Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AV8w4cNjIepOsUh_yJsN9ROOe_g.roa
File: AV8w4cNjIepOsUh_yJsN9ROOe_g.roa (raw, json)
Hash identifier: vpByvMtpngp20BHgCQmThrbUwTEBPZsGMeXAKbG2Dpg=
Subject key identifier: 01:5F:30:E1:C3:63:21:EA:4E:B1:48:7F:C8:9B:0D:F5:13:8E:7B:F8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0C416910B64FFC9FCA4DFFB9B76DD9126
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AV8w4cNjIepOsUh_yJsN9ROOe_g.roa
Signing time: Mon 21 Sep 2026 13:10:08 +0000
ROA not before: Mon 21 Sep 2026 13:10:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213796
IP address blocks: 94.156.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:16:91:0b:64:ff:c9:fc:a4:df:fb:9b:76:dd:91:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 21 13:10:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=015f30e1c36321ea4eb1487fc89b0df5138e7bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3d:91:f1:1c:6f:cc:e9:93:3b:85:5c:da:a5:
8b:d5:ce:43:02:d6:9e:6d:2c:6b:d8:18:09:a6:d2:
00:10:d3:a6:d8:8c:0c:0c:bf:75:7b:4f:65:2b:3a:
04:6f:a4:8f:0f:e6:74:04:36:92:e6:8c:c4:b3:03:
1e:ca:65:66:0a:8b:59:2c:74:fa:5f:b2:53:a4:9f:
db:32:b1:44:54:fb:d4:6e:d3:71:ca:51:de:f3:ce:
d9:00:2c:89:de:5e:17:7b:e8:01:0f:13:05:cf:20:
d3:d8:e7:ec:fd:63:7b:a7:54:48:56:3f:50:17:06:
5a:ca:53:e4:5b:85:b9:13:ad:be:b6:2a:3c:16:68:
dc:3e:39:30:81:c9:d1:9b:62:91:e7:36:82:8f:39:
14:62:2c:e7:e3:71:d2:7a:c0:d9:ae:e6:7f:97:7d:
e0:a4:c2:93:f5:04:16:a4:36:24:fe:2e:d8:45:02:
25:cd:e0:5b:b6:d7:66:ba:af:14:46:a6:61:90:ec:
bf:1a:fc:a9:8e:f7:e4:8f:f7:e0:a0:be:d5:d6:3a:
fc:ad:3e:ca:b5:d8:ba:fe:d1:87:24:b4:90:30:58:
72:37:e6:74:5d:c4:ed:af:9d:9e:64:7a:14:e2:2e:
62:ad:a3:69:b8:20:bf:89:b6:08:a2:fa:0d:c3:af:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5F:30:E1:C3:63:21:EA:4E:B1:48:7F:C8:9B:0D:F5:13:8E:7B:F8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AV8w4cNjIepOsUh_yJsN9ROOe_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.11.0/24
Signature Algorithm: sha256WithRSAEncryption
49:13:04:70:c0:54:4e:fc:45:1a:b8:c3:4e:ae:9d:d9:e3:04:
ba:05:31:70:5b:4c:ab:88:ab:73:fa:be:1f:1e:92:a0:95:2e:
76:7d:53:01:b6:ad:49:72:74:4e:25:a8:25:89:61:42:a3:74:
28:c1:4d:00:d9:0d:28:60:77:0e:0d:ce:2a:5c:f3:22:b6:3b:
9f:d5:f3:4e:5d:02:f4:00:46:9d:af:b7:64:83:ee:8b:02:e0:
90:1c:4c:3f:ce:77:02:cf:85:a4:aa:d8:8d:73:88:e9:78:51:
f7:7b:b3:51:ad:4f:de:48:5f:b4:66:5b:6e:f8:ee:53:30:da:
72:f9:42:5d:b3:e1:cb:71:97:81:9c:93:d0:87:46:a0:6e:ac:
aa:52:a5:45:88:4d:b0:79:7a:03:f7:1d:7b:59:5c:47:72:c1:
2d:52:2c:0a:67:72:be:29:f5:5a:dd:a2:42:61:e2:70:ee:fa:
55:0a:c1:2c:0a:cd:ba:85:a1:44:a8:6b:73:ff:3c:1e:92:d6:
2a:f8:26:0d:f3:fd:a5:b9:e8:d1:d8:4b:2a:83:4c:0d:ec:f8:
ca:5d:66:1c:08:1d:1d:3f:eb:74:5d:6b:aa:f2:5e:1c:0d:df:
6d:60:cd:1d:38:22:c2:33:9c:91:69:6c:09:f5:b3:09:cd:7d:
80:d8:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:29:40 2026 by rpki-client