Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/AtuTRwmRnvvLvRtx8a3GHqoxdZc.roa
File: AtuTRwmRnvvLvRtx8a3GHqoxdZc.roa (raw, json)
Hash identifier: pgUtcPRvfNZjeM0ucWif6Agn7aF18SDfgZspGz2evSU=
Subject key identifier: 02:DB:93:47:09:91:9E:FB:CB:BD:1B:71:F1:AD:C6:1E:AA:31:75:97
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019F080C60CB3FF4C529F6BF858CDA4E06BB
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/AtuTRwmRnvvLvRtx8a3GHqoxdZc.roa
Signing time: Sat 27 Jun 2026 07:47:36 +0000
ROA not before: Sat 27 Jun 2026 07:47:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205775
IP address blocks: 147.45.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:08:0c:60:cb:3f:f4:c5:29:f6:bf:85:8c:da:4e:06:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 27 07:47:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02db934709919efbcbbd1b71f1adc61eaa317597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:77:4d:66:12:2e:75:1d:29:2c:21:b5:50:
c3:4d:34:e5:26:7c:c1:0f:67:5f:c7:e9:75:68:47:
1a:a0:70:73:5f:41:d7:e9:d4:6b:92:4a:4e:a7:02:
3c:ec:ec:22:ad:30:26:2d:b5:ef:c6:4a:f3:40:bc:
f9:4b:11:35:45:ce:e0:78:55:4b:94:8d:da:51:b1:
d7:31:8a:04:f8:10:82:6b:4f:3c:8a:1b:69:9b:b3:
e2:9a:be:7a:12:2f:85:fb:1e:4b:f6:8e:e6:79:ab:
26:12:00:50:17:3b:1c:da:55:7f:26:d9:30:3e:ea:
25:b0:ee:8f:01:10:d2:af:07:a5:db:26:43:f3:39:
c2:65:34:5c:bb:e9:8a:57:e0:68:78:0c:c7:1c:71:
b8:66:3b:1a:a0:b2:a2:0c:52:04:a5:74:9f:e5:f4:
8b:19:94:83:7e:30:de:8e:a8:0a:1d:c3:3d:51:39:
94:4b:c6:84:10:84:e7:1d:eb:15:bc:9e:b0:64:28:
46:2f:2c:e2:16:b4:b1:1a:f4:9d:41:79:9c:41:0f:
8e:3a:67:5d:3e:f0:02:88:6a:94:57:8f:b5:50:f2:
3b:d5:c0:51:35:04:7f:4d:ba:4e:b2:6f:95:e6:9f:
f5:50:88:b5:a1:4e:23:8f:13:65:4c:c1:a2:57:79:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DB:93:47:09:91:9E:FB:CB:BD:1B:71:F1:AD:C6:1E:AA:31:75:97
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/AtuTRwmRnvvLvRtx8a3GHqoxdZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.45.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:27:e8:2a:e3:b0:2a:51:67:48:9f:bb:43:90:2b:7d:02:2e:
4a:63:f8:16:74:70:26:ae:da:d3:dc:ff:ca:30:2b:6e:42:3b:
92:f1:60:16:36:a4:d3:8a:cb:60:e7:a4:81:6c:77:d7:64:0c:
4b:28:8d:54:00:e6:6d:ab:70:fb:84:5d:36:2b:cc:70:29:46:
b6:71:f9:9c:db:1f:42:82:d7:96:5c:e7:12:e4:37:dc:ad:41:
74:8e:39:cb:ab:2e:dc:aa:ce:1c:84:fc:cc:77:76:44:16:6f:
b4:13:64:65:6e:e7:ed:80:cb:b9:40:df:e4:d1:b5:5b:c5:9f:
f1:cd:cc:79:16:05:2e:70:c6:89:cf:4c:a9:91:ed:8e:94:f7:
ca:f1:e2:1e:e3:61:99:de:0e:5c:d7:a7:c7:6b:6b:7c:9a:d2:
a2:87:02:f4:57:8d:c8:b8:dc:43:98:24:48:ff:f0:8c:99:63:
92:86:6f:33:20:81:ad:4d:e7:46:91:72:50:b3:05:e9:c2:d0:
b3:e9:6e:c0:6b:ae:b4:a2:58:a3:76:c6:a0:63:c3:ca:43:95:
e7:08:fd:73:48:32:fc:a4:c8:10:c5:81:e4:01:89:26:77:53:
2e:66:16:65:58:3c:d4:77:1b:0e:03:fc:07:82:ed:4e:3a:9b:
ac:74:23:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:38:01 2026 by rpki-client