Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/aq1PVhxdKoO_iDtBxNMm9TZ1q6E.roa
File: aq1PVhxdKoO_iDtBxNMm9TZ1q6E.roa (raw, json)
Hash identifier: 5ofHUy4EjDyelXgpgqiecAYdkBVetFci1OyzEvf4bds=
Subject key identifier: 6A:AD:4F:56:1C:5D:2A:83:BF:88:3B:41:C4:D3:26:F5:36:75:AB:A1
Certificate issuer: /CN=14f33c2e90be26360684afd50d71da54f50a45b8
Certificate serial: 019F2368B0A14C4C33B1302B15865A1579EB
Authority key identifier: 14:F3:3C:2E:90:BE:26:36:06:84:AF:D5:0D:71:DA:54:F5:0A:45:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPM8LpC-JjYGhK_VDXHaVPUKRbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/aq1PVhxdKoO_iDtBxNMm9TZ1q6E.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202339
IP address blocks: 185.47.96.0/22 maxlen: 22
2a04:a580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPM8LpC-JjYGhK_VDXHaVPUKRbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b0:a1:4c:4c:33:b1:30:2b:15:86:5a:15:79:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14f33c2e90be26360684afd50d71da54f50a45b8
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aad4f561c5d2a83bf883b41c4d326f53675aba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:16:7c:99:83:7e:32:6c:16:d3:06:d7:25:
d1:0a:51:db:9e:e9:93:b1:37:30:98:ea:56:68:e9:
8d:41:36:9b:0a:d1:d8:30:48:1e:95:fb:b9:00:49:
8e:23:ad:39:73:2d:f0:18:f0:9d:79:ec:30:57:da:
cd:1f:bd:88:e9:5d:f7:04:4c:a3:13:8c:be:25:e4:
97:9d:9a:3b:24:c6:8a:68:4a:f9:57:98:ff:01:76:
a2:18:13:d0:1e:da:18:77:d4:4e:92:e7:c1:b5:ed:
a3:97:3b:9d:0e:f7:aa:95:71:be:39:43:82:ab:49:
04:d6:17:04:73:79:57:d1:64:3d:b1:44:62:42:35:
70:37:2e:41:f4:35:e2:47:07:c4:77:2b:f3:25:7f:
57:43:3c:7c:ec:e3:e1:9f:a5:ea:28:f7:bd:62:b9:
7e:ac:e8:75:b2:06:b1:33:59:f4:d9:3b:14:53:b1:
d3:90:fa:b4:2a:39:d1:14:49:3d:e2:66:50:ad:47:
fa:bd:5b:ef:9e:e2:08:21:1e:1d:69:13:d4:30:cb:
22:84:e2:9b:a6:e2:fa:a0:c0:8d:e6:f0:d8:4a:90:
a8:5f:c7:62:b6:06:e4:01:0b:61:07:6e:34:af:1d:
9f:57:03:bf:35:cf:2c:38:1f:91:b5:2f:6e:fa:60:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AD:4F:56:1C:5D:2A:83:BF:88:3B:41:C4:D3:26:F5:36:75:AB:A1
X509v3 Authority Key Identifier:
keyid:14:F3:3C:2E:90:BE:26:36:06:84:AF:D5:0D:71:DA:54:F5:0A:45:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPM8LpC-JjYGhK_VDXHaVPUKRbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/aq1PVhxdKoO_iDtBxNMm9TZ1q6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.96.0/22
IPv6:
2a04:a580::/29
Signature Algorithm: sha256WithRSAEncryption
6f:84:10:15:ad:a7:a1:3e:d2:92:99:4f:84:b7:fe:83:61:25:
0f:be:46:a9:f1:dd:bf:de:28:4f:8f:8c:0a:dc:0c:2d:43:49:
07:42:2f:f9:7b:19:df:fd:88:e8:7a:96:c6:6d:e1:72:1a:63:
83:9a:b8:84:53:9e:de:f1:5d:b5:4d:9b:79:12:4a:8f:15:d0:
b9:92:1b:ea:f3:3d:b0:57:5c:98:7a:d3:45:70:d2:9a:8e:b1:
72:8d:04:92:2c:45:62:4d:03:27:4e:50:73:56:d5:1f:36:32:
4f:20:84:69:cd:4f:5d:56:3f:b3:08:24:3f:30:1c:29:f8:dd:
17:7e:07:03:05:12:f5:2e:a1:b3:26:1c:5a:2d:d1:08:a6:fd:
4a:c5:ae:2a:9e:76:d1:94:b5:6d:35:ef:b4:62:76:84:6a:80:
7b:8d:b5:ca:fa:f5:88:d6:3e:82:0e:90:50:7e:a8:f2:fe:e2:
2c:21:ed:88:40:d5:95:5e:3c:62:99:b0:9d:64:20:32:79:db:
94:ce:f0:11:89:be:a6:21:c4:db:f0:32:6b:48:92:c4:81:7c:
52:c9:7f:40:91:3c:b3:0d:4f:cb:76:cc:0b:0c:d4:76:37:de:
25:06:89:45:56:5b:82:e9:fe:d7:70:99:b9:6a:fa:c3:4c:df:
6c:58:b3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:23 2026 by rpki-client