Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/AzF2HwJdOCdbdW6tYAc5su-Ek5k.roa
File: AzF2HwJdOCdbdW6tYAc5su-Ek5k.roa (raw, json)
Hash identifier: U+EITLdgiQIotPLXTL1rMd/bYwyN4pE+4oxZrH4ZSCc=
Subject key identifier: 03:31:76:1F:02:5D:38:27:5B:75:6E:AD:60:07:39:B2:EF:84:93:99
Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5
Certificate serial: 01A1CAB4AB0360A05175AE016446AC05AED1
Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/AzF2HwJdOCdbdW6tYAc5su-Ek5k.roa
Signing time: Wed 11 Nov 2026 13:03:20 +0000
ROA not before: Wed 11 Nov 2026 13:03:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198380
IP address blocks: 185.154.236.0/22 maxlen: 24
185.211.80.0/22 maxlen: 24
185.211.80.0/23 maxlen: 24
185.211.82.0/23 maxlen: 24
185.219.86.0/24 maxlen: 24
2a07:9680::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:b4:ab:03:60:a0:51:75:ae:01:64:46:ac:05:ae:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a02705006532ef33a0064f875a100923509fd5
Validity
Not Before: Nov 11 13:03:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0331761f025d38275b756ead600739b2ef849399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ea:14:10:e3:9f:8a:5e:63:fa:27:7f:3d:10:
5e:70:36:ca:71:98:2b:fd:d3:5e:ff:52:7e:ab:08:
d7:b9:ca:06:f2:1b:27:fc:65:87:27:38:01:9d:d5:
d5:3b:e0:ae:e6:ef:1d:67:91:ec:c1:b0:ab:3b:15:
a7:c4:20:5a:14:b6:1e:7c:3d:45:fc:e8:11:aa:63:
ef:c3:40:93:cc:f2:82:de:8c:4e:48:ce:14:e1:fd:
4b:8e:67:c7:41:cd:cb:91:13:fc:48:2d:85:fa:41:
16:e9:e4:1e:33:da:ed:2f:45:d7:ca:71:9d:fe:53:
54:ee:2b:e6:0a:1e:d9:a0:aa:80:3c:f0:c7:9c:b2:
a6:07:75:53:16:19:e8:e1:36:d6:b5:63:c1:56:01:
02:2e:19:18:f8:d8:76:9f:91:33:35:19:f8:fd:48:
ad:27:71:f0:e9:ad:85:f3:fc:68:c4:a1:c6:7a:80:
1d:eb:df:79:86:da:18:e5:7e:6c:2c:26:31:e9:b6:
73:f3:7f:24:04:17:a9:e1:ac:05:8f:86:de:08:82:
dc:32:7e:f7:dc:46:9d:10:00:c8:c2:07:d8:f2:70:
64:e1:50:06:da:89:a7:1c:34:1e:e2:5c:58:b1:4a:
a4:10:ba:05:75:1d:43:9e:f5:c6:17:91:79:e5:bb:
1c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:31:76:1F:02:5D:38:27:5B:75:6E:AD:60:07:39:B2:EF:84:93:99
X509v3 Authority Key Identifier:
keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/AzF2HwJdOCdbdW6tYAc5su-Ek5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.236.0/22
185.211.80.0/22
185.219.86.0/24
IPv6:
2a07:9680::/29
Signature Algorithm: sha256WithRSAEncryption
9d:82:a6:db:1c:83:b8:86:6c:3e:66:8a:85:ea:c4:bb:06:ee:
c8:38:54:14:58:53:c1:60:e2:0f:c1:aa:2f:14:fe:5d:b1:a1:
fe:d2:47:b6:ba:f1:03:be:13:aa:75:d5:f2:61:4f:9c:95:46:
93:d8:c9:ff:c5:2c:e8:22:a8:ef:0f:ef:1b:25:68:ac:cb:b0:
a5:17:79:3a:7f:88:25:75:65:1d:ec:24:d6:b6:fb:03:1c:f3:
9d:b3:e6:5f:f0:a9:1f:42:14:93:1e:86:2c:21:65:14:eb:77:
6f:73:ed:fe:e1:58:9b:2a:b5:b9:8d:d0:1c:05:75:90:e2:e1:
ca:bb:1d:5f:47:0b:bb:e7:eb:d8:5f:40:95:2e:56:7f:2b:e0:
5c:d7:04:eb:71:a2:94:1b:6b:b9:3c:e7:2b:17:03:a6:79:e7:
56:e5:00:99:20:f7:cf:d5:40:00:f8:45:7c:58:c0:17:26:31:
72:9b:45:f7:c7:8d:86:a8:3d:10:f5:a4:5f:11:bb:52:78:f4:
01:27:53:b0:97:77:ef:52:28:89:08:8c:ef:5f:15:14:2f:e5:
a4:6b:bb:d1:a0:10:e9:5e:e6:3f:50:3a:a0:35:9d:18:47:fe:
d7:7c:71:fd:9e:1c:8d:ec:eb:81:95:40:2a:90:19:2d:b2:d2:
d2:fb:d6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:39:40 2026 by rpki-client