Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/ae6vfOe_UB5sL59_YmgnYrMvUjY.roa
File: ae6vfOe_UB5sL59_YmgnYrMvUjY.roa (raw, json)
Hash identifier: UYeEVkIJSbDL/qMMyz7MhtUKRqcR+Ervewhouno445k=
Subject key identifier: 69:EE:AF:7C:E7:BF:50:1E:6C:2F:9F:7F:62:68:27:62:B3:2F:52:36
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F236900A17BAC53BAE7EA795DC807716C
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/ae6vfOe_UB5sL59_YmgnYrMvUjY.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212333
IP address blocks: 92.255.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:00:a1:7b:ac:53:ba:e7:ea:79:5d:c8:07:71:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69eeaf7ce7bf501e6c2f9f7f62682762b32f5236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:44:2e:49:21:e6:e2:6e:ba:ce:69:b1:58:e6:
b7:9c:7a:d0:5b:6c:b9:a6:f3:36:61:1f:6e:7f:2c:
54:7c:d2:5d:3b:e5:1b:68:82:54:40:f1:22:64:92:
51:73:81:0b:fa:04:e6:dc:41:85:e4:05:19:6e:44:
e0:a3:d9:f0:e2:3f:02:4e:c6:ba:26:51:93:9d:f5:
86:c3:15:ff:b5:a1:58:98:27:d6:87:66:6e:d2:71:
53:87:0a:8d:19:18:5e:b5:a9:f7:e4:d0:54:30:ab:
a3:4c:07:99:ab:86:92:3e:b5:aa:25:e0:85:f7:18:
7f:47:bb:95:4d:f6:4c:59:f8:26:ad:a9:29:c1:7a:
b8:af:9e:a3:70:52:7a:02:57:b9:32:9e:8f:02:03:
0b:b7:e8:2b:a7:c5:30:c5:4f:43:3e:a3:a6:bd:1a:
ba:c1:80:cb:5a:34:4c:08:36:3f:1c:46:15:ce:cc:
cc:1d:23:e5:3f:59:34:85:2e:ed:f1:be:e7:ea:ee:
68:48:6c:ca:5d:4a:3d:f0:0d:b1:15:9d:74:c4:51:
38:72:92:0e:0c:c9:4a:c5:10:75:42:0c:6d:9a:a7:
8a:88:bf:a3:9b:fd:5b:1b:8e:4e:b8:94:2b:c0:5b:
28:ed:e7:d1:c8:48:06:37:56:06:94:07:cc:af:48:
ff:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EE:AF:7C:E7:BF:50:1E:6C:2F:9F:7F:62:68:27:62:B3:2F:52:36
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/ae6vfOe_UB5sL59_YmgnYrMvUjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.255.43.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:74:9c:41:27:d6:af:01:a1:25:48:1b:c9:22:41:73:50:96:
0d:23:ff:ee:b3:94:f3:67:d6:de:a3:2a:8c:0d:a4:cb:c5:fa:
99:77:84:b4:a5:07:9e:b2:7c:0d:d8:2c:b4:fa:3f:bb:09:65:
47:54:8f:27:67:89:d0:51:5a:a3:84:51:12:cd:57:f8:7b:99:
2d:9d:28:30:30:6d:e4:fd:fb:bb:cc:88:19:45:71:89:7d:da:
6c:39:54:51:41:9a:cf:f8:64:b3:81:62:c9:b8:a6:a2:c4:70:
e9:70:e0:9a:60:04:d0:b2:c2:79:0e:07:14:11:2c:ef:85:92:
10:e1:9f:90:8d:53:52:d5:e2:8d:72:e7:06:1b:9a:31:41:54:
9b:ab:70:1f:90:79:bc:00:ee:98:05:a4:dd:95:85:67:df:0c:
e4:e5:39:63:1f:33:83:70:f4:38:87:ce:70:49:3f:a9:b2:9e:
b7:7a:ea:24:68:c7:08:d7:86:a2:7c:20:2a:65:90:b6:d9:15:
69:85:eb:1f:bc:47:86:d4:0d:d8:04:28:0d:ca:57:11:a5:42:
89:7b:c3:4a:1e:f1:cd:95:b6:ce:5a:b5:ed:63:b7:62:7b:a2:
07:97:0d:a6:3a:30:e3:32:cf:68:66:ac:26:3a:40:db:19:58:
83:17:6f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:50 2026 by rpki-client