Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/AoAqhFwwATiuWdJYHVkqAEmM5W8.roa
File: AoAqhFwwATiuWdJYHVkqAEmM5W8.roa (raw, json)
Hash identifier: rFGMqzqm/98Mnxqq4rTFlX93otNVpZlGzIp3q1sO9Ys=
Subject key identifier: 02:80:2A:84:5C:30:01:38:AE:59:D2:58:1D:59:2A:00:49:8C:E5:6F
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019F702E5C530E0DD4D404F6C7DF13BB4CDB
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/AoAqhFwwATiuWdJYHVkqAEmM5W8.roa
Signing time: Fri 17 Jul 2026 13:05:14 +0000
ROA not before: Fri 17 Jul 2026 13:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 89.251.25.0/24 maxlen: 24
91.200.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:2e:5c:53:0e:0d:d4:d4:04:f6:c7:df:13:bb:4c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 17 13:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02802a845c300138ae59d2581d592a00498ce56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:46:01:dd:e9:76:a3:92:ae:6b:9d:68:6c:
02:96:0e:d7:2b:f2:79:2b:11:0e:27:54:d0:0e:74:
c6:f3:62:73:18:5f:34:d7:25:5f:e3:4b:20:55:3c:
c5:c2:d3:58:f1:fb:81:5a:3d:4c:35:56:3b:fb:d3:
3b:58:38:44:7c:90:3e:2b:78:e8:3b:3a:ab:29:51:
e3:60:b6:91:18:5c:09:56:56:bb:aa:96:e7:f6:c4:
be:c3:00:1c:9c:2e:ad:3f:0d:46:b7:09:71:50:06:
53:ed:c1:88:37:bd:39:aa:f2:73:62:df:54:14:05:
e8:ac:c6:44:93:bf:a5:1c:32:21:7d:84:1a:98:34:
f0:71:8e:0a:b5:4b:d5:95:a1:bb:4e:bc:44:c0:0c:
8d:86:2f:3b:c3:55:14:0f:6f:c9:80:c6:96:91:33:
26:04:26:1b:85:8a:4c:f0:9b:39:ba:5c:e2:65:a9:
bc:bf:53:1b:6d:11:61:6a:46:d0:fc:29:3e:8e:c4:
80:af:49:ad:cb:13:33:81:30:07:ef:76:eb:22:0a:
5f:58:fe:6c:92:5e:a6:a5:25:74:6b:15:ed:3f:00:
21:66:83:fd:15:28:f2:9b:cb:3b:07:f8:11:ef:d3:
31:4d:6c:6c:a5:48:9c:98:ce:67:09:85:db:53:52:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:80:2A:84:5C:30:01:38:AE:59:D2:58:1D:59:2A:00:49:8C:E5:6F
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/AoAqhFwwATiuWdJYHVkqAEmM5W8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.25.0/24
91.200.223.0/24
Signature Algorithm: sha256WithRSAEncryption
78:85:b1:56:07:3b:33:2a:21:ac:4e:98:01:6d:3f:72:fd:6d:
10:1b:22:b2:48:e6:56:fa:2c:db:91:07:78:43:a2:a4:df:9f:
0d:78:20:8f:d0:f9:56:dd:84:99:c2:31:f7:57:8a:78:c1:83:
33:38:ba:bf:20:4b:86:29:bd:d5:72:a9:92:c9:4a:40:26:9b:
46:25:34:98:06:1a:a6:7b:ee:cd:86:ef:4b:7f:03:de:c3:86:
c3:53:34:c5:71:7c:f7:3d:bb:50:01:61:b5:33:cd:80:68:10:
b7:ac:9e:1f:76:ca:4a:f8:a3:c1:18:d1:46:b7:91:ae:50:9b:
5e:33:2d:69:f7:6f:f3:ea:dc:40:37:8b:6b:72:7e:fc:d4:cf:
c0:80:ea:b5:a0:c4:8c:f3:dd:36:80:ec:84:cf:73:31:51:1d:
e7:ad:ca:8d:c3:f4:81:2c:91:59:52:05:41:ed:fd:a1:85:af:
62:85:aa:0c:e2:e2:99:d0:a7:6a:e5:c1:c7:c3:b5:54:3f:fc:
7e:3f:a7:63:1d:9d:b0:ab:63:33:9e:02:5e:32:ae:b8:45:b6:
77:c0:69:75:a2:e0:81:30:6b:07:70:79:2f:b6:21:4b:1a:12:
eb:cb:dc:76:72:1e:27:20:ad:c7:5f:36:3d:59:8b:be:60:22:
00:2f:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:50:17 2026 by rpki-client