Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/AiWXq7LSht7A_MnSyp89YenB8cw.roa
File: AiWXq7LSht7A_MnSyp89YenB8cw.roa (raw, json)
Hash identifier: 45UyOYI/2cnOSoCsRxhe2ejFq6iuR/grbSDOO+lRuP8=
Subject key identifier: 02:25:97:AB:B2:D2:86:DE:C0:FC:C9:D2:CA:9F:3D:61:E9:C1:F1:CC
Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial: 019EB180413B1CC4E4EAF1500F4654F307FD
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/AiWXq7LSht7A_MnSyp89YenB8cw.roa
Signing time: Wed 10 Jun 2026 12:27:12 +0000
ROA not before: Wed 10 Jun 2026 12:27:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56595
IP address blocks: 185.8.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:80:41:3b:1c:c4:e4:ea:f1:50:0f:46:54:f3:07:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Validity
Not Before: Jun 10 12:27:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=022597abb2d286dec0fcc9d2ca9f3d61e9c1f1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:0d:18:89:65:61:d9:f9:00:9f:2c:11:ee:
1c:84:3c:74:55:34:71:7d:1e:f7:7b:7d:c8:d1:49:
36:25:5a:c4:75:2b:0c:59:9f:9e:13:aa:de:97:3a:
5d:42:39:70:64:d0:ae:25:fa:89:aa:01:49:6e:82:
64:0b:a9:97:ff:a2:8d:1e:bf:87:d7:84:7c:81:c9:
84:80:06:71:5f:f0:ba:17:22:cf:f4:85:ac:7d:a5:
5a:1b:d5:11:43:c3:a9:63:06:c8:a1:d5:a4:2c:16:
76:66:1f:42:8d:11:87:61:ea:ee:af:98:d0:78:5b:
25:0f:f8:f7:4a:3c:34:d5:8f:df:2e:74:b5:83:b7:
a7:e5:84:9a:f0:5b:e3:61:82:30:46:a1:8f:94:f7:
42:36:34:d8:b7:cf:83:6a:24:8c:c0:6a:d3:1c:f8:
ec:c4:e4:1e:82:a9:44:86:cd:21:ff:91:08:b3:0a:
f9:f2:59:f2:27:22:89:ef:22:d1:40:f8:43:10:b9:
6b:35:6f:9a:cf:1b:43:e1:23:6a:92:15:b9:9c:d6:
dc:33:51:1c:d4:3d:39:83:87:b3:b8:bd:72:c4:d7:
6e:2a:28:9b:6e:21:5a:ce:5a:5f:69:40:ea:de:f2:
d9:23:37:6f:d6:bf:1b:fc:11:f3:35:14:84:0f:b5:
0c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:25:97:AB:B2:D2:86:DE:C0:FC:C9:D2:CA:9F:3D:61:E9:C1:F1:CC
X509v3 Authority Key Identifier:
keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/AiWXq7LSht7A_MnSyp89YenB8cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.93.0/24
Signature Algorithm: sha256WithRSAEncryption
19:02:95:25:e4:91:31:c9:96:98:51:9c:eb:e9:1d:3d:ac:94:
08:b8:cc:26:30:b7:02:69:2a:3b:23:5b:02:2c:94:07:bf:1e:
fe:74:84:16:eb:ee:8c:4f:d7:b8:a3:dd:b2:a6:c3:8a:88:b2:
07:64:8c:7c:df:c6:43:53:5a:39:64:39:18:cf:a2:df:5b:b4:
c4:d9:e4:60:25:23:c3:5a:01:57:ba:03:0e:07:1d:27:d3:3d:
aa:d9:ae:80:cf:4a:83:7f:58:4c:33:aa:7a:96:e6:76:85:ec:
7f:3b:ba:27:8f:b3:4a:ae:da:4d:6e:71:11:d4:be:b0:1d:73:
a5:26:8f:43:18:a6:4a:de:83:76:ca:4e:6f:8e:8f:6c:12:06:
73:48:51:55:89:46:74:4e:68:ac:90:8f:11:c0:e8:f2:34:29:
a5:6e:f9:b2:60:2c:7d:06:ab:51:7c:c5:0d:c0:e4:40:c7:41:
c3:71:4b:18:ea:09:e1:a8:24:b7:b1:bd:f6:86:b1:fe:a2:2e:
c2:51:0b:dc:14:1e:8f:48:33:fc:2a:ee:d5:9d:10:6b:0e:d5:
9f:a7:43:d9:68:88:84:7e:36:e2:21:c8:f5:d3:81:86:c0:0e:
ae:73:a8:85:dd:d8:07:4e:5c:2d:48:41:dc:cc:25:cd:2c:3e:
35:8a:a2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:30 2026 by rpki-client