Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/aYA6TDe0FRGUQKWpi6CFPmb8si4.roa
File: aYA6TDe0FRGUQKWpi6CFPmb8si4.roa (raw, json)
Hash identifier: TWdXdIAzV6yUR6IvDamhx0hywiAE1G+KEAkggMUBFHI=
Subject key identifier: 69:80:3A:4C:37:B4:15:11:94:40:A5:A9:8B:A0:85:3E:66:FC:B2:2E
Certificate issuer: /CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Certificate serial: 019CDD2059DE3745F5E0BE9B6B3963D4549B
Authority key identifier: D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/aYA6TDe0FRGUQKWpi6CFPmb8si4.roa
Signing time: Wed 11 Mar 2026 13:40:10 +0000
ROA not before: Wed 11 Mar 2026 13:40:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196939
IP address blocks: 193.105.124.0/24 maxlen: 24
2001:678:11fc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dd:20:59:de:37:45:f5:e0:be:9b:6b:39:63:d4:54:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Validity
Not Before: Mar 11 13:40:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69803a4c37b415119440a5a98ba0853e66fcb22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:40:8b:7d:48:e9:77:62:b7:34:79:22:60:8e:
e8:93:4f:c7:f6:d4:8a:d4:f4:9c:49:99:74:e4:db:
97:f6:d1:5a:4e:17:d4:f7:82:f1:2a:7f:20:69:ab:
34:2e:9c:b1:d6:49:8d:2e:d7:cc:5f:94:a7:34:38:
a6:7d:f6:9c:3e:9a:9c:d7:27:0a:26:15:bd:ea:d7:
d9:64:a4:4c:ae:ab:c7:a6:8b:5e:6d:44:94:04:6d:
3c:08:3d:67:a1:6b:29:d5:03:ee:c6:c2:54:3d:64:
06:69:19:65:d4:88:96:f9:12:90:b3:97:9c:db:8e:
5d:36:3f:e2:af:cf:90:01:bf:2b:e6:ff:ec:67:fb:
fa:72:9b:7c:29:07:7d:f6:d4:f4:20:88:94:6a:e3:
88:49:58:9a:2b:c8:e8:12:b6:0a:0b:41:c9:94:de:
12:6c:b3:64:ef:23:41:8e:8f:9a:cd:cd:e4:c5:ca:
c3:08:ce:e2:5b:60:7c:47:dd:f0:33:dc:0e:f1:a7:
98:68:02:d9:25:d0:5e:59:e2:7b:9b:e7:76:11:e5:
cb:2d:4a:07:87:92:ca:32:51:86:f0:7f:1d:dd:91:
51:12:aa:ce:5f:91:cd:de:26:96:93:fe:af:fe:d5:
d7:03:98:85:6b:76:16:94:f6:a3:28:34:d4:dc:40:
ae:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:80:3A:4C:37:B4:15:11:94:40:A5:A9:8B:A0:85:3E:66:FC:B2:2E
X509v3 Authority Key Identifier:
keyid:D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/aYA6TDe0FRGUQKWpi6CFPmb8si4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.124.0/24
IPv6:
2001:678:11fc::/48
Signature Algorithm: sha256WithRSAEncryption
26:c2:83:a2:0d:9b:88:2e:f0:58:95:82:83:24:21:ea:bb:fc:
18:ec:d0:ca:14:d9:40:5e:1d:bf:5e:28:a8:22:47:15:76:9f:
6c:08:d1:69:f9:37:67:d9:ae:64:0f:fb:32:4e:ed:4d:5b:d3:
84:f1:59:a1:73:b3:2f:5f:dc:75:8a:8d:d8:75:2f:b4:db:9a:
2f:03:24:82:d1:a1:6a:86:28:05:99:99:91:83:b0:4a:d6:5c:
78:a4:17:41:54:99:6c:c0:fd:c7:be:63:4e:63:41:d8:65:49:
fb:84:ba:e2:d3:23:3b:66:c6:f1:d9:ed:6e:ad:4c:3b:a6:8d:
f1:bb:20:ff:96:0b:14:4e:57:72:3a:c6:02:40:8a:26:bb:34:
a5:51:4b:5f:4d:93:07:08:f8:68:f7:1e:8d:83:4e:b7:3f:bd:
2c:6e:18:8a:1b:e9:ce:70:a2:bb:03:d9:7b:f0:e2:45:38:3b:
73:16:17:06:a0:7b:90:c5:88:43:cb:d8:f8:54:3b:9a:1b:da:
9d:71:cf:47:08:14:56:3f:90:1e:21:6c:a7:8d:f0:5b:0b:0b:
ab:b1:03:63:b8:3f:77:21:72:3d:e8:5c:30:58:59:5c:0b:53:
13:38:0b:54:e0:bf:9d:85:86:4d:7d:0d:d2:f0:d4:cb:9a:60:
76:87:d4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:28 2026 by rpki-client