Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/AY0jNtzlQSnpQyhOkQ6nwJQIJN8.roa
File: AY0jNtzlQSnpQyhOkQ6nwJQIJN8.roa (raw, json)
Hash identifier: yt6s32OnsdSe8Ejv9BF3WP1ZqcC0EWT85l9mXF7wab4=
Subject key identifier: 01:8D:23:36:DC:E5:41:29:E9:43:28:4E:91:0E:A7:C0:94:08:24:DF
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 01A0D8CFD51DA8F9C5A4287DA3094C9AA515
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/AY0jNtzlQSnpQyhOkQ6nwJQIJN8.roa
Signing time: Fri 25 Sep 2026 13:44:54 +0000
ROA not before: Fri 25 Sep 2026 13:44:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402221
IP address blocks: 46.29.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:cf:d5:1d:a8:f9:c5:a4:28:7d:a3:09:4c:9a:a5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Sep 25 13:44:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=018d2336dce54129e943284e910ea7c0940824df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:ff:73:f9:80:85:6b:cb:d2:c2:9a:99:6b:
ee:33:1a:eb:ca:8d:6a:0c:b0:be:14:c7:99:42:3b:
31:39:c7:ee:db:75:8a:bc:4d:ed:95:61:57:88:ec:
62:33:f7:89:41:f6:37:71:f4:26:f4:ba:10:60:d4:
e9:4b:ab:e4:dc:2c:c3:69:74:fa:cf:4a:a4:36:b4:
3e:3d:36:76:17:9f:12:6c:1b:fe:8b:67:c6:90:5b:
01:5a:6d:79:0c:19:8c:90:c2:d8:b2:22:62:75:6f:
c2:27:c2:2a:74:03:38:0d:17:08:05:22:8b:e9:d3:
f8:c4:5b:c5:83:d2:f2:46:2c:a6:88:07:dc:36:3d:
7f:bb:01:7a:51:95:10:38:41:4c:7c:da:22:67:70:
a4:de:8e:74:2a:f2:8d:a4:f0:d3:ed:e2:65:48:15:
4b:08:31:49:8e:69:13:10:1c:b8:51:5d:62:c4:ee:
3a:72:c7:0c:e6:3c:98:56:f2:34:9a:85:10:69:94:
b6:0a:9c:87:b4:11:85:22:6e:9b:a8:77:50:7c:16:
28:bd:87:c7:3e:1f:51:0b:7a:b4:f9:9d:c5:09:4f:
8c:ce:4d:e4:a6:31:77:20:bf:ff:80:df:5e:ed:02:
f3:7e:34:62:9b:6b:1a:ca:07:ca:38:d4:41:4a:b7:
48:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8D:23:36:DC:E5:41:29:E9:43:28:4E:91:0E:A7:C0:94:08:24:DF
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/AY0jNtzlQSnpQyhOkQ6nwJQIJN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.36.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:cb:e3:69:eb:11:b1:3e:58:95:5c:d6:01:d8:58:73:c9:27:
0d:6e:4d:59:28:3f:45:68:86:40:d9:a7:91:ff:3d:f0:36:7f:
30:ca:3f:58:d0:5b:a8:1a:ba:a7:28:b6:07:72:f3:3b:3d:cd:
ef:40:15:be:91:fd:29:82:fa:45:6b:d8:5d:06:2d:59:90:dd:
8b:26:da:c9:f0:f7:f3:a8:33:68:22:4f:0d:32:a0:6d:93:ab:
65:bb:45:97:8f:a9:dc:62:d2:4a:f8:91:e0:3c:e6:f7:02:3a:
5a:f8:87:ec:21:80:70:87:f3:cf:41:d9:c9:f1:d1:12:bc:10:
2e:02:11:85:07:91:ca:08:94:18:d0:00:b3:9e:0e:16:23:90:
12:fc:06:60:57:2a:9b:17:94:80:64:ea:76:b6:ca:e2:59:2f:
22:63:51:75:a0:c1:01:e2:af:80:e2:a7:8b:c5:5b:89:78:e5:
e9:06:ef:6a:46:f5:5b:21:d8:a3:df:d0:de:30:e6:17:aa:37:
ce:af:1a:c9:dc:db:cc:de:8e:b1:36:40:5c:6e:1a:a2:ab:d8:
7b:71:c0:b9:e2:7b:0f:ce:e3:b2:a1:ba:6d:ce:e6:0b:99:ff:
dc:79:66:18:aa:f2:8e:fb:a1:a8:30:a6:1c:b3:4f:72:8c:a8:
e3:81:f9:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDYz9UdqPnFpCh9owlMmqUVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYThmYTc1YzUwMjBjZDYyMThjZjdmMTA5ZGU0MjAyNjUy
MDRiYWMwHhcNMjYwOTI1MTM0NDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMThkMjMzNmRjZTU0MTI5ZTk0MzI4NGU5MTBlYTdjMDk0MDgyNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mX/c/mAhWvL0sKamWvuMxrryo1q
DLC+FMeZQjsxOcfu23WKvE3tlWFXiOxiM/eJQfY3cfQm9LoQYNTpS6vk3CzDaXT6
z0qkNrQ+PTZ2F58SbBv+i2fGkFsBWm15DBmMkMLYsiJidW/CJ8IqdAM4DRcIBSKL
6dP4xFvFg9LyRiymiAfcNj1/uwF6UZUQOEFMfNoiZ3Ck3o50KvKNpPDT7eJlSBVL
CDFJjmkTEBy4UV1ixO46cscM5jyYVvI0moUQaZS2CpyHtBGFIm6bqHdQfBYovYfH
Ph9RC3q0+Z3FCU+Mzk3kpjF3IL//gN9e7QLzfjRim2saygfKONRBSrdI9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAGNIzbc5UEp6UMoTpEOp8CUCCTfMB8GA1UdIwQY
MBaAFGqo+nXFAgzWIYz38QneQgJlIEusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAt
MzVjNjNmYTc2NWEyLzEvQVkwak50emxRU25wUXloT2tRNm53SlFJSk44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAtMzVjNjNmYTc2NWEy
LzEvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALh0kMA0G
CSqGSIb3DQEBCwUAA4IBAQANy+Np6xGxPliVXNYB2FhzyScNbk1ZKD9FaIZA2aeR
/z3wNn8wyj9Y0FuoGrqnKLYHcvM7Pc3vQBW+kf0pgvpFa9hdBi1ZkN2LJtrJ8Pfz
qDNoIk8NMqBtk6tlu0WXj6ncYtJK+JHgPOb3Ajpa+IfsIYBwh/PPQdnJ8dESvBAu
AhGFB5HKCJQY0ACzng4WI5AS/AZgVyqbF5SAZOp2tsriWS8iY1F1oMEB4q+A4qeL
xVuJeOXpBu9qRvVbIdij39DeMOYXqjfOrxrJ3NvM3o6xNkBcbhqiq9h7ccC54nsP
zuOyobptzuYLmf/ceWYYqvKO+6GoMKYcs09yjKjjgfkj
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:57:40 2026 by rpki-client