Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/ANbnsWF-JLHqejX2Av48LjJnZgs.roa
File: ANbnsWF-JLHqejX2Av48LjJnZgs.roa (raw, json)
Hash identifier: 9c6ZcPPtFkeQLm/HVh4TWJ/ypShUXQ5+qlsGmHtD58M=
Subject key identifier: 00:D6:E7:B1:61:7E:24:B1:EA:7A:35:F6:02:FE:3C:2E:32:67:66:0B
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A05604886802A87D1BB6F1296C70F4199A
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/ANbnsWF-JLHqejX2Av48LjJnZgs.roa
Signing time: Mon 31 Aug 2026 04:12:12 +0000
ROA not before: Mon 31 Aug 2026 04:12:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 83.98.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:04:88:68:02:a8:7d:1b:b6:f1:29:6c:70:f4:19:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 31 04:12:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00d6e7b1617e24b1ea7a35f602fe3c2e3267660b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:ce:bf:c3:a5:2e:06:3a:38:1a:e1:27:62:
cb:b0:8f:58:f3:9b:e5:7d:c9:71:57:a3:4c:40:47:
cb:df:ed:e9:25:9a:1f:71:2d:c7:e2:da:72:0f:04:
ea:50:92:94:8a:92:ff:da:66:72:02:c5:68:07:97:
d2:53:c5:5e:00:64:6a:ac:a5:ed:15:bf:59:d6:df:
51:7c:d8:db:46:31:e4:c9:ed:04:64:c7:6a:72:fb:
fa:a8:fd:c0:2f:e1:58:81:12:53:eb:fa:84:20:ea:
1a:1a:c2:0f:bc:d3:f1:eb:7d:7b:72:85:0f:56:3e:
8c:2a:34:43:e3:37:3b:d1:12:e6:37:92:75:c6:8b:
69:3b:54:cb:a2:2b:8e:60:57:aa:f8:62:2d:87:c7:
9a:ee:60:b7:46:df:20:37:7e:44:c8:51:f7:06:20:
5c:91:26:bf:30:87:a0:0f:20:36:f2:3a:89:d0:8c:
81:88:c0:9f:76:48:0d:92:09:88:43:ff:4f:5a:a0:
ca:44:89:5b:7f:65:e3:af:fe:dd:f7:ff:92:cc:fa:
0f:4e:8b:af:51:de:69:67:e5:78:0e:ff:1f:86:86:
60:0c:71:fc:e1:a9:45:95:17:09:46:fa:24:c0:da:
9b:ab:25:8e:47:60:25:d0:ab:f0:9b:70:fb:d4:95:
08:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D6:E7:B1:61:7E:24:B1:EA:7A:35:F6:02:FE:3C:2E:32:67:66:0B
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/ANbnsWF-JLHqejX2Av48LjJnZgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.193.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:cf:0a:9a:2c:69:31:18:9b:8a:0b:3a:ae:72:3f:ea:fe:a5:
3c:41:50:af:89:3a:03:4f:7a:9d:b4:d7:e3:73:60:c7:b5:19:
12:7c:8a:e0:e0:23:d9:3f:83:2d:d3:38:58:01:38:03:b3:92:
da:20:35:a7:6d:0b:0a:30:16:b0:9c:9a:4e:73:87:80:6c:4a:
8e:4b:08:29:cb:08:de:72:85:1e:88:fc:e1:25:18:5d:7b:40:
3b:e2:4b:fb:67:49:0f:fa:5a:23:5d:d4:96:5f:f2:53:dc:7a:
6f:e0:f7:ca:75:5d:16:5a:54:d7:86:57:83:29:df:c3:67:16:
6f:30:8f:31:d9:39:c7:66:87:82:e3:bd:55:f7:84:a5:90:80:
c4:79:28:cd:a7:5f:f0:80:b9:ef:82:02:38:ae:7b:8b:8d:ab:
dd:65:65:8f:48:4d:a1:69:6f:31:1a:3a:a7:5b:0a:36:d4:49:
60:10:4f:93:d4:85:01:22:e9:27:da:85:38:54:9d:06:a3:c6:
0b:fd:66:70:97:c1:dd:9b:fa:ee:28:f7:7f:fd:ad:6e:3a:d8:
34:16:d1:4a:5b:09:31:df:62:f4:25:96:08:b6:06:ed:9c:b9:
b9:13:29:0c:d2:a5:96:ba:8e:1e:6d:62:89:e5:25:c7:77:cd:
5c:de:e2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:56 2026 by rpki-client