Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/AfEAsPH11-mZ_kZsEPJBQm7vLAA.roa
File: AfEAsPH11-mZ_kZsEPJBQm7vLAA.roa (raw, json)
Hash identifier: +40GqQZz8Tein9GDk2+hImwghr23YMF1gdweUlbJmrU=
Subject key identifier: 01:F1:00:B0:F1:F5:D7:E9:99:FE:46:6C:10:F2:41:42:6E:EF:2C:00
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019E01019A8A29B3AB6AD7156B7C81E2C72C
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/AfEAsPH11-mZ_kZsEPJBQm7vLAA.roa
Signing time: Thu 07 May 2026 05:55:42 +0000
ROA not before: Thu 07 May 2026 05:55:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 81.29.148.0/24 maxlen: 24
81.29.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:01:01:9a:8a:29:b3:ab:6a:d7:15:6b:7c:81:e2:c7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: May 7 05:55:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01f100b0f1f5d7e999fe466c10f241426eef2c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:14:ff:8a:5f:73:6a:e9:f8:c5:59:b1:d4:
d6:ca:1f:a2:c0:e5:1f:2b:2a:dc:b4:23:67:00:37:
7c:a4:df:fd:2b:0d:5f:64:5a:46:fd:36:0c:74:37:
2f:f3:03:a3:51:c4:3e:70:3e:ff:f1:65:cb:bf:4c:
41:c8:95:1b:a8:d8:f2:91:36:88:2c:f7:49:db:5b:
29:1d:6e:66:cf:ad:85:bd:be:f1:01:5a:77:b7:d2:
95:1d:d8:3f:c8:93:4d:e2:7b:43:20:ed:bc:c5:6d:
a2:69:fc:d4:a1:a7:ae:37:05:33:e6:0c:bd:90:48:
57:8a:ee:6e:60:a0:3e:7d:d5:51:a9:02:ea:44:b7:
be:c8:96:da:38:2c:c5:74:39:a1:9c:6a:f4:53:7a:
9e:16:6f:e3:67:2c:1d:52:1c:13:0f:79:24:45:cf:
5d:dd:5e:54:09:fe:1c:7e:03:c2:9a:ef:6f:ed:a6:
f2:ac:48:0e:42:8a:6c:8c:26:52:eb:8f:ca:88:94:
b0:bb:a9:13:4c:7d:34:47:b4:54:06:5f:64:dd:ce:
6f:00:4d:78:47:4d:be:62:ae:7d:ae:27:e0:8c:4b:
a4:c9:f5:87:c9:fd:34:f6:cd:0d:0f:ad:a2:b6:6a:
09:36:42:83:45:5e:b5:5a:b8:71:f3:91:25:52:49:
e6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F1:00:B0:F1:F5:D7:E9:99:FE:46:6C:10:F2:41:42:6E:EF:2C:00
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/AfEAsPH11-mZ_kZsEPJBQm7vLAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.148.0/24
81.29.159.0/24
Signature Algorithm: sha256WithRSAEncryption
96:84:71:75:53:c3:fa:28:43:16:08:14:86:89:cb:f7:13:89:
c3:0b:87:c2:dc:5f:1d:43:9e:5e:24:89:6f:53:2b:80:6a:ec:
65:6a:e5:c8:db:31:ab:7a:7e:59:10:bf:8a:79:58:9a:d4:1d:
b5:30:6e:c0:eb:61:27:c8:c9:f0:66:41:2f:4a:58:d8:8d:d0:
18:88:08:4c:77:3d:e7:b3:ab:d9:39:47:5d:07:f2:78:74:3c:
7c:47:84:9c:8a:76:56:cc:ef:da:56:9e:22:fc:91:3b:5c:ed:
fd:ce:e2:3d:ed:55:dd:9d:c1:7e:05:d3:75:3f:ff:c3:f4:c6:
cb:a7:3b:ca:02:24:2a:75:65:73:28:af:80:a8:b6:61:54:f6:
05:4c:bb:6a:32:5e:47:90:f7:89:b5:bf:8f:f4:38:e7:47:e4:
4a:d1:c5:50:23:5b:7e:c8:62:f6:df:45:5c:31:f0:24:27:93:
da:c3:20:db:b9:8e:e4:d2:eb:74:81:91:65:ef:d1:f3:18:56:
68:11:35:1d:04:16:43:cb:18:f4:a7:e0:11:55:71:86:e6:1c:
f7:bf:35:22:db:a5:93:68:81:cd:be:86:01:03:b2:85:d3:10:
26:fa:1a:cf:4b:6b:04:ae:1f:3f:08:14:a2:1e:d6:f9:24:86:
7b:8b:46:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:51 2026 by rpki-client