Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/aXZJm2DRkarUBrcUWpvt5lbMMOs.roa
File: aXZJm2DRkarUBrcUWpvt5lbMMOs.roa (raw, json)
Hash identifier: ui+2DkUuL1ctf7u/JTyn3ysys3DhDdpt7LeK9bC8l08=
Subject key identifier: 69:76:49:9B:60:D1:91:AA:D4:06:B7:14:5A:9B:ED:E6:56:CC:30:EB
Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial: 01A062694182663B2296F1955458E9392224
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/aXZJm2DRkarUBrcUWpvt5lbMMOs.roa
Signing time: Wed 02 Sep 2026 13:57:40 +0000
ROA not before: Wed 02 Sep 2026 13:57:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16032
IP address blocks: 194.46.4.0/22 maxlen: 22
194.46.8.0/22 maxlen: 22
194.46.126.0/23 maxlen: 23
194.46.128.0/22 maxlen: 22
194.46.136.0/21 maxlen: 21
194.46.144.0/22 maxlen: 22
194.46.148.0/22 maxlen: 22
194.46.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:69:41:82:66:3b:22:96:f1:95:54:58:e9:39:22:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Validity
Not Before: Sep 2 13:57:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6976499b60d191aad406b7145a9bede656cc30eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:96:8e:bc:db:da:ee:09:38:61:18:e2:48:8c:
0a:53:02:9a:aa:d3:02:48:e0:6e:46:9b:4b:4d:89:
81:ca:c7:11:f6:21:ed:2e:e2:98:74:61:01:cb:cb:
29:41:dc:0e:2c:42:20:9e:ec:22:87:8a:86:15:cd:
c4:8f:f2:91:91:c4:86:9a:c7:68:35:11:e8:12:6c:
60:0b:73:6e:9d:8d:b4:9d:bc:f8:c9:ad:a9:dd:bb:
93:22:19:25:aa:04:b2:c5:58:80:32:f2:b1:e6:f1:
68:b8:ec:45:6a:dc:2b:ba:78:62:73:5c:aa:ca:a0:
3f:7f:c1:f7:6b:4a:2d:a9:33:44:63:b0:f4:a5:5a:
5f:ad:dd:2d:d6:39:bb:7e:fd:ad:d8:34:59:78:a3:
f8:5e:0e:bf:57:e1:c9:0b:87:b9:a6:e6:a7:45:43:
d9:36:36:8d:31:b0:fc:b9:3c:d3:32:01:54:b2:11:
3c:b3:74:3b:d9:5d:f2:b9:9c:71:11:cc:cd:34:04:
19:bf:80:5b:c6:08:36:45:0a:a3:50:6c:d1:3f:b6:
2d:cd:35:44:5b:e8:fb:25:b6:e5:c4:4d:a0:7c:49:
1c:eb:d9:43:5e:ef:40:92:1d:36:92:e3:86:cc:df:
c7:5c:ab:78:3d:96:54:3d:ef:a2:59:45:13:82:47:
1d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:76:49:9B:60:D1:91:AA:D4:06:B7:14:5A:9B:ED:E6:56:CC:30:EB
X509v3 Authority Key Identifier:
keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/aXZJm2DRkarUBrcUWpvt5lbMMOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.46.4.0-194.46.11.255
194.46.126.0-194.46.131.255
194.46.136.0-194.46.151.255
194.46.156.0/22
Signature Algorithm: sha256WithRSAEncryption
66:3d:89:68:61:0f:5c:16:11:c7:1b:94:1c:36:da:9f:f7:06:
c3:bb:db:19:4c:c1:0c:7a:4a:0f:61:06:6b:08:38:83:77:c0:
3e:5f:44:7d:70:a5:80:3e:50:6e:a1:e4:a1:a5:6e:72:31:f6:
b9:fa:22:7e:c8:7c:e5:cf:d1:7f:3e:bc:85:ae:40:40:90:33:
1e:c7:95:5e:a0:17:a2:e2:b9:b0:84:be:8b:d0:0f:1c:ed:81:
23:2f:ab:67:3e:65:66:57:14:c3:42:04:fe:fc:70:a7:68:13:
11:dc:8a:9e:55:1d:3f:bc:9f:82:01:58:f8:bf:71:06:6d:06:
87:d6:ba:f0:2b:f5:f9:0b:86:10:9f:3d:03:4c:e8:63:a2:23:
c9:2c:bd:5b:df:19:75:89:29:f4:f8:1a:4d:07:71:87:1e:bc:
82:57:cd:b4:34:80:53:57:a1:8e:f4:c1:e2:d5:62:4f:6a:d1:
89:b8:25:04:71:c6:87:65:90:bd:e5:37:da:3b:71:18:0c:7c:
01:d4:79:3a:7c:ea:61:21:7a:cd:e5:31:be:48:0e:7a:c0:6a:
41:83:cc:89:35:f3:a9:f6:7e:af:93:6e:4d:88:28:e5:3c:75:
87:1f:06:5b:72:36:9c:ae:b5:2b:e4:e3:da:d8:41:fb:7b:78:
79:c1:20:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 09:21:11 2026 by rpki-client