Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/ASszF5AO-QPFV4_0cKwe83QbO2k.roa
File: ASszF5AO-QPFV4_0cKwe83QbO2k.roa (raw, json)
Hash identifier: c3OpAxEt1bIigr/0b2jMncRSn7xUFV+WHeNo9vHtKIg=
Subject key identifier: 01:2B:33:17:90:0E:F9:03:C5:57:8F:F4:70:AC:1E:F3:74:1B:3B:69
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 01A13F7ADF0E6CC96AA03BEB95F641B882AB
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/ASszF5AO-QPFV4_0cKwe83QbO2k.roa
Signing time: Thu 15 Oct 2026 12:12:59 +0000
ROA not before: Thu 15 Oct 2026 12:12:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 79.110.6.0/24 maxlen: 24
79.110.7.0/24 maxlen: 24
94.231.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:7a:df:0e:6c:c9:6a:a0:3b:eb:95:f6:41:b8:82:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Oct 15 12:12:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=012b3317900ef903c5578ff470ac1ef3741b3b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:37:3c:21:68:21:30:f2:ea:62:e4:42:51:
ac:a3:4b:72:ed:fd:2a:06:c4:fb:b2:70:cc:18:6a:
f8:a5:1d:46:6d:b0:53:0a:86:b0:b0:42:fc:19:44:
da:de:bf:62:0f:de:11:af:42:64:08:d8:91:c5:67:
f7:d5:3a:66:15:c0:89:68:9d:90:1a:1a:c3:47:f6:
93:9b:59:a3:7d:d8:19:ff:79:aa:ff:3a:ca:b7:a2:
f2:09:8e:4d:c2:9f:e6:5d:c4:bd:03:3f:74:69:c1:
d7:57:3f:ee:6d:cf:cf:25:29:5c:99:75:d7:b5:41:
2d:ac:10:59:34:a5:5c:06:38:81:7d:37:bf:ce:cd:
28:ef:f3:1d:f1:e1:b3:37:8e:9e:e8:f6:78:6c:f1:
e1:52:10:69:c5:f7:8d:d9:4b:4d:03:30:85:a8:46:
5d:fe:94:f4:95:0b:91:eb:6e:62:ef:c3:58:54:dc:
03:e4:b3:f8:56:c9:63:5b:a2:33:00:84:94:bc:1f:
08:5a:d3:9a:d4:5c:93:38:fe:a2:10:71:0f:67:f2:
f7:12:5b:e2:23:1c:6e:78:2b:97:48:15:8a:6a:bf:
54:bf:ec:93:64:76:a1:91:5b:fa:24:e7:84:4e:4e:
dc:9a:34:b0:9e:cb:10:6a:82:2b:7e:46:5b:e0:a9:
15:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2B:33:17:90:0E:F9:03:C5:57:8F:F4:70:AC:1E:F3:74:1B:3B:69
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/ASszF5AO-QPFV4_0cKwe83QbO2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.6.0/23
94.231.225.0/24
Signature Algorithm: sha256WithRSAEncryption
50:5f:59:2e:80:9f:88:11:e6:b4:fb:c4:52:35:c6:2f:36:16:
84:21:2f:fc:e9:99:b0:72:d6:7c:67:e0:94:d6:37:6a:08:66:
21:92:af:20:38:f8:bb:00:8e:ef:be:6f:83:3d:16:65:2e:91:
1c:ec:89:c7:61:2c:21:1b:a2:e1:99:1a:53:99:64:f6:1f:6b:
98:02:bb:dc:ff:64:5f:50:1c:b9:41:8d:10:af:f6:48:a5:13:
cb:15:fd:23:6a:8e:9a:cf:85:99:53:0a:12:f8:35:8e:3b:d6:
3d:1c:fb:3e:05:55:cf:61:20:b2:b8:81:de:2b:e3:ce:72:b5:
a7:21:d2:e6:0d:5f:70:7d:aa:ea:1b:9b:e3:24:a8:f5:d8:b0:
29:7d:da:72:0e:c3:7c:ad:03:20:cb:1a:29:12:9d:b5:00:fc:
e6:0d:a0:62:52:56:fd:e7:00:c6:10:aa:14:7f:bf:ce:04:9d:
91:06:34:24:60:41:43:16:57:ce:fd:54:33:2f:bf:e0:39:61:
c0:f8:5d:28:ec:21:d7:91:90:cc:a1:93:de:25:b3:45:6b:cb:
ca:31:d9:43:e8:5a:be:77:29:32:e8:51:61:7c:3c:7a:df:6b:
99:30:03:c5:de:73:08:49:95:c2:19:4c:76:3b:d4:99:a6:c7:
61:a8:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:42:47 2026 by rpki-client