Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/aseL8F7eVCfUqeARKpKQLWCvJ4c.roa
File: aseL8F7eVCfUqeARKpKQLWCvJ4c.roa (raw, json)
Hash identifier: xgxVI2JaVJSth+Ct798ONz6OyQH+05Vly3ue0UETykA=
Subject key identifier: 6A:C7:8B:F0:5E:DE:54:27:D4:A9:E0:11:2A:92:90:2D:60:AF:27:87
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 019D0A08EA0A23DA99D4EDE2862F26B96B2A
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/aseL8F7eVCfUqeARKpKQLWCvJ4c.roa
Signing time: Fri 20 Mar 2026 06:57:29 +0000
ROA not before: Fri 20 Mar 2026 06:57:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 193.178.33.0/24 maxlen: 24
193.178.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:08:ea:0a:23:da:99:d4:ed:e2:86:2f:26:b9:6b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Mar 20 06:57:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ac78bf05ede5427d4a9e0112a92902d60af2787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:52:da:79:b9:4e:61:c5:79:a5:5e:ee:96:
ee:fc:3e:58:3b:7d:dd:d8:c9:dc:8a:12:79:93:db:
4c:cf:11:00:a1:2f:d5:e0:53:b7:cb:ba:b3:61:d4:
f4:f2:1b:36:ee:10:b2:22:dd:d7:7e:e9:08:b8:63:
6b:26:be:20:b8:65:99:42:ba:cd:9f:23:b1:48:3a:
6b:0b:db:46:4b:54:f8:b4:30:ae:98:61:fd:a2:1e:
0a:35:85:71:02:07:67:c4:6a:01:71:32:68:79:f0:
5e:f7:fa:fe:98:16:ae:9e:9f:4a:07:7b:91:f2:bf:
88:26:ef:a4:09:35:4a:91:36:d7:8a:6a:a2:f0:a0:
c4:c9:45:7d:1d:06:c7:4e:4c:76:db:f2:03:7c:ff:
91:23:32:f8:ec:60:84:1a:93:56:5a:b8:98:b3:62:
14:1f:30:43:e7:8e:e0:61:70:fb:bf:05:1b:09:e6:
da:a8:8e:34:ca:e9:93:61:33:60:33:20:5a:48:72:
79:46:69:d0:e0:97:f2:60:d3:80:be:59:42:64:10:
0d:f3:24:51:4b:7c:bd:e3:aa:5f:9d:bd:57:4e:8a:
6e:17:0d:c9:e5:1b:7c:68:be:2e:e3:8f:03:5c:9e:
32:f9:ee:35:8f:65:7c:8a:87:94:46:64:df:9e:58:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C7:8B:F0:5E:DE:54:27:D4:A9:E0:11:2A:92:90:2D:60:AF:27:87
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/aseL8F7eVCfUqeARKpKQLWCvJ4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.33.0/24
193.178.52.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ef:95:1f:a3:aa:ee:7e:af:d2:d1:d9:94:d6:ba:d8:cc:9a:
d6:27:59:ec:07:88:24:9d:b7:c5:38:a0:f3:c2:9e:9b:c6:e7:
36:9f:ce:0e:d7:5a:ac:22:ed:da:a5:44:63:f4:67:f3:89:fe:
c8:99:e8:5a:c9:78:80:fe:fb:d2:b7:38:fb:73:5e:54:f2:af:
03:d2:ca:59:1f:48:6b:6b:90:7b:56:36:93:ee:99:1e:4a:98:
dd:ec:d7:8f:2f:3d:d2:82:58:4e:a2:a1:61:d8:cd:d0:a7:d7:
8c:ff:e3:f8:de:3a:21:93:20:4b:51:6f:cf:ef:2a:1a:b6:26:
97:b0:d7:b4:b9:8c:56:85:2b:2e:be:8d:e7:dc:3c:ff:c2:71:
36:b3:b8:8a:3e:5b:28:81:8e:cd:3a:21:c9:cf:07:8a:4b:ff:
73:f0:b1:4f:e5:c7:b8:be:49:81:06:8d:4f:d4:f6:09:9d:ea:
a1:fa:0f:f2:8c:dd:bc:6f:bf:12:2a:99:96:02:5c:c7:2d:31:
cd:fd:4e:6a:2c:07:22:7c:55:34:45:b2:d6:c4:c4:6c:2d:5c:
9d:87:5b:fc:de:27:f1:2c:bb:5e:c7:79:c4:d9:6c:1e:ab:1c:
3f:fd:24:fd:5c:b7:f8:ef:f8:b7:f8:75:b6:06:8f:c4:db:2d:
73:4f:ac:78
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ0KCOoKI9qZ1O3ihi8muWsqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZjA2NWM4YmRiNzhmZjI5NGY3YzU0NTQ5NzFkYmZhYmZi
NmMxODQwHhcNMjYwMzIwMDY1NzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWM3OGJmMDVlZGU1NDI3ZDRhOWUwMTEyYTkyOTAyZDYwYWYyNzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwspS2nm5TmHFeaVe7pbu/D5YO33d
2MncihJ5k9tMzxEAoS/V4FO3y7qzYdT08hs27hCyIt3XfukIuGNrJr4guGWZQrrN
nyOxSDprC9tGS1T4tDCumGH9oh4KNYVxAgdnxGoBcTJoefBe9/r+mBaunp9KB3uR
8r+IJu+kCTVKkTbXimqi8KDEyUV9HQbHTkx22/IDfP+RIzL47GCEGpNWWriYs2IU
HzBD547gYXD7vwUbCebaqI40yumTYTNgMyBaSHJ5RmnQ4JfyYNOAvllCZBAN8yRR
S3y946pfnb1XTopuFw3J5Rt8aL4u448DXJ4y+e41j2V8ioeURmTfnlh+nQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGrHi/Be3lQn1KngESqSkC1gryeHMB8GA1UdIwQY
MBaAFNXwZci9t4/ylPfFRUlx2/q/tsGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWIt
MzVhNWRjMmM3OTJjLzEvYXNlTDhGN2VWQ2ZVcWVBUktwS1FMV0N2SjRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWItMzVhNWRjMmM3OTJj
LzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwbIhAwQA
wbI0MA0GCSqGSIb3DQEBCwUAA4IBAQAP75Ufo6rufq/S0dmU1rrYzJrWJ1nsB4gk
nbfFOKDzwp6bxuc2n84O11qsIu3apURj9Gfzif7ImehayXiA/vvStzj7c15U8q8D
0spZH0hra5B7VjaT7pkeSpjd7NePLz3SglhOoqFh2M3Qp9eM/+P43johkyBLUW/P
7yoatiaXsNe0uYxWhSsuvo3n3Dz/wnE2s7iKPlsogY7NOiHJzweKS/9z8LFP5ce4
vkmBBo1P1PYJneqh+g/yjN28b78SKpmWAlzHLTHN/U5qLAcifFU0RbLWxMRsLVyd
h1v83ifxLLtex3nE2Wweqxw//ST9XLf47/i3+HW2Bo/E2y1zT6x4
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:19:34 2026 by rpki-client