Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/a2vClMXoksyphbJQEm846lMzG2c.roa
File: a2vClMXoksyphbJQEm846lMzG2c.roa (raw, json)
Hash identifier: O1894q+ESqbzNvJi6GhWASH1/OhPOfQ2rGSNOmE8M+w=
Subject key identifier: 6B:6B:C2:94:C5:E8:92:CC:A9:85:B2:50:12:6F:38:EA:53:33:1B:67
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019FCD369B4B521345845A20A136C5632518
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/a2vClMXoksyphbJQEm846lMzG2c.roa
Signing time: Tue 04 Aug 2026 14:38:55 +0000
ROA not before: Tue 04 Aug 2026 14:38:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219202
IP address blocks: 147.45.47.0/24 maxlen: 24
193.233.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:36:9b:4b:52:13:45:84:5a:20:a1:36:c5:63:25:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Aug 4 14:38:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b6bc294c5e892cca985b250126f38ea53331b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:6c:b5:ca:2b:48:90:49:62:6b:a9:63:d9:
49:fb:ee:f6:5b:3b:98:94:72:d1:42:dc:80:15:16:
25:8c:fc:8b:91:2b:c9:e4:76:7b:79:0d:07:56:7e:
a9:ae:0e:ad:83:9d:74:03:de:5c:f5:80:f7:0e:52:
49:7c:65:ef:62:b8:c7:a6:5f:63:84:41:0a:ae:6d:
d2:39:9a:03:d5:43:2f:5c:42:13:dd:86:0c:77:be:
0d:39:a0:9e:cc:28:54:a0:1f:63:25:79:01:11:dc:
76:26:80:09:64:d4:0c:40:fb:67:65:84:3a:8c:66:
5c:1f:dc:ee:14:60:fc:b6:a9:6f:87:86:bb:b4:d5:
db:2c:f6:57:a8:15:b5:2d:a8:7a:4b:8c:f8:de:dc:
6f:ec:06:fb:8c:9b:25:6d:16:ca:8b:ba:ae:a0:1a:
aa:56:ad:90:86:4a:30:dc:25:2d:f1:05:83:a9:b0:
29:6d:57:7c:b7:09:1f:4e:b6:b1:90:11:7b:fc:09:
8b:d7:3a:8f:23:46:b8:cd:cf:00:dc:d0:3e:78:44:
c4:c3:fb:5a:29:0e:ef:0c:10:d6:73:c2:21:cd:1a:
d1:7e:25:64:82:99:53:09:a1:7f:f1:a1:12:84:90:
a8:0a:20:be:cd:ab:29:f5:47:ec:0b:4f:1a:f8:27:
66:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6B:C2:94:C5:E8:92:CC:A9:85:B2:50:12:6F:38:EA:53:33:1B:67
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/a2vClMXoksyphbJQEm846lMzG2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.47.0/24
193.233.255.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a3:6a:dc:da:73:f1:cd:11:00:37:44:8d:5b:d1:6b:94:05:
8a:46:5e:a2:0f:00:c4:03:37:60:fc:fd:21:06:e3:cd:d9:28:
e0:74:04:f6:83:16:ee:1e:65:81:23:ba:bc:4f:b6:eb:88:f2:
4b:21:00:cf:3b:7a:e4:5c:04:8e:c8:8e:aa:fd:1e:bb:29:01:
1c:65:7d:1d:6a:72:b1:21:3b:34:5e:0e:f2:92:df:46:af:ea:
e5:12:ee:f8:db:73:1a:b0:7f:ae:50:91:8a:e7:9d:82:f7:f2:
a7:a1:3f:05:e7:c0:14:9f:00:15:5e:fa:f8:43:4b:f3:1e:80:
46:10:eb:93:ce:b7:91:81:bb:bf:d3:69:f3:34:1a:6f:62:ef:
7b:66:69:e3:73:f4:9d:e3:ac:50:0c:a1:a1:0f:9a:06:49:28:
53:70:a8:71:fd:68:0c:78:92:05:70:9a:0d:19:32:5e:b6:a6:
19:8a:ce:34:1f:73:69:6a:4a:c3:0f:59:d3:40:43:dc:20:3c:
2a:5d:db:82:6f:d2:85:a7:b5:26:55:0d:ab:06:00:3b:3b:2a:
18:de:b0:3b:d2:a1:e7:4a:8b:7f:1b:da:71:43:d3:6a:2c:2a:
0c:73:ac:28:e1:ad:cc:2a:8e:30:ee:94:30:85:35:4b:84:f5:
82:f6:fa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:06 2026 by rpki-client