Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/H66jiOjIkB87nIobF_YVreGxebg.roa
File: H66jiOjIkB87nIobF_YVreGxebg.roa (raw, json)
Hash identifier: nX0dPkscOxKWgmYZHhHlPPDOqJnygv6Vqh3rpPBUOoA=
Subject key identifier: 1F:AE:A3:88:E8:C8:90:1F:3B:9C:8A:1B:17:F6:15:AD:E1:B1:79:B8
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 019D2046B83CC5453D9631EDBB909F109606
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/H66jiOjIkB87nIobF_YVreGxebg.roa
Signing time: Tue 24 Mar 2026 14:36:38 +0000
ROA not before: Tue 24 Mar 2026 14:36:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3170
IP address blocks: 185.7.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:46:b8:3c:c5:45:3d:96:31:ed:bb:90:9f:10:96:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Mar 24 14:36:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1faea388e8c8901f3b9c8a1b17f615ade1b179b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:8d:51:45:4e:dc:74:a6:8b:4f:fd:c9:e1:
64:2d:a7:e5:5d:c6:26:53:fb:eb:36:18:87:0f:7c:
21:b3:5c:a4:28:3b:4e:68:23:b6:87:6a:5a:f1:00:
8e:2d:eb:24:1a:40:2a:ca:1a:5a:81:7a:a2:34:90:
b4:0e:4b:57:b3:d2:2f:c8:63:83:39:df:4a:9f:15:
d9:bf:db:95:aa:d0:83:ad:9d:9f:b0:1a:da:d6:2c:
1a:2b:d8:5a:c8:73:a9:b4:29:d0:01:01:97:4b:a4:
e0:05:6f:3d:b4:0f:1d:19:6b:68:c8:3c:81:31:45:
42:5e:0f:71:43:a5:c6:04:1e:61:fb:dc:b2:cc:85:
c0:d1:a5:b6:ea:2a:85:48:f8:a9:b2:6a:3e:a5:78:
67:ba:38:a8:95:45:df:b0:eb:d9:45:81:08:ce:03:
d2:7b:ad:9e:53:69:d2:20:33:55:9e:0e:80:f2:01:
c2:94:15:4c:a8:2f:2d:51:c1:3b:f3:09:94:27:ef:
6d:18:de:2e:50:44:e4:e0:93:2e:52:f4:f9:56:cc:
17:32:ef:f4:67:ea:c2:81:34:8a:f2:25:34:da:17:
07:87:44:44:9b:ac:46:c9:3a:a5:34:76:3d:a9:91:
02:12:94:52:1a:cf:7e:f0:5d:5b:f3:82:bf:42:e6:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AE:A3:88:E8:C8:90:1F:3B:9C:8A:1B:17:F6:15:AD:E1:B1:79:B8
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/H66jiOjIkB87nIobF_YVreGxebg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.80.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:cd:4b:53:13:87:f9:48:56:5f:7d:27:f6:af:58:9b:b5:2b:
bd:d7:c7:4e:3d:b2:5a:db:ef:85:0e:37:b4:c4:39:c7:3a:e4:
ac:9d:08:02:5e:aa:ad:32:d6:a1:62:9b:92:1d:a4:5e:b5:3b:
e2:3f:58:60:cd:fe:67:4b:6f:a4:d1:32:f4:65:59:a5:18:98:
72:2c:be:d7:d2:94:df:94:5d:65:7e:c9:88:ed:11:c0:ce:67:
5c:e0:ea:b3:99:20:15:e3:19:6d:f0:28:77:3c:8c:2a:fb:45:
f5:65:af:19:2a:0d:c6:e9:8a:db:ba:1b:41:f5:5a:b2:bb:e4:
4d:09:62:18:6d:9b:5d:c4:cd:da:6f:7e:e7:1f:c1:d9:ab:a6:
86:91:a8:c8:e7:99:54:61:b9:f5:5b:68:c4:61:cf:3a:5a:1b:
e9:2f:d3:c2:31:6e:55:ff:fa:65:96:8d:65:ed:cd:64:33:ee:
5f:45:ae:05:b0:08:ab:63:7a:94:b1:ff:80:14:eb:6f:25:35:
4b:71:91:eb:b1:46:86:8b:4d:f8:03:24:44:88:e2:20:ce:5d:
1c:e2:5f:cd:17:24:16:ae:e9:11:b0:9d:74:b5:35:4d:70:53:
4a:07:f9:33:30:29:af:d5:db:eb:3d:8f:66:c5:8f:0c:85:94:
77:20:d4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:37 2026 by rpki-client