Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/5e3939-c7e5-4d69-9338-7b5dedd3494c/1/1-aicoLMYjCJsd5ZWkCtz-TEnhXM.roa
File: 1-aicoLMYjCJsd5ZWkCtz-TEnhXM.roa (raw, json)
Hash identifier: +/ZpY7xnaUiJo2kdfXfAtO/4c/UFgVdGD1MRP6Kj6ec=
Subject key identifier: F9:A8:9C:A0:B3:18:8C:22:6C:77:96:56:90:2B:73:F9:31:27:85:73
Certificate issuer: /CN=07947b95b24a19e6c0446d9a0d0e0f450df39146
Certificate serial: 01A0A56E0B9D526B7BF82CFB51CCAA8892AC
Authority key identifier: 07:94:7B:95:B2:4A:19:E6:C0:44:6D:9A:0D:0E:0F:45:0D:F3:91:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5R7lbJKGebARG2aDQ4PRQ3zkUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5e3939-c7e5-4d69-9338-7b5dedd3494c/1/1-aicoLMYjCJsd5ZWkCtz-TEnhXM.roa
Signing time: Tue 15 Sep 2026 14:17:27 +0000
ROA not before: Tue 15 Sep 2026 14:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35624
IP address blocks: 185.46.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5e3939-c7e5-4d69-9338-7b5dedd3494c/1/B5R7lbJKGebARG2aDQ4PRQ3zkUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5e3939-c7e5-4d69-9338-7b5dedd3494c/1/B5R7lbJKGebARG2aDQ4PRQ3zkUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5R7lbJKGebARG2aDQ4PRQ3zkUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:6e:0b:9d:52:6b:7b:f8:2c:fb:51:cc:aa:88:92:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07947b95b24a19e6c0446d9a0d0e0f450df39146
Validity
Not Before: Sep 15 14:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9a89ca0b3188c226c779656902b73f931278573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:05:86:2e:03:5b:e0:fe:cc:bf:aa:db:f7:
7f:af:32:e1:79:33:21:c8:df:4b:af:8b:32:14:e0:
8f:04:d2:91:68:6f:60:5b:40:04:e0:95:aa:3a:df:
50:e7:64:9f:12:7d:d4:01:17:a5:c0:e8:3c:bf:f1:
ad:df:53:23:77:28:94:92:b3:dc:62:c5:a3:b8:2a:
ec:c6:24:eb:e7:40:fb:20:d9:c1:e0:c1:bc:8b:a3:
71:93:65:b7:4c:42:32:5a:4f:0f:49:00:3c:1e:40:
3a:5c:ae:ea:64:64:f7:d7:b1:9a:ed:2d:45:6f:f5:
ed:b2:87:eb:b1:d0:eb:3c:4e:90:8f:66:0d:3c:18:
a9:7b:0a:32:fb:f7:34:b5:b2:b3:42:b7:fa:15:96:
60:70:21:18:94:77:66:ed:5a:b1:72:f1:53:b1:4c:
31:19:60:b2:29:c1:ff:5d:39:a3:5f:26:cf:d6:eb:
26:09:c5:01:27:84:e1:29:87:a9:55:64:ee:3e:bb:
85:c6:62:1d:7e:32:fd:61:94:17:ae:35:f7:c8:c5:
2d:dd:35:39:6a:2f:87:45:0f:ae:53:16:3b:68:1c:
45:ff:84:40:59:65:2c:c6:ad:c7:4c:19:3d:c7:47:
38:cf:da:93:13:41:c2:7f:c2:2c:15:7b:7b:a8:3b:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A8:9C:A0:B3:18:8C:22:6C:77:96:56:90:2B:73:F9:31:27:85:73
X509v3 Authority Key Identifier:
keyid:07:94:7B:95:B2:4A:19:E6:C0:44:6D:9A:0D:0E:0F:45:0D:F3:91:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5R7lbJKGebARG2aDQ4PRQ3zkUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5e3939-c7e5-4d69-9338-7b5dedd3494c/1/1-aicoLMYjCJsd5ZWkCtz-TEnhXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5e3939-c7e5-4d69-9338-7b5dedd3494c/1/B5R7lbJKGebARG2aDQ4PRQ3zkUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.84.0/22
Signature Algorithm: sha256WithRSAEncryption
50:d6:80:a8:48:b4:2a:e9:0e:4f:40:ba:ee:e6:72:ea:8d:94:
19:67:db:de:ae:48:7d:36:fe:98:89:a2:b3:39:ac:6c:93:cb:
48:25:10:c1:c4:57:95:ae:92:9b:6f:54:fb:32:b5:13:ac:fc:
d3:7e:df:e1:5e:dd:3e:d3:21:4d:e5:59:16:90:20:1a:8d:4a:
ec:75:bd:18:5d:32:2f:29:8b:c6:aa:11:ff:fd:9c:b9:0d:e1:
62:16:28:21:65:e6:24:23:4d:22:61:2b:34:79:f7:48:29:11:
38:f8:f7:62:54:ee:bd:97:c7:95:8f:4e:0c:44:c8:47:ba:f9:
42:66:85:f7:cb:8b:ce:98:2b:d2:8b:44:a2:d0:71:4c:b3:d6:
fd:ae:58:00:53:fc:f9:31:38:a2:44:4e:17:db:01:45:1e:fe:
b4:25:87:25:59:ab:95:e7:8d:37:d8:be:cc:40:f5:76:29:3f:
12:b6:68:d5:d9:68:40:8b:49:29:46:7f:24:0c:e2:09:89:e5:
7a:76:89:b1:30:e0:ff:e3:61:7b:7c:10:ce:75:c3:83:05:cf:
dc:6a:79:23:0e:fa:db:17:fb:10:e7:80:12:97:a1:cb:e3:e4:
cb:e0:16:76:60:1d:e6:6a:5f:ff:c9:9f:19:4b:1b:e0:3b:6b:
83:b1:d8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:02:05 2026 by rpki-client