Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/AasksM_su6YqjDWHFHQ7aAhvSFY.roa
File: AasksM_su6YqjDWHFHQ7aAhvSFY.roa (raw, json)
Hash identifier: sdIhbCqJYBUY9Ejn1tDAw5yjPvX9D2EbrA0ASejQObA=
Subject key identifier: 01:AB:24:B0:CF:EC:BB:A6:2A:8C:35:87:14:74:3B:68:08:6F:48:56
Certificate issuer: /CN=dc399e8da0a13f3ed70d858197da2ad3e74bea84
Certificate serial: 01A1843702468379757D575FC8741098E8A3
Authority key identifier: DC:39:9E:8D:A0:A1:3F:3E:D7:0D:85:81:97:DA:2A:D3:E7:4B:EA:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DmejaChPz7XDYWBl9oq0-dL6oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/AasksM_su6YqjDWHFHQ7aAhvSFY.roa
Signing time: Wed 28 Oct 2026 20:32:39 +0000
ROA not before: Wed 28 Oct 2026 20:32:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.54.68.0/24 maxlen: 24
185.54.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/3DmejaChPz7XDYWBl9oq0-dL6oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/3DmejaChPz7XDYWBl9oq0-dL6oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DmejaChPz7XDYWBl9oq0-dL6oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:37:02:46:83:79:75:7d:57:5f:c8:74:10:98:e8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc399e8da0a13f3ed70d858197da2ad3e74bea84
Validity
Not Before: Oct 28 20:32:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01ab24b0cfecbba62a8c358714743b68086f4856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:33:a7:11:67:f9:5b:8f:a1:d0:fe:d8:cc:
84:76:7e:f8:a1:64:ba:ce:fc:45:bc:ea:af:4e:f7:
1f:f1:6b:5d:c6:3c:7e:7f:1b:0e:11:36:f6:43:9a:
0b:2d:b1:0e:e4:c4:eb:44:7d:70:3e:ab:3a:ad:f8:
09:e1:55:47:ad:21:47:93:48:f0:f6:46:b4:77:0f:
f9:f9:58:cb:b7:7c:27:00:78:69:49:13:1b:d8:da:
c3:2f:b0:02:0e:fa:23:e6:9f:35:7d:0e:50:c7:d5:
98:e9:a7:9b:f6:1c:33:1e:3f:1a:bc:d8:3c:45:79:
0c:9e:e6:67:6d:2a:c8:ac:04:70:dc:c9:be:0f:d8:
fc:4b:9b:db:75:08:c7:6e:81:03:2a:0b:c5:23:91:
d1:b6:2b:d0:62:02:c9:d2:e4:5b:d4:a6:81:91:ff:
93:c8:5f:cd:96:7b:40:3f:13:66:2d:51:09:ee:05:
1d:75:e9:e5:18:dc:30:9c:17:6e:f9:4d:43:cd:62:
2e:6c:ae:34:58:87:50:e9:e9:23:fc:ab:ca:9d:fc:
e1:6e:5a:22:44:76:c9:83:4c:34:99:b4:92:60:ed:
4e:fc:96:24:fe:e1:b5:ce:93:d4:dc:da:78:19:38:
15:ee:47:69:96:f1:e3:93:8f:71:3e:44:a5:74:4b:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AB:24:B0:CF:EC:BB:A6:2A:8C:35:87:14:74:3B:68:08:6F:48:56
X509v3 Authority Key Identifier:
keyid:DC:39:9E:8D:A0:A1:3F:3E:D7:0D:85:81:97:DA:2A:D3:E7:4B:EA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DmejaChPz7XDYWBl9oq0-dL6oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/AasksM_su6YqjDWHFHQ7aAhvSFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/3DmejaChPz7XDYWBl9oq0-dL6oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.68.0/23
Signature Algorithm: sha256WithRSAEncryption
41:9d:a4:31:27:f1:96:92:4c:a7:2b:58:f7:66:a9:ca:1a:4f:
cd:4f:c6:16:9f:a2:2e:08:2b:8d:48:ee:0e:8e:b2:4a:1e:6b:
0b:cb:92:2d:8f:2e:07:97:c5:89:e4:9f:b0:82:b0:00:27:4b:
28:41:a8:e7:df:49:93:25:30:1f:4d:73:ce:1c:bc:43:ad:30:
68:9b:25:bf:a0:be:b4:2a:3a:48:46:0e:b0:04:a2:e5:f0:17:
70:00:bf:7c:60:24:cc:d3:ff:14:7b:6a:16:41:ec:7f:20:c1:
3e:f0:21:78:68:e9:23:99:1c:1c:c9:a4:31:69:31:50:15:5c:
56:63:06:7f:49:2b:bd:69:db:bc:ff:9c:3f:54:da:74:5c:92:
17:11:a2:d3:b3:d5:7a:25:64:19:8d:3f:9b:c5:2d:dc:07:81:
98:0f:f7:ee:f9:79:9d:dd:e2:bb:b3:0e:39:f2:32:13:1b:5f:
2d:ff:f0:1e:18:e2:66:b8:00:84:73:16:83:19:18:a4:66:b0:
d6:24:62:90:f1:af:6d:ec:4e:88:d5:07:a0:bb:16:2f:be:cb:
8c:97:7a:c7:10:71:8a:ce:73:9e:d4:d7:c0:33:b6:01:b9:bb:
17:db:19:0a:b7:6b:c1:16:7c:b5:23:2b:45:5c:f6:b2:b1:ee:
58:47:36:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:31:48 2026 by rpki-client