Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/AjhPvrc53d7ImT4n36oLWT3U7ec.roa
File: AjhPvrc53d7ImT4n36oLWT3U7ec.roa (raw, json)
Hash identifier: VrbRapV9O7SqULMWF0Dt84ldSNvkUj4UAkMP5uNMVLY=
Subject key identifier: 02:38:4F:BE:B7:39:DD:DE:C8:99:3E:27:DF:AA:0B:59:3D:D4:ED:E7
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F26945A52E0BC3D9EDFB1C8022D6DDEE6
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/AjhPvrc53d7ImT4n36oLWT3U7ec.roa
Signing time: Fri 03 Jul 2026 06:04:44 +0000
ROA not before: Fri 03 Jul 2026 06:04:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147288
IP address blocks: 83.98.198.0/24 maxlen: 24
89.30.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:94:5a:52:e0:bc:3d:9e:df:b1:c8:02:2d:6d:de:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 3 06:04:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02384fbeb739dddec8993e27dfaa0b593dd4ede7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:cf:0a:d3:ab:3a:f8:6f:24:11:52:93:4e:
19:d1:c2:0d:91:48:e5:48:51:f6:bd:94:12:7a:a2:
d8:20:77:38:9e:10:e4:2d:65:8c:c8:33:0a:52:03:
26:97:95:5e:07:3e:8f:5e:e8:c3:e6:df:c0:63:c8:
f6:1f:a6:8a:6e:6d:4f:6a:42:00:de:7b:d7:b1:c8:
2b:e5:ba:21:d4:2c:da:54:49:06:58:c4:7a:7a:db:
e6:e3:9a:c3:14:0a:58:b5:9f:0c:2a:4e:09:2f:ab:
c9:33:d6:28:05:b4:e3:8e:c8:ed:c6:1c:33:ae:3b:
f9:2b:ad:c1:3f:92:55:ff:d3:af:15:5b:cd:b0:0f:
c9:03:6a:a5:95:92:44:2a:41:e5:ed:d1:45:31:ef:
23:09:6d:40:20:b7:fd:5f:62:97:27:70:62:92:f6:
01:c2:2e:4d:48:8f:cf:bc:dd:9c:f2:7c:fc:a3:f5:
93:61:5b:ec:47:1e:b0:c7:03:5c:1c:b2:61:b8:d4:
b2:42:36:fb:4c:73:f4:cf:78:4c:b3:f9:68:8e:fc:
5d:c7:9d:72:a7:48:9e:87:d2:ca:7d:8c:2d:e6:e5:
2b:ef:e6:b3:96:e8:06:59:3f:5b:2a:e4:28:f4:de:
bb:08:04:da:45:54:d8:0d:7d:98:03:e6:5f:87:79:
c0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:38:4F:BE:B7:39:DD:DE:C8:99:3E:27:DF:AA:0B:59:3D:D4:ED:E7
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/AjhPvrc53d7ImT4n36oLWT3U7ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.198.0/24
89.30.172.0/24
Signature Algorithm: sha256WithRSAEncryption
57:b4:91:25:fe:fc:38:79:57:2c:f9:e1:36:98:5a:7f:f0:c8:
d4:55:bb:42:2c:99:17:0a:d4:14:bb:a8:d3:63:9a:6f:ce:62:
1a:4e:87:84:78:39:08:b7:0c:4d:8d:09:49:07:f5:d1:ea:b2:
08:3c:ce:b7:b6:5c:8e:9c:36:cc:44:bc:e5:83:24:9e:ff:ae:
b5:3e:fe:0e:9f:35:06:f0:11:42:01:dd:79:e3:9e:92:a2:ba:
00:11:fe:16:31:9c:53:3d:52:9a:9e:d4:dd:79:b0:74:ce:5c:
60:de:49:28:88:8b:23:fc:44:5d:52:7c:5b:47:2b:c1:5e:7f:
44:15:10:9d:3a:01:eb:8f:07:7e:4b:93:1a:41:db:69:66:c7:
f2:62:44:77:cb:7b:3c:06:cf:e5:2d:43:3e:ef:5a:f8:dc:ea:
18:66:5e:50:1c:6d:3b:a6:76:02:c7:6e:08:c2:44:4a:df:aa:
da:15:98:31:c8:f5:3f:1a:75:6f:a8:bc:dc:e4:5f:2b:27:bf:
c9:f5:cb:f7:00:bb:64:c5:f1:9c:8f:9d:40:0f:c8:39:2d:96:
60:82:a0:1e:aa:a4:d8:8b:ef:df:23:53:19:46:81:2d:60:bb:
6d:59:2a:b9:50:50:dc:2f:3f:d2:52:94:49:fd:72:18:71:ee:
6c:8a:d4:c1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8mlFpS4Lw9nt+xyAItbd7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwNzAzMDYwNDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjM4NGZiZWI3MzlkZGRlYzg5OTNlMjdkZmFhMGI1OTNkZDRlZGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxvPCtOrOvhvJBFSk04Z0cINkUjl
SFH2vZQSeqLYIHc4nhDkLWWMyDMKUgMml5VeBz6PXujD5t/AY8j2H6aKbm1PakIA
3nvXscgr5boh1CzaVEkGWMR6etvm45rDFApYtZ8MKk4JL6vJM9YoBbTjjsjtxhwz
rjv5K63BP5JV/9OvFVvNsA/JA2qllZJEKkHl7dFFMe8jCW1AILf9X2KXJ3BikvYB
wi5NSI/PvN2c8nz8o/WTYVvsRx6wxwNcHLJhuNSyQjb7THP0z3hMs/lojvxdx51y
p0ieh9LKfYwt5uUr7+azlugGWT9bKuQo9N67CATaRVTYDX2YA+Zfh3nAFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAI4T763Od3eyJk+J9+qC1k91O3nMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvQWpoUHZyYzUzZDdJbVQ0bjM2b0xXVDNVN2VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU2LGAwQA
WR6sMA0GCSqGSIb3DQEBCwUAA4IBAQBXtJEl/vw4eVcs+eE2mFp/8MjUVbtCLJkX
CtQUu6jTY5pvzmIaToeEeDkItwxNjQlJB/XR6rIIPM63tlyOnDbMRLzlgySe/661
Pv4OnzUG8BFCAd15456SoroAEf4WMZxTPVKantTdebB0zlxg3kkoiIsj/ERdUnxb
RyvBXn9EFRCdOgHrjwd+S5MaQdtpZsfyYkR3y3s8Bs/lLUM+71r43OoYZl5QHG07
pnYCx24IwkRK36raFZgxyPU/GnVvqLzc5F8rJ7/J9cv3ALtkxfGcj51AD8g5LZZg
gqAeqqTYi+/fI1MZRoEtYLttWSq5UFDcLz/SUpRJ/XIYce5sitTB
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:45 2026 by rpki-client