Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/Ay2BTc4A_hOza1OF3AM0tTQ5C3s.roa
File: Ay2BTc4A_hOza1OF3AM0tTQ5C3s.roa (raw, json)
Hash identifier: 5UCc6R3kBZZ3v7uKiTMLuh82QUDW3xwXrpPTRqSHXXs=
Subject key identifier: 03:2D:81:4D:CE:00:FE:13:B3:6B:53:85:DC:03:34:B5:34:39:0B:7B
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 019F8A434D229BD622680116AE19DBAD33E1
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/Ay2BTc4A_hOza1OF3AM0tTQ5C3s.roa
Signing time: Wed 22 Jul 2026 14:38:14 +0000
ROA not before: Wed 22 Jul 2026 14:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29049
IP address blocks: 82.194.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:43:4d:22:9b:d6:22:68:01:16:ae:19:db:ad:33:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: Jul 22 14:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=032d814dce00fe13b36b5385dc0334b534390b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:0f:1a:e7:b2:b4:d7:1a:10:64:aa:de:77:
ea:9a:e6:c3:40:6f:a5:d9:bf:68:61:31:e6:a4:3d:
25:a7:fb:2a:ce:a4:a7:c1:45:42:a1:c8:45:a3:a1:
e5:1b:1a:65:91:fb:8c:a4:30:21:2f:1e:02:9a:e1:
ae:bb:82:84:e3:9b:cd:ca:ae:16:fc:de:ff:2a:d3:
aa:58:40:2d:41:df:96:df:0e:34:b9:fe:1c:3b:83:
a5:41:26:32:f8:83:5e:b9:7a:c5:43:cd:d1:e0:e8:
34:5f:de:f6:6e:a6:70:41:a4:3c:a3:3e:ff:21:22:
04:8e:38:99:0a:fa:ee:4f:d0:9c:49:f3:2d:83:bd:
30:4a:22:2e:d9:f4:59:95:5c:26:7f:40:3b:a6:7b:
ca:9b:ba:d2:07:d3:22:7c:d2:ae:b2:be:43:34:22:
f0:57:34:cb:26:e3:a7:0d:a3:87:bf:f5:2d:7d:1c:
ad:01:0b:63:15:b1:0b:bb:27:f5:22:73:7b:79:82:
66:62:c6:e3:61:03:f2:d6:08:32:26:13:7d:84:2f:
af:8c:38:d6:4b:4c:dd:82:d3:1d:7a:54:ed:4f:c1:
41:5e:53:52:f0:c1:8b:38:3b:aa:5d:74:a0:5e:c9:
b1:58:f0:fd:60:b0:a0:cc:b9:66:73:4e:22:75:64:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2D:81:4D:CE:00:FE:13:B3:6B:53:85:DC:03:34:B5:34:39:0B:7B
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/Ay2BTc4A_hOza1OF3AM0tTQ5C3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.194.14.0/24
Signature Algorithm: sha256WithRSAEncryption
14:56:70:2b:c6:95:12:b4:fd:e9:05:4e:3b:7f:a6:07:47:4d:
63:06:b2:db:50:f2:9e:6a:77:bc:7f:30:fd:ad:94:6d:3f:57:
06:c7:a3:3d:ec:67:1f:a5:1e:54:92:3c:cf:11:42:cf:14:fc:
6a:24:c6:da:0b:e8:d9:70:69:e5:f6:64:28:fc:7f:85:ea:12:
6f:a7:c0:5a:03:7f:71:36:2f:df:d4:23:e5:49:87:a0:3e:43:
90:de:62:f8:ad:b7:4e:37:68:ae:5b:84:a0:b0:32:9d:4f:64:
f9:c2:7a:a4:ed:d5:7d:94:64:a4:e1:48:dc:60:93:3c:eb:ea:
6d:55:a2:a4:c4:05:3a:fb:73:92:e8:8a:9a:d5:96:22:a8:e1:
1e:e0:6a:0c:82:41:d6:7e:c5:a4:b2:c2:b2:d2:a1:14:d0:b4:
9b:f0:99:74:80:60:b5:4f:53:0e:09:b0:7b:78:05:7e:3e:cf:
67:83:98:05:aa:a8:93:ef:08:68:d3:f3:ea:55:c9:26:74:af:
a9:ed:11:90:13:2a:a6:d0:56:ef:4b:e4:70:9e:42:a9:81:67:
62:1c:7c:6d:bd:d4:ae:dc:a9:ea:6f:e5:ce:84:53:21:39:4d:
d4:cd:82:52:3a:e9:c6:21:56:75:0c:b1:fe:cc:48:d2:26:5a:
04:87:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:35:17 2026 by rpki-client