Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/AOJWWRDy0nNR8JFkrrmMBV4f1SQ.roa
File: AOJWWRDy0nNR8JFkrrmMBV4f1SQ.roa (raw, json)
Hash identifier: lkx/0ZAIN+Tof0IXtGM9G76bJd4qUglgdd0G19sDUUw=
Subject key identifier: 00:E2:56:59:10:F2:D2:73:51:F0:91:64:AE:B9:8C:05:5E:1F:D5:24
Certificate issuer: /CN=6fa72e1fd221c67735fa8d11f68f2f5280d7c444
Certificate serial: 019F2368AE7A3838887CA9CF82C0B49BEE4F
Authority key identifier: 6F:A7:2E:1F:D2:21:C6:77:35:FA:8D:11:F6:8F:2F:52:80:D7:C4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/AOJWWRDy0nNR8JFkrrmMBV4f1SQ.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31673
IP address blocks: 185.52.212.0/22 maxlen: 24
2a01:baa0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ae:7a:38:38:88:7c:a9:cf:82:c0:b4:9b:ee:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa72e1fd221c67735fa8d11f68f2f5280d7c444
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00e2565910f2d27351f09164aeb98c055e1fd524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:fb:69:10:81:ce:fa:f3:d3:03:b8:24:dc:
9d:55:b6:2a:42:5d:11:06:58:f5:b5:f3:a8:05:74:
de:9d:14:5a:d5:a9:db:2b:d7:b8:25:43:39:58:46:
0d:cb:d7:7f:89:72:b2:ba:31:2c:d3:84:40:49:9b:
99:82:5c:16:80:ce:6c:23:ad:cf:ed:db:4b:cd:21:
67:3e:bd:be:01:c4:c2:d0:9f:22:dd:39:70:bf:f9:
52:de:ec:7f:6c:5a:62:76:27:2a:1b:c4:d4:d4:20:
47:42:05:b1:86:11:cd:5a:52:f3:98:94:df:89:a2:
21:97:1a:1c:21:cf:6b:a6:8c:a2:f1:b6:72:11:cc:
35:d3:a2:00:80:fa:8b:cd:79:11:83:92:4a:00:1b:
94:97:84:f0:f6:27:6b:d1:fc:bf:c7:08:5b:49:ee:
70:fd:50:ca:f3:9a:d8:11:97:8d:8b:a7:09:7f:8d:
0e:ab:de:54:09:d7:3e:18:ad:1b:7c:a6:58:86:0a:
c9:5f:a4:29:b3:6d:52:12:4d:56:4c:cd:99:3b:48:
f5:6e:6a:f8:7d:74:6d:2f:6d:7b:9a:6a:6a:dd:58:
4c:1f:5a:ab:39:70:89:f6:fb:da:84:4f:6f:55:77:
12:8e:ad:11:ce:c2:95:8f:73:1b:c1:87:84:56:eb:
89:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E2:56:59:10:F2:D2:73:51:F0:91:64:AE:B9:8C:05:5E:1F:D5:24
X509v3 Authority Key Identifier:
keyid:6F:A7:2E:1F:D2:21:C6:77:35:FA:8D:11:F6:8F:2F:52:80:D7:C4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/AOJWWRDy0nNR8JFkrrmMBV4f1SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.212.0/22
IPv6:
2a01:baa0::/32
Signature Algorithm: sha256WithRSAEncryption
47:e3:40:6f:4e:03:f9:ab:71:76:9d:c0:e0:1a:17:8c:5b:86:
c6:ef:94:0e:90:d3:ce:8f:ad:e8:eb:5e:06:8b:4e:de:d8:be:
d5:eb:22:71:20:1a:bd:a4:1e:e4:94:35:a5:79:9f:25:5f:c5:
97:e9:57:18:3c:f7:77:68:5b:85:0c:bb:37:76:43:3d:d1:69:
b9:fd:20:ce:70:e2:e6:a4:fc:0b:15:cf:e4:2d:21:cc:d5:06:
43:54:f9:55:fa:b9:ec:8b:b9:84:1a:d2:1b:db:8a:f7:af:8c:
45:58:5a:b5:5a:ba:5f:87:d8:b7:99:33:18:3e:9c:2f:7e:95:
f1:72:f3:50:01:c7:16:05:22:6e:77:17:fb:63:a0:b1:70:84:
d8:0c:b8:39:d7:23:e7:90:72:fd:6b:7f:9c:6f:d1:fe:da:4a:
16:c2:d0:f5:0b:b7:29:14:15:a1:4b:16:52:ab:d6:7f:8c:5f:
78:8e:0a:30:c1:30:01:24:63:e2:b9:96:fc:93:f6:9e:13:d8:
63:9c:a3:02:55:37:8a:e2:d8:5e:e2:44:e8:b7:93:85:00:25:
5c:53:b9:88:67:7e:7d:ea:a0:4c:62:3a:f5:ee:61:2d:49:ef:
7b:20:d0:a6:46:7f:7f:79:35:9c:f0:65:ff:6e:91:1a:9a:be:
91:3e:41:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:13 2026 by rpki-client