Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/AedslwPjaOixRlDhz3PglsifGwo.roa
File: AedslwPjaOixRlDhz3PglsifGwo.roa (raw, json)
Hash identifier: hQDlmxs2wxlMsISuNdJnrcE36LrHbNy48cGf43T4kDw=
Subject key identifier: 01:E7:6C:97:03:E3:68:E8:B1:46:50:E1:CF:73:E0:96:C8:9F:1B:0A
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A07BF6B359FE62FFEF22FEF4347E7535CD
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/AedslwPjaOixRlDhz3PglsifGwo.roa
Signing time: Mon 07 Sep 2026 13:02:40 +0000
ROA not before: Mon 07 Sep 2026 13:02:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199794
IP address blocks: 91.200.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:f6:b3:59:fe:62:ff:ef:22:fe:f4:34:7e:75:35:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 7 13:02:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01e76c9703e368e8b14650e1cf73e096c89f1b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:df:db:57:14:61:f7:33:62:14:ab:72:f4:
a7:a0:d5:cd:46:ac:69:20:ef:da:0b:e7:99:f9:1f:
53:7c:ce:74:df:f7:90:5e:85:cb:dd:ca:33:46:6c:
18:15:8e:86:d3:b1:28:7a:72:eb:60:97:d5:e3:79:
0f:be:99:46:32:ac:09:9c:b7:30:f1:a6:e3:5a:4c:
d4:9a:c4:93:ee:1d:5f:7c:9a:ce:ad:6f:34:cb:6f:
60:9d:e0:6a:cd:53:24:ca:ca:35:4a:03:d4:ce:52:
fd:68:6c:0e:37:01:bd:3b:b2:49:6e:81:af:48:53:
9b:d1:03:8f:99:f4:31:94:2d:e2:59:97:3b:8f:29:
4c:81:62:2c:63:a5:16:2f:d4:6b:1d:f7:df:cb:3e:
84:f9:bf:eb:d8:75:49:31:53:11:39:3f:c6:9b:ee:
bb:14:80:d9:09:92:25:17:e7:04:3c:f5:4b:2d:9a:
e5:ad:66:fe:78:8f:f1:5b:ae:3c:ef:8a:45:97:75:
5f:91:ff:78:15:82:9c:45:b8:26:e8:de:d8:af:ff:
6b:77:83:b5:a5:76:79:ec:6f:7a:ca:96:04:de:2b:
c6:08:a5:af:58:ad:7c:72:52:c2:8c:4b:fb:2b:6d:
04:ee:ab:bc:65:54:6a:e1:0b:34:9a:f2:bc:8f:8f:
5a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E7:6C:97:03:E3:68:E8:B1:46:50:E1:CF:73:E0:96:C8:9F:1B:0A
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/AedslwPjaOixRlDhz3PglsifGwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.222.0/24
Signature Algorithm: sha256WithRSAEncryption
42:73:10:f7:d9:0d:00:c7:28:01:5f:ac:86:f4:fa:38:c2:75:
4d:80:34:57:a5:7b:93:f3:4c:7e:22:a4:8e:af:9e:57:df:33:
26:96:5e:b0:a6:53:1b:38:3c:23:19:e1:33:f8:06:ad:4e:6f:
9f:df:35:f9:c4:0a:39:4a:58:29:e1:52:f3:00:47:c0:57:74:
ca:df:24:7d:5b:33:73:9b:18:fe:89:28:c7:0d:32:66:d6:a8:
24:6e:9f:66:58:b8:99:ba:f6:18:25:e5:5e:72:22:8c:78:89:
8a:35:89:de:47:90:05:aa:7d:99:81:ee:a3:c9:78:e8:5c:1a:
4f:f4:b5:58:21:f2:d7:5f:b7:cd:3f:5f:7f:e5:b9:01:e4:55:
0c:e0:1f:68:d1:9b:17:7d:0d:bb:86:43:9c:79:ea:ba:d3:c9:
b5:31:4a:0a:4c:8f:5f:0e:a7:cb:72:fb:fc:6e:8f:a6:a1:79:
3d:2a:e5:20:ad:7d:9f:5f:c1:b5:05:4d:68:6a:94:ea:5e:24:
b2:f9:05:c4:bb:8f:af:26:b8:66:14:83:8e:b1:4b:13:a9:fe:
70:3e:64:5e:c7:7f:02:83:3d:ae:ff:ff:94:3b:0a:99:6a:eb:
d6:d9:4c:9e:34:4e:b1:dd:5a:72:ef:25:ca:ac:b3:4b:82:93:
a2:20:07:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:57:17 2026 by rpki-client