2EHfE+nO+JpIDCMPMrtqUc=
Subject key identifier: 69:14:3D:BB:0B:24:59:E1:61:61:37:4F:8C:EE:CE:92:28:3E:52:31
Certificate issuer: /CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Certificate serial: 019F236897C783E1B53D5D39E7CB68ECE5D2
Authority key identifier: 95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/aRQ9uwskWeFhYTdPjO7Okig-UjE.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62095
IP address blocks: 185.48.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:97:c7:83:e1:b5:3d:5d:39:e7:cb:68:ec:e5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69143dbb0b2459e16161374f8ceece92283e5231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:8a:50:d1:34:7b:5f:92:fb:fd:f7:a4:d1:
cf:99:b7:b4:be:4b:40:19:0e:c9:b4:d9:02:9f:aa:
3e:55:7e:c5:1d:61:bb:6e:9a:d7:b3:47:90:5b:ee:
5a:1c:3d:6b:2c:7a:c6:fe:6a:51:4d:51:4e:38:dc:
3f:06:2d:af:fd:49:5b:a3:77:11:f5:d9:4c:e9:fe:
c7:a7:61:cc:23:20:dd:bc:1e:76:d4:9e:23:b9:84:
63:e7:df:28:f1:a5:ae:f6:b0:6d:da:1c:c9:d1:20:
f6:c7:02:02:fd:d9:86:97:11:71:2c:38:25:6a:05:
d5:73:f3:e5:98:90:57:b1:18:47:7e:56:48:ab:e5:
05:46:d6:19:00:9d:9e:c8:84:fb:2f:bd:6b:f0:a9:
41:b0:8c:81:5f:34:69:16:48:80:1c:44:f2:f5:bf:
c3:e7:9d:06:8a:cf:0a:5b:37:f5:27:31:40:90:fa:
24:68:6d:d1:c0:d4:d9:6d:63:d6:c8:0e:c4:38:49:
e9:4d:36:4f:3e:6d:4e:ed:fd:0d:ac:a3:58:02:34:
99:61:15:09:9f:26:2a:ae:5c:c3:ea:fb:1c:26:9e:
4f:db:fe:b6:be:cd:cb:92:87:63:ef:6c:3f:80:fb:
19:b5:09:78:44:fe:3b:bf:b5:d0:a3:82:50:e2:eb:
4b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:14:3D:BB:0B:24:59:E1:61:61:37:4F:8C:EE:CE:92:28:3E:52:31
X509v3 Authority Key Identifier:
keyid:95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/aRQ9uwskWeFhYTdPjO7Okig-UjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.24.0/24
Signature Algorithm: sha256WithRSAEncryption
74:41:f0:be:1c:bb:49:71:84:10:95:5c:74:4a:7a:fe:7c:55:
28:bf:dd:50:4a:80:f7:4d:55:d2:03:7f:b1:84:ad:5e:08:c7:
c0:22:41:4c:3d:22:5b:28:be:96:89:4b:72:d7:5f:60:dd:78:
e0:e8:04:b5:0c:a3:c0:37:dc:19:58:fa:5e:c3:96:da:1d:bb:
6a:84:a4:15:96:dd:65:fb:06:8f:23:4e:0b:5e:1d:06:2e:46:
6c:74:84:57:2a:1e:f8:1d:16:b7:fa:7e:c9:ca:73:69:95:6a:
6e:ef:32:e0:a0:9c:92:71:53:53:4f:be:d3:4c:c0:66:fb:5c:
68:a4:22:96:c4:8c:b8:ad:5e:c8:bc:3e:84:80:54:b9:14:f1:
fd:dd:22:f9:50:c4:d9:91:14:c8:55:7b:65:91:f8:1f:a4:e6:
9d:0f:94:b5:de:99:d2:7b:ad:9d:73:8c:fa:18:21:52:cd:29:
e3:53:ac:72:d0:83:1a:70:9c:12:d4:20:5d:5d:84:53:5c:bf:
43:81:9c:c4:62:ff:da:f6:6b:9b:08:c9:ba:78:b6:9c:38:bb:
56:5c:16:04:7c:76:11:11:3d:77:65:83:5c:33:13:49:e0:71:
41:4a:2a:2d:03:70:74:e9:cb:a1:bb:39:ce:7f:b4:30:d2:a1:
66:b5:2d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:29 2026 by rpki-client