Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/AougIc74h35_KzUu12eQFbj81bA.roa
File: AougIc74h35_KzUu12eQFbj81bA.roa (raw, json)
Hash identifier: GBntLRC+S+5HxwKYqcvwhnujmD0IvEEJ30wuhwZOP+U=
Subject key identifier: 02:8B:A0:21:CE:F8:87:7E:7F:2B:35:2E:D7:67:90:15:B8:FC:D5:B0
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01A12FCB103F81CBBA113AF79532C3DA9FD6
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/AougIc74h35_KzUu12eQFbj81bA.roa
Signing time: Mon 12 Oct 2026 11:06:39 +0000
ROA not before: Mon 12 Oct 2026 11:06:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 91.123.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:cb:10:3f:81:cb:ba:11:3a:f7:95:32:c3:da:9f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Oct 12 11:06:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=028ba021cef8877e7f2b352ed7679015b8fcd5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:16:fb:9b:b5:3d:5f:9b:01:95:e7:79:dd:
50:b6:a7:8a:65:2a:d3:d4:92:18:9b:da:7d:b5:d1:
42:b9:04:38:23:0e:fc:b1:73:34:36:24:b8:b1:1c:
60:ff:39:fe:a9:d3:a6:ec:59:eb:30:c7:51:64:a8:
a2:40:fc:72:2d:2c:31:18:f7:10:e6:0a:12:ce:40:
37:11:bd:d1:59:1e:34:23:ec:04:d0:e9:76:5e:26:
51:69:d5:2f:25:2f:da:1f:d1:be:cd:44:78:c2:c8:
ec:46:3d:48:0c:7c:cd:97:4c:1d:3b:61:0d:6b:c6:
0f:4f:71:42:03:bc:2e:3c:18:df:3d:22:99:3e:c5:
eb:15:d8:8f:9b:ab:0e:b9:ef:26:ba:c9:5f:ac:c6:
c6:d6:3b:82:3a:e5:0c:0c:49:63:b5:ad:2d:8c:8a:
34:6a:38:cf:a5:c7:f1:80:db:46:cd:56:24:c4:c1:
0f:12:5a:71:f3:d7:51:2e:2b:5e:98:92:12:2e:b9:
93:71:05:cc:7c:e6:24:0a:ce:78:a3:53:b7:de:2a:
5e:53:b5:7b:0f:71:38:ac:bf:0c:58:d9:e6:a4:91:
5e:08:68:2d:17:52:50:6d:f5:a3:dd:6b:b9:24:33:
0b:42:ee:3e:b2:de:3d:8b:9f:42:26:9f:fa:9b:78:
67:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8B:A0:21:CE:F8:87:7E:7F:2B:35:2E:D7:67:90:15:B8:FC:D5:B0
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/AougIc74h35_KzUu12eQFbj81bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.123.70.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:9e:4e:0a:6d:df:e2:48:60:f5:ec:f8:8d:83:7a:75:25:0d:
99:36:fd:7b:ac:d6:be:c8:b6:17:3d:5b:fc:4b:1a:45:0d:62:
05:57:45:28:2a:cc:82:bb:96:14:cd:32:67:70:f4:df:3e:9b:
d5:38:b2:04:85:f4:13:4d:6b:f5:b0:bf:b9:c1:8e:0a:23:01:
f9:2b:8e:12:29:45:e3:22:b8:fb:da:93:f7:e9:ef:5b:88:d8:
bb:8f:54:4d:c2:75:3f:07:ab:ac:31:82:15:01:a5:1f:8b:63:
03:62:82:5c:5b:be:76:15:ba:c6:8d:c9:57:a6:d5:a4:72:dc:
8b:84:9e:11:27:4e:e5:22:b3:97:c5:bb:fa:25:df:2c:7f:38:
b1:62:48:5e:8a:cb:a3:7d:09:45:e2:51:50:b0:13:4f:86:07:
50:6e:53:48:64:f5:5d:8b:58:1a:ce:56:5a:56:49:36:61:2a:
37:23:c4:ed:0e:91:f4:84:7d:c3:d7:60:5f:e6:ba:d4:77:7d:
15:84:a8:16:c6:b0:6d:ca:39:fa:c2:31:8d:7c:6d:71:a9:88:
12:c2:ea:c4:1e:aa:20:49:6a:05:4d:49:f7:08:e4:d4:f6:68:
01:d2:66:5e:6d:11:ed:84:34:d7:3a:fa:d1:bb:31:ae:ab:3a:
95:ee:69:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 20:59:09 2026 by rpki-client