Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/AXY1LKAuttv868qKOobgCpxhp-Q.roa
File: AXY1LKAuttv868qKOobgCpxhp-Q.roa (raw, json)
Hash identifier: pe1MaHidf85hUmGcuCspZ5Ef9d9dt9I6Wf//KQkkLDE=
Subject key identifier: 01:76:35:2C:A0:2E:B6:DB:FC:EB:CA:8A:3A:86:E0:0A:9C:61:A7:E4
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01A0CD57EEF04285B1F746229AE24CDA7F65
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/AXY1LKAuttv868qKOobgCpxhp-Q.roa
Signing time: Wed 23 Sep 2026 08:18:07 +0000
ROA not before: Wed 23 Sep 2026 08:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 37.32.43.0/24 maxlen: 24
185.212.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:57:ee:f0:42:85:b1:f7:46:22:9a:e2:4c:da:7f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Sep 23 08:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0176352ca02eb6dbfcebca8a3a86e00a9c61a7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:88:ef:fe:fe:3d:6b:22:7d:b2:76:1e:b5:
4e:20:7f:45:af:4a:e3:59:1c:d6:86:d1:7f:aa:32:
e7:3a:ad:af:d7:51:9c:9b:cf:ff:c0:d1:44:4f:e9:
4f:7f:86:ed:8c:1e:9c:3d:01:a5:f9:3d:ab:7f:e6:
cd:09:ec:23:38:66:30:a1:a5:8e:ec:59:ce:5f:15:
b2:57:c3:e0:74:b7:cf:d8:ea:48:37:b8:d9:5b:8d:
37:b3:f2:e1:9d:df:68:0c:83:cf:69:72:10:89:44:
9f:f0:4d:f9:ca:fc:37:46:0b:aa:b3:33:0b:7b:0b:
e3:89:ae:df:61:32:3b:c5:62:ed:38:cc:5f:e7:6f:
08:7b:a3:d6:f3:74:53:0c:cd:a4:22:ab:5d:5d:c7:
e3:29:d8:b7:54:0d:77:c6:23:1a:cb:77:d9:01:d8:
95:91:e9:77:4c:ec:58:c4:95:b8:f4:44:13:58:97:
65:30:25:69:79:3c:ff:5d:83:19:e2:f0:da:2b:8b:
82:ea:d7:80:82:eb:9b:e3:73:24:6d:80:a6:14:72:
ee:ee:60:4f:37:f7:b2:6e:fb:cc:15:18:2a:70:ae:
ff:43:b8:ae:fb:fb:2e:e6:60:b8:81:6b:24:02:74:
26:d9:87:57:09:ae:18:01:02:ae:f4:e7:f6:64:b3:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:76:35:2C:A0:2E:B6:DB:FC:EB:CA:8A:3A:86:E0:0A:9C:61:A7:E4
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/AXY1LKAuttv868qKOobgCpxhp-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.43.0/24
185.212.49.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:cd:f7:b6:d1:11:c4:e6:07:72:83:af:ef:6c:ba:65:fb:67:
e8:a4:db:32:ef:28:ed:da:5a:ab:89:8e:1b:9a:84:30:3c:1c:
cd:af:16:e3:9e:4e:b1:ed:1e:2b:44:82:79:b7:ac:50:84:fd:
89:25:e1:0c:02:0c:97:46:da:c9:31:54:cf:b8:ac:18:cd:db:
e6:2f:74:38:26:12:1b:bd:d8:ee:7e:8c:b4:94:eb:50:f7:2f:
0e:0f:70:ce:f3:76:c8:44:fa:8e:c6:d3:3e:e1:18:db:bf:73:
aa:21:b8:a7:32:7b:83:fd:d4:ea:96:fc:3f:99:e0:d9:7f:a4:
4b:61:55:e9:46:0e:f4:83:72:b2:5a:c3:83:fb:13:45:44:98:
dd:8c:07:5e:d5:8e:27:d0:d6:39:bb:12:c1:25:b0:8b:2c:15:
ae:09:ed:8f:5b:cb:56:26:fe:7f:8c:5c:87:ac:4f:78:e2:8f:
9b:14:89:7d:4d:26:13:cf:f8:34:bf:27:b3:5a:ac:a9:99:b4:
42:07:4d:80:84:06:e7:97:16:38:1a:49:38:ab:05:79:56:03:
e4:30:b3:59:f0:4a:a3:d1:f2:bc:08:e6:52:af:02:39:f6:ba:
10:3c:55:46:72:c7:70:64:c5:6b:47:f1:3c:4d:70:75:76:ec:
16:66:9a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:57:55 2026 by rpki-client