Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/AqCtuwGvVSgRJxVxr4mxQU1HkAM.roa
File: AqCtuwGvVSgRJxVxr4mxQU1HkAM.roa (raw, json)
Hash identifier: O/QtFV+qDKvIVvd2P3gXnC1wGd9GAwJT7ubN9qYRXPs=
Subject key identifier: 02:A0:AD:BB:01:AF:55:28:11:27:15:71:AF:89:B1:41:4D:47:90:03
Certificate issuer: /CN=73cf6ab31604599b82d54dd2f40fb2b22b29c21e
Certificate serial: 019F2369407C0B0FB2D74D34FF29948A7410
Authority key identifier: 73:CF:6A:B3:16:04:59:9B:82:D5:4D:D2:F4:0F:B2:B2:2B:29:C2:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/AqCtuwGvVSgRJxVxr4mxQU1HkAM.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396362
IP address blocks: 92.243.84.0/24 maxlen: 24
176.223.109.0/24 maxlen: 24
2a0f:ea82::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:40:7c:0b:0f:b2:d7:4d:34:ff:29:94:8a:74:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cf6ab31604599b82d54dd2f40fb2b22b29c21e
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02a0adbb01af552811271571af89b1414d479003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:8f:d1:15:fb:f1:48:e4:93:73:95:13:15:
18:d3:dd:60:65:4d:6a:b9:c4:9f:5f:52:9d:25:36:
df:90:74:55:06:09:02:7c:07:8f:fb:94:6f:b5:8f:
2c:c8:a1:17:ca:f5:91:f7:56:c8:02:57:09:c6:82:
79:08:52:e8:5d:3e:9f:95:18:96:b1:b9:a8:a2:b6:
7d:5e:38:41:df:ec:90:b2:d4:2d:b3:35:d9:29:0b:
16:01:7e:9e:13:4e:fd:cf:0e:fc:ee:bf:15:a1:a8:
5d:76:cf:14:f7:19:c2:2f:58:3d:32:38:6e:0c:59:
63:64:af:94:52:a2:d1:23:bb:d4:dd:e8:2e:fa:c3:
2d:3e:4a:c8:f7:da:df:eb:66:66:e5:48:ce:b0:0d:
04:31:ef:c7:59:60:8a:4b:68:47:d9:40:61:59:c3:
06:28:ca:16:11:94:47:14:61:43:22:57:37:5a:c2:
b8:da:27:64:6a:ad:7b:46:2b:1d:e8:70:bc:44:88:
80:e0:a4:21:58:55:a2:f1:0f:b6:f0:b3:ee:2e:ab:
4a:ff:cb:dc:ba:ab:08:b8:f1:52:be:e1:1f:b1:04:
a3:e5:5f:d7:f6:24:61:d2:bf:3d:57:c4:f7:df:ce:
b3:6e:49:e6:db:5b:59:bd:da:9e:92:61:c4:86:c1:
ea:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A0:AD:BB:01:AF:55:28:11:27:15:71:AF:89:B1:41:4D:47:90:03
X509v3 Authority Key Identifier:
keyid:73:CF:6A:B3:16:04:59:9B:82:D5:4D:D2:F4:0F:B2:B2:2B:29:C2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/AqCtuwGvVSgRJxVxr4mxQU1HkAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.84.0/24
176.223.109.0/24
IPv6:
2a0f:ea82::/32
Signature Algorithm: sha256WithRSAEncryption
24:87:50:b5:76:be:dc:53:0f:19:51:4b:62:18:00:f3:09:87:
c2:30:18:56:c3:08:ea:2b:37:3a:36:cc:a6:7e:12:7e:9e:aa:
58:13:50:93:ba:51:07:30:de:6f:19:99:39:07:91:a6:4a:10:
c3:80:bd:5e:f0:8a:09:03:dd:a1:df:f7:17:56:19:9b:4f:63:
5f:35:33:a0:bd:83:8b:d4:77:53:05:ff:3d:31:07:00:28:9a:
45:4e:1d:4e:1c:a6:fb:a2:79:4b:c0:76:3f:b7:d8:f8:22:8a:
63:46:17:29:25:fc:37:dd:22:79:72:65:58:19:94:a7:70:b7:
73:c6:43:c4:6b:00:98:99:38:ad:1a:38:f6:ca:90:9e:32:47:
b7:29:2f:c0:25:b8:ab:30:c5:b5:b1:52:ed:3c:98:09:b0:c4:
68:55:33:10:35:01:dd:ae:6e:fb:3d:47:f4:8c:d1:61:f3:a4:
b6:62:41:7f:e7:fe:43:1a:57:51:2d:88:4e:57:ba:d5:97:a6:
29:29:b7:83:d4:3a:d1:90:50:63:29:dd:86:90:e2:1d:2f:27:
a4:1d:27:e1:a6:ee:c2:60:53:35:56:d1:96:a4:ca:11:97:52:
0c:0c:0b:cc:c6:be:eb:0a:31:d2:89:ee:d7:c3:8c:4b:b3:5b:
e2:04:10:69
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ8jaUB8Cw+y1000/ymUinQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczY2Y2YWIzMTYwNDU5OWI4MmQ1NGRkMmY0MGZiMmIyMmIy
OWMyMWUwHhcNMjYwNzAyMTUxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmEwYWRiYjAxYWY1NTI4MTEyNzE1NzFhZjg5YjE0MTRkNDc5MDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLqP0RX78Ujkk3OVExUY091gZU1q
ucSfX1KdJTbfkHRVBgkCfAeP+5RvtY8syKEXyvWR91bIAlcJxoJ5CFLoXT6flRiW
sbmoorZ9XjhB3+yQstQtszXZKQsWAX6eE079zw787r8Voahdds8U9xnCL1g9Mjhu
DFljZK+UUqLRI7vU3egu+sMtPkrI99rf62Zm5UjOsA0EMe/HWWCKS2hH2UBhWcMG
KMoWEZRHFGFDIlc3WsK42idkaq17Risd6HC8RIiA4KQhWFWi8Q+28LPuLqtK/8vc
uqsIuPFSvuEfsQSj5V/X9iRh0r89V8T3386zbknm21tZvdqekmHEhsHqTwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFAKgrbsBr1UoEScVca+JsUFNR5ADMB8GA1UdIwQY
MBaAFHPParMWBFmbgtVN0vQPsrIrKcIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzg5cXN4WUVXWnVDMVUzUzlBLXlzaXNwd2g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQt
MWM2NTRlMDJkNzVkLzEvQXFDdHV3R3ZWU2dSSnhWeHI0bXhRVTFIa0FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQtMWM2NTRlMDJkNzVk
LzEvYzg5cXN4WUVXWnVDMVUzUzlBLXlzaXNwd2g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAXPNUAwQA
sN9tMA0EAgACMAcDBQAqD+qCMA0GCSqGSIb3DQEBCwUAA4IBAQAkh1C1dr7cUw8Z
UUtiGADzCYfCMBhWwwjqKzc6NsymfhJ+nqpYE1CTulEHMN5vGZk5B5GmShDDgL1e
8IoJA92h3/cXVhmbT2NfNTOgvYOL1HdTBf89MQcAKJpFTh1OHKb7onlLwHY/t9j4
IopjRhcpJfw33SJ5cmVYGZSncLdzxkPEawCYmTitGjj2ypCeMke3KS/AJbirMMW1
sVLtPJgJsMRoVTMQNQHdrm77PUf0jNFh86S2YkF/5/5DGldRLYhOV7rVl6YpKbeD
1DrRkFBjKd2GkOIdLyekHSfhpu7CYFM1VtGWpMoRl1IMDAvMxr7rCjHSie7Xw4xL
s1viBBBp
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:38:16 2026 by rpki-client