Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/ahZml9k3oIr290dwF6vuGRQYGMg.roa
File: ahZml9k3oIr290dwF6vuGRQYGMg.roa (raw, json)
Hash identifier: JIWiUU3hD62X9V1VtVd1M0m6Dubft4KBA0RK4vdkSeI=
Subject key identifier: 6A:16:66:97:D9:37:A0:8A:F6:F7:47:70:17:AB:EE:19:14:18:18:C8
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 019F8F2E6683BE29D91CEC9992CED7472A0E
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/ahZml9k3oIr290dwF6vuGRQYGMg.roa
Signing time: Thu 23 Jul 2026 13:33:30 +0000
ROA not before: Thu 23 Jul 2026 13:33:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209811
IP address blocks: 95.215.202.0/23 maxlen: 23
185.208.8.0/24 maxlen: 24
194.31.160.0/23 maxlen: 23
2a09:1680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:2e:66:83:be:29:d9:1c:ec:99:92:ce:d7:47:2a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Jul 23 13:33:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a166697d937a08af6f7477017abee19141818c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:33:40:58:e8:80:92:4a:6c:38:7a:33:56:
89:12:4b:b6:c1:b3:77:65:3c:e1:74:1d:ab:16:ea:
35:ec:a1:a3:92:94:bd:27:27:75:a9:0e:1e:30:d0:
cc:3a:31:c4:75:21:68:a3:80:d0:4b:95:15:a1:17:
bb:04:60:9d:2d:2d:48:28:3d:f2:a9:32:49:06:15:
bd:1f:a2:54:a6:cb:5b:64:ca:0a:52:ce:e1:2e:93:
f4:cd:2d:6e:91:11:c2:95:9f:9e:a6:ad:b5:0b:1e:
5e:8f:68:1d:e2:bb:92:54:a0:25:42:e7:47:d2:01:
48:e9:97:3f:51:2a:81:46:45:ee:0c:64:91:4f:bb:
b6:a9:29:32:22:da:cc:ce:f6:42:a2:de:00:ef:49:
f0:ee:45:14:07:7c:34:74:8e:07:f7:d3:48:39:1e:
1d:aa:2e:d3:ea:5c:89:6f:8f:ac:d4:d8:2f:8f:81:
99:b8:5f:26:0e:cb:65:16:92:3e:d6:0d:27:f7:01:
ad:5b:ba:17:d7:cb:10:6a:4b:62:80:9a:1d:e6:83:
e6:4d:1c:97:a5:9b:38:a7:fb:b1:1b:51:3a:71:1a:
6e:d5:16:df:8f:88:45:7d:02:be:c9:48:6f:f8:4e:
36:91:6e:ac:f8:8b:a5:f6:85:29:84:f2:c9:76:5a:
cd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:16:66:97:D9:37:A0:8A:F6:F7:47:70:17:AB:EE:19:14:18:18:C8
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/ahZml9k3oIr290dwF6vuGRQYGMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.202.0/23
185.208.8.0/24
194.31.160.0/23
IPv6:
2a09:1680::/48
Signature Algorithm: sha256WithRSAEncryption
ad:05:59:18:8f:bf:af:91:77:19:47:03:d0:11:64:72:ce:78:
1f:45:2f:4e:8b:b4:a0:9b:fa:ed:d9:12:ac:8d:a7:52:5b:95:
4e:40:51:a8:e7:1a:63:be:49:3e:63:0a:cb:9a:76:80:56:a8:
d9:2c:07:38:f7:a5:3d:e3:04:4a:73:70:6b:64:00:81:bc:1b:
13:45:c3:7e:d9:5e:83:f8:d4:50:ca:58:fb:f6:9d:96:3f:78:
91:61:dc:f5:a1:f5:6a:c7:c1:91:d5:73:d0:4f:12:8e:5a:8d:
e7:97:b2:8e:63:cb:43:ef:3d:64:0c:62:72:ac:d4:f8:4f:dd:
43:34:d4:af:17:91:f7:17:27:c8:17:4c:48:f9:2c:1f:cc:de:
b2:b7:17:44:11:11:6b:56:8b:36:f0:c9:60:4a:8c:b7:83:04:
14:25:9c:42:20:ac:1b:12:cb:c1:72:f8:9d:95:63:8b:2f:ed:
9a:3a:3c:09:d5:5f:b0:92:26:4a:33:ac:dc:d6:df:b7:71:f9:
a3:fb:dc:6d:15:7f:56:48:fb:19:ba:87:6b:0f:84:e1:f2:68:
b6:69:85:64:39:a2:f1:87:01:d6:83:05:7f:ef:fc:cb:e9:d2:
27:4a:5b:ad:8d:70:a9:ba:a8:24:2f:4a:5e:90:90:23:00:65:
2b:27:7f:53
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZ+PLmaDvinZHOyZks7XRyoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YTg0YThlNDc1ZjY2MDZlN2ExMmY5MmIzMzBkNjNkOGY4
ODBiZTAwHhcNMjYwNzIzMTMzMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTE2NjY5N2Q5MzdhMDhhZjZmNzQ3NzAxN2FiZWUxOTE0MTgxOGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBUzQFjogJJKbDh6M1aJEku2wbN3
ZTzhdB2rFuo17KGjkpS9Jyd1qQ4eMNDMOjHEdSFoo4DQS5UVoRe7BGCdLS1IKD3y
qTJJBhW9H6JUpstbZMoKUs7hLpP0zS1ukRHClZ+epq21Cx5ej2gd4ruSVKAlQudH
0gFI6Zc/USqBRkXuDGSRT7u2qSkyItrMzvZCot4A70nw7kUUB3w0dI4H99NIOR4d
qi7T6lyJb4+s1Ngvj4GZuF8mDstlFpI+1g0n9wGtW7oX18sQaktigJod5oPmTRyX
pZs4p/uxG1E6cRpu1Rbfj4hFfQK+yUhv+E42kW6s+Iul9oUphPLJdlrN7QIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFGoWZpfZN6CK9vdHcBer7hkUGBjIMB8GA1UdIwQY
MBaAFBioSo5HX2YG56EvkrMw1j2PiAvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEt
ODdmNWI2NDc5ZDFlLzEvYWhabWw5azNvSXIyOTBkd0Y2dnVHUlFZR01nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEtODdmNWI2NDc5ZDFl
LzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQBX9fKAwQA
udAIAwQBwh+gMA8EAgACMAkDBwAqCRaAAAAwDQYJKoZIhvcNAQELBQADggEBAK0F
WRiPv6+RdxlHA9ARZHLOeB9FL06LtKCb+u3ZEqyNp1JblU5AUajnGmO+ST5jCsua
doBWqNksBzj3pT3jBEpzcGtkAIG8GxNFw37ZXoP41FDKWPv2nZY/eJFh3PWh9WrH
wZHVc9BPEo5ajeeXso5jy0PvPWQMYnKs1PhP3UM01K8XkfcXJ8gXTEj5LB/M3rK3
F0QREWtWizbwyWBKjLeDBBQlnEIgrBsSy8Fy+J2VY4sv7Zo6PAnVX7CSJkozrNzW
37dx+aP73G0Vf1ZI+xm6h2sPhOHyaLZphWQ5ovGHAdaDBX/v/Mvp0idKW62NcKm6
qCQvSl6QkCMAZSsnf1M=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:32 2026 by rpki-client