Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/A20plLgDSbDYPkKsac_6bRMiLUY.roa
File: A20plLgDSbDYPkKsac_6bRMiLUY.roa (raw, json)
Hash identifier: z0V9AzxoQIFUzBV8fjyUMEhfk1VmSeC6U5leZPnjdgw=
Subject key identifier: 03:6D:29:94:B8:03:49:B0:D8:3E:42:AC:69:CF:FA:6D:13:22:2D:46
Certificate issuer: /CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
Certificate serial: 019F2368DB8DEB1887D4118F2757A605D471
Authority key identifier: 94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/A20plLgDSbDYPkKsac_6bRMiLUY.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 147.189.18.0/24 maxlen: 24
147.189.19.0/24 maxlen: 24
147.189.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:db:8d:eb:18:87:d4:11:8f:27:57:a6:05:d4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=036d2994b80349b0d83e42ac69cffa6d13222d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a0:89:67:73:99:4f:e4:d4:3b:dd:27:a7:83:
71:e8:bd:12:d2:b0:44:e4:58:8f:01:f8:da:8a:3b:
68:69:36:08:39:0c:ee:c3:81:fa:47:95:2f:2e:18:
9d:23:c9:ce:0d:a9:a3:22:26:7d:22:96:71:a1:f8:
e8:a4:b6:cb:ff:c4:8d:c8:af:e8:f1:15:9c:9a:6f:
3c:26:2d:f7:55:9b:a4:a8:32:53:46:ea:ce:35:bb:
20:8e:93:45:2f:53:5a:6f:86:1c:1a:21:33:30:85:
f6:ec:4c:55:f0:de:7a:4c:80:27:99:57:e7:3b:c0:
64:51:08:d5:61:4e:f2:3e:ec:01:e3:9a:f6:44:08:
61:42:74:bc:1b:91:26:0d:31:74:39:2a:cf:4f:1e:
f6:25:52:ed:ef:e6:65:59:cf:8c:b0:6f:9b:f0:34:
18:6e:8e:bc:f2:df:a4:ad:ad:61:ed:0b:ed:a9:6b:
74:db:dd:4a:13:11:52:83:d8:99:33:8e:ca:97:04:
e3:72:7f:b0:dc:8f:23:6c:45:7a:d8:f7:e3:2b:f8:
b4:62:b4:4d:7a:e3:cc:0e:04:b4:e0:83:fb:d7:01:
31:b3:58:67:4d:01:19:a3:5d:08:1c:0b:f4:bb:03:
70:fd:b0:4f:d4:36:bf:ca:8c:58:a7:ea:ae:39:db:
1e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6D:29:94:B8:03:49:B0:D8:3E:42:AC:69:CF:FA:6D:13:22:2D:46
X509v3 Authority Key Identifier:
keyid:94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/A20plLgDSbDYPkKsac_6bRMiLUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.18.0-147.189.20.255
Signature Algorithm: sha256WithRSAEncryption
02:b7:9b:3e:9c:3a:e7:41:12:b7:e3:7e:df:d1:b3:cf:b5:16:
88:c5:79:56:61:e3:4d:ad:1c:75:c4:cc:37:18:a5:9d:72:38:
e6:94:b0:59:f5:3f:7e:03:68:ef:72:7b:eb:21:3f:25:e5:c6:
b8:c7:2d:bf:b6:a2:7a:ef:02:50:09:54:55:56:e6:95:30:78:
bd:6c:07:b8:88:b8:37:79:e5:3f:bd:67:9e:86:62:3e:3c:6c:
f7:23:19:a8:79:85:92:70:aa:64:dd:d6:d3:af:09:71:96:e9:
97:94:49:d2:f1:2f:f5:ac:e6:c5:04:5f:03:db:bb:36:02:d0:
4d:78:9d:ee:ac:71:2f:b6:9b:67:d3:d7:25:b2:87:6f:07:6d:
6e:17:82:8f:c0:4e:79:12:9f:9e:87:e1:b8:b7:5b:80:ad:de:
6a:f6:75:3b:7a:b9:20:83:f9:81:81:bd:f6:ad:e2:3b:48:6c:
e3:32:06:09:23:b6:8f:47:72:39:bb:36:0c:d6:b6:8c:a6:51:
8e:1c:28:27:cf:1d:c5:cd:ad:c1:81:d9:2f:ab:8c:a8:27:1b:
3e:11:dd:22:1a:7a:5e:0e:3d:0c:64:0a:9e:23:54:12:62:d6:
f6:6f:d2:8e:f4:8b:0a:24:6d:21:ef:4e:34:52:9c:d6:3a:20:
a5:28:b2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:47 2026 by rpki-client