Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/AzooWuklm-3P7PJRiw22avIbtzA.roa
File: AzooWuklm-3P7PJRiw22avIbtzA.roa (raw, json)
Hash identifier: kgzWAt/cYY+uCetaCudrArQVeL4ScGnH/K5j6IEA5fI=
Subject key identifier: 03:3A:28:5A:E9:25:9B:ED:CF:EC:F2:51:8B:0D:B6:6A:F2:1B:B7:30
Certificate issuer: /CN=c2f4137d9c3fa861e08104f4da1289dae9fd5eb0
Certificate serial: 01A0AF2747E7C1A56D5A826ABD7D64759648
Authority key identifier: C2:F4:13:7D:9C:3F:A8:61:E0:81:04:F4:DA:12:89:DA:E9:FD:5E:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvQTfZw_qGHggQT02hKJ2un9XrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/AzooWuklm-3P7PJRiw22avIbtzA.roa
Signing time: Thu 17 Sep 2026 11:36:22 +0000
ROA not before: Thu 17 Sep 2026 11:36:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215945
IP address blocks: 2001:67c:27b4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvQTfZw_qGHggQT02hKJ2un9XrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:27:47:e7:c1:a5:6d:5a:82:6a:bd:7d:64:75:96:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f4137d9c3fa861e08104f4da1289dae9fd5eb0
Validity
Not Before: Sep 17 11:36:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=033a285ae9259bedcfecf2518b0db66af21bb730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:a1:b5:d4:4e:7d:a6:78:fb:65:7c:e2:e2:
d4:1f:f3:2c:04:f7:fd:b3:0d:20:ae:fa:51:8b:1c:
12:fe:74:5d:38:99:b5:fc:95:0d:6a:0f:f7:ba:4e:
ac:1f:3d:db:06:1b:68:43:73:77:15:b3:cd:83:b2:
d4:24:fc:5a:9a:d0:45:28:75:0b:e9:93:7d:4e:45:
e6:64:a5:06:88:78:b2:e2:27:d3:b8:af:ad:ac:1d:
39:8b:7d:96:82:32:04:a9:90:77:d7:c1:0b:48:31:
16:b5:af:87:4b:50:60:95:8a:6d:df:90:73:3b:dc:
13:8e:8e:c4:7b:75:48:53:4b:b8:09:17:60:ca:38:
09:58:e9:fb:48:d4:0b:1d:92:ae:aa:cc:1d:75:e5:
aa:ee:65:6c:21:b2:37:10:47:0b:8c:2e:f7:41:18:
67:62:4d:05:90:9b:a2:fc:ed:71:96:0e:c8:20:ae:
60:a1:da:6f:86:9a:16:02:ed:14:9f:7c:dd:0f:bc:
46:ab:13:5b:84:6f:d4:f5:bb:ca:b6:fc:57:40:5f:
99:84:b3:0c:21:6f:ee:87:ee:bd:1a:cc:c3:d1:1b:
ba:4f:0e:81:3e:05:3f:6c:46:ad:9a:76:50:a8:e7:
53:47:a8:fa:76:97:94:5d:4d:77:63:b5:a3:cd:c5:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3A:28:5A:E9:25:9B:ED:CF:EC:F2:51:8B:0D:B6:6A:F2:1B:B7:30
X509v3 Authority Key Identifier:
keyid:C2:F4:13:7D:9C:3F:A8:61:E0:81:04:F4:DA:12:89:DA:E9:FD:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvQTfZw_qGHggQT02hKJ2un9XrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/AzooWuklm-3P7PJRiw22avIbtzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1561ce-9722-465d-9c63-9abb709216c4/1/wvQTfZw_qGHggQT02hKJ2un9XrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:27b4::/48
Signature Algorithm: sha256WithRSAEncryption
53:6f:be:ab:fe:03:a5:23:0e:70:89:06:09:61:73:78:42:5c:
4c:48:1c:12:37:95:fb:8c:40:00:72:ae:02:48:23:91:d4:2d:
79:f2:f4:3e:fa:05:92:2d:71:15:39:27:73:07:5b:7e:b3:bf:
44:df:e9:8a:c5:74:30:63:2c:bf:4d:40:e5:ea:8f:44:17:d9:
12:c5:8e:33:3e:be:47:35:2a:3c:f1:4e:3b:4e:09:b0:5a:f1:
b0:7c:63:de:20:14:22:49:2c:2c:35:8f:de:f5:4c:c4:09:63:
d1:1d:a3:a1:16:0a:62:9c:83:66:69:8e:dc:24:3d:9c:18:e3:
b1:75:bd:8a:29:9a:9c:51:c1:92:ec:6d:c0:30:47:ff:3a:39:
9a:4c:50:2b:ca:c0:55:e1:fa:21:70:70:a5:b7:79:a6:be:2f:
49:7c:63:cd:f3:e5:c9:47:24:38:80:2d:ed:e9:a8:73:d3:1d:
43:41:e0:57:7e:47:a4:b1:62:e9:6e:5a:b2:89:2d:6a:cd:e9:
9a:b6:87:bc:b1:e5:a8:7e:11:47:b7:f8:8b:4e:da:e9:cd:09:
56:d0:19:ab:52:c7:27:2a:1f:a0:7b:08:8a:fe:59:ea:32:65:
7c:b7:93:56:41:1d:2f:f1:cb:dc:c6:51:33:49:12:41:25:10:
51:c6:b4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:57:53 2026 by rpki-client