Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/m_AVVmbSJcvJ3oNiVELWOs9hA6k.roa
File: m_AVVmbSJcvJ3oNiVELWOs9hA6k.roa (raw, json)
Hash identifier: H1TalSLgsIW/2juc2Oc9Q+3LVU0e8lzepBLbaGAzLFE=
Subject key identifier: 9B:F0:15:56:66:D2:25:CB:C9:DE:83:62:54:42:D6:3A:CF:61:03:A9
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A0667CF7D0BF181C8C442CD79268A04E5B
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/m_AVVmbSJcvJ3oNiVELWOs9hA6k.roa
Signing time: Thu 03 Sep 2026 08:57:40 +0000
ROA not before: Thu 03 Sep 2026 08:57:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197646
IP address blocks: 206.15.48.0/24 maxlen: 24
206.15.49.0/24 maxlen: 24
206.15.50.0/24 maxlen: 24
206.15.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:7c:f7:d0:bf:18:1c:8c:44:2c:d7:92:68:a0:4e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Sep 3 08:57:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bf0155666d225cbc9de83625442d63acf6103a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:30:7f:16:60:ba:7e:2c:6b:c5:c2:cc:73:
7f:25:36:07:6c:c0:9d:62:93:2a:75:e8:a8:58:04:
e3:01:fc:30:56:27:1f:1b:93:c0:cd:45:93:dd:bb:
62:18:83:d1:8f:4d:7b:b9:9b:90:58:85:89:6f:fd:
e2:16:fb:28:b4:91:da:12:cd:3b:f3:64:da:af:f3:
be:f0:b7:7e:e4:8c:b9:df:74:35:74:49:c4:6c:97:
c0:d5:ad:7a:0f:ae:22:ec:9a:ba:dd:da:ad:67:74:
52:e5:a8:9b:26:93:04:72:82:fe:ee:de:64:e3:cd:
bc:88:5b:a3:8f:13:a7:aa:53:9b:1b:ca:a3:db:99:
a7:4e:65:ee:7f:b6:94:ed:04:84:1e:45:61:4d:e4:
16:e8:4c:a3:a8:53:65:c8:6f:33:9f:50:29:55:dc:
9f:11:b0:d7:c9:57:a0:bc:db:bc:16:0d:8d:ff:bb:
fb:bb:b5:a5:d6:d5:68:e0:22:cf:30:b8:7c:fd:a2:
5f:d4:da:a0:5e:d4:fd:bb:e7:25:a8:d1:6b:86:5c:
7d:fd:2a:f3:17:6e:2c:6b:4e:46:88:73:3a:58:35:
25:5c:1f:4c:52:16:0e:22:a7:62:51:bf:08:02:d0:
ab:c3:25:65:c8:e1:7e:b0:e7:29:2a:99:67:99:dd:
4b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F0:15:56:66:D2:25:CB:C9:DE:83:62:54:42:D6:3A:CF:61:03:A9
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/m_AVVmbSJcvJ3oNiVELWOs9hA6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.15.48.0/22
Signature Algorithm: sha256WithRSAEncryption
36:63:3b:1f:be:f7:3b:7e:a6:43:64:18:cb:44:4c:e6:ef:34:
b6:72:bc:93:c3:7a:3d:b3:8a:52:dc:20:7b:45:c0:a8:e9:9c:
fa:ed:6b:2f:62:2e:47:a9:60:41:04:f9:f0:56:59:4a:05:16:
61:11:ee:1f:81:36:cf:ca:17:f1:0f:6a:35:85:21:be:f9:81:
4f:8e:31:e4:6f:ea:a5:74:c1:b7:47:ec:6e:f5:f8:09:96:6c:
36:d2:1a:50:aa:e6:bd:c1:2d:37:52:aa:8d:1f:d0:95:86:37:
50:27:70:ca:52:e2:9f:83:36:31:8f:2a:e1:d1:0a:83:e5:6e:
38:d4:b8:2b:80:14:bc:e2:58:0c:8c:3a:45:2d:d5:3a:d6:cb:
1e:59:bb:21:1a:94:88:69:62:5a:98:55:af:0a:38:39:37:f2:
b8:02:eb:be:69:f3:3e:a4:e4:af:fb:8d:b6:eb:ac:66:39:c9:
cc:68:39:29:b7:8d:2e:ef:f6:69:3d:04:b7:ab:31:74:6f:49:
2f:f0:aa:62:09:08:6e:ca:c5:c0:24:43:66:92:10:a3:c5:9e:
46:b4:0e:83:fe:e2:f6:cf:9b:c9:6e:4d:d1:4b:27:46:18:c0:
da:71:3d:8e:7b:8f:45:9e:4a:5b:6c:61:4d:78:91:af:8c:6e:
14:7a:b8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:38:36 2026 by rpki-client