Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/a7niK7itDYSAcUcCWKLaVdepvNQ.roa
File: a7niK7itDYSAcUcCWKLaVdepvNQ.roa (raw, json)
Hash identifier: zEoozmz189Usv1lYQlwpIyRkVXe/3xP6YFoEE3AiyZQ=
Subject key identifier: 6B:B9:E2:2B:B8:AD:0D:84:80:71:47:02:58:A2:DA:55:D7:A9:BC:D4
Certificate issuer: /CN=af1c5a89c413903fd4c2b944d3bc497b321962c6
Certificate serial: 019F2368D27C953BD7DBD7EB9A94FD8326BB
Authority key identifier: AF:1C:5A:89:C4:13:90:3F:D4:C2:B9:44:D3:BC:49:7B:32:19:62:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/a7niK7itDYSAcUcCWKLaVdepvNQ.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34397
IP address blocks: 193.194.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d2:7c:95:3b:d7:db:d7:eb:9a:94:fd:83:26:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1c5a89c413903fd4c2b944d3bc497b321962c6
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bb9e22bb8ad0d848071470258a2da55d7a9bcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:47:1f:a4:00:43:ea:d4:3d:0b:1a:d3:09:
29:a3:24:b4:ba:c2:53:72:47:87:df:69:55:c3:75:
4b:15:86:0f:65:d0:8e:8d:6f:1d:f0:2c:29:f3:7e:
99:2e:b1:89:6d:2a:2f:30:53:27:25:79:7e:d6:b7:
b8:6b:c9:ac:9c:66:81:ec:b5:4b:38:46:06:24:3f:
c4:22:62:c6:7e:95:f2:c7:f2:c3:a4:2d:4d:3d:18:
39:ec:d9:0b:fa:14:80:68:2f:d5:01:1d:cb:07:24:
bf:d6:59:8a:df:64:8a:81:2a:73:18:e4:34:ad:3b:
83:d3:ad:41:0a:70:94:0c:b0:9d:89:08:b8:bb:5c:
cc:0c:dd:59:db:4e:af:83:74:e8:3a:fe:3d:72:ba:
d4:64:c5:eb:7f:94:4b:d9:44:1f:8a:4d:e4:54:e7:
0f:fd:4e:29:c1:6b:ac:3d:71:c8:37:0b:eb:46:80:
19:71:43:27:20:bb:d5:13:b2:5a:38:66:ff:df:76:
df:de:1a:41:1f:04:31:a5:e9:54:9f:e4:03:53:3c:
78:1b:43:0b:ce:c5:23:57:dd:e2:90:c8:58:ff:c1:
28:36:aa:57:19:7e:6e:a4:f6:01:78:3f:d7:30:29:
18:91:00:da:fb:05:88:e3:7d:fb:7d:c8:02:9e:de:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B9:E2:2B:B8:AD:0D:84:80:71:47:02:58:A2:DA:55:D7:A9:BC:D4
X509v3 Authority Key Identifier:
keyid:AF:1C:5A:89:C4:13:90:3F:D4:C2:B9:44:D3:BC:49:7B:32:19:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/a7niK7itDYSAcUcCWKLaVdepvNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:7f:2a:3c:d7:c0:77:4f:17:97:ce:43:52:31:3e:ea:fe:dc:
29:f8:92:10:58:1d:fa:3e:dc:17:db:4e:95:0c:88:3a:3d:e3:
e4:75:23:47:5e:6d:df:a5:58:63:8d:ab:f2:d0:81:18:5d:0b:
33:c7:61:c7:b6:bf:b3:f8:f4:52:ab:49:d0:84:f4:e5:65:cb:
fc:20:ae:3d:97:41:95:42:1a:1c:44:d2:48:4a:3c:65:9f:d9:
16:8d:37:c9:18:04:fe:af:ea:f4:42:5c:00:05:18:ac:17:03:
b9:55:ed:81:3e:8a:8a:5b:79:85:b8:29:ff:31:68:44:68:42:
c7:c6:a1:cc:4f:fc:28:6b:fb:bf:c5:7a:c4:8d:cf:04:ab:e7:
f1:07:a6:1a:4f:7f:5a:e6:9c:5e:ad:4e:2f:92:60:15:e0:0f:
cb:df:bc:e1:60:06:1d:fd:b4:af:e6:18:58:28:2e:13:13:65:
11:31:8e:32:f2:56:1a:b9:2a:f8:aa:56:c6:f8:4e:c8:4b:fa:
7c:c7:23:d8:45:05:ab:f3:3a:ca:98:c9:34:0b:08:72:21:8c:
dd:1d:e4:64:f2:b6:d0:a1:36:1b:be:35:e6:60:c3:bb:eb:20:
2b:e4:84:90:a2:98:0a:7d:78:05:d7:65:97:9d:42:ef:b8:38:
ed:58:f0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:09:24 2026 by rpki-client