Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/Azk4LGjaJ_4jcbwI24XzzqHeRgA.roa
File: Azk4LGjaJ_4jcbwI24XzzqHeRgA.roa (raw, json)
Hash identifier: 0E9Ih6mHA5v+HPzbQ+/Vn+B5EKtFYWDfb0kcgH7oXuw=
Subject key identifier: 03:39:38:2C:68:DA:27:FE:23:71:BC:08:DB:85:F3:CE:A1:DE:46:00
Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial: 01A062BD7D78303EA0BA31CF1999E5A12B3F
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/Azk4LGjaJ_4jcbwI24XzzqHeRgA.roa
Signing time: Wed 02 Sep 2026 15:29:40 +0000
ROA not before: Wed 02 Sep 2026 15:29:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6206
IP address blocks: 37.46.192.0/21 maxlen: 24
69.161.192.0/21 maxlen: 24
91.199.50.0/24 maxlen: 24
94.185.80.0/21 maxlen: 24
94.228.208.0/20 maxlen: 24
107.182.112.0/20 maxlen: 24
109.235.48.0/21 maxlen: 24
194.110.67.0/24 maxlen: 24
2a00:dd0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:bd:7d:78:30:3e:a0:ba:31:cf:19:99:e5:a1:2b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Validity
Not Before: Sep 2 15:29:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0339382c68da27fe2371bc08db85f3cea1de4600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bd:96:be:ec:ac:8f:45:30:9e:83:93:43:e8:
a6:c8:26:b0:0d:de:e2:7e:45:9e:de:2d:86:e1:be:
61:b4:c7:78:27:d2:b5:d0:c7:d3:46:93:04:5c:cb:
71:b3:2d:ea:99:5f:db:3f:a4:96:6f:c8:61:af:bd:
0c:4f:07:f4:7f:25:d0:9d:ce:c4:d5:60:03:b2:8a:
82:e9:39:91:f4:88:a0:22:fd:75:9f:7c:02:6c:12:
a6:f9:e7:da:c2:1f:e3:3a:3d:01:ab:4f:f5:e0:57:
26:26:09:d6:e8:bd:be:2c:7d:b9:1f:15:c0:6d:0b:
a6:d3:1d:22:2d:9d:53:45:88:35:99:b1:20:a0:34:
4a:48:46:1f:e0:e6:b6:73:c2:a1:41:a1:d8:c4:0e:
2f:9c:29:3e:fa:6b:a1:78:00:b0:a8:bb:a4:16:e1:
77:e2:c2:7a:e8:4b:b4:64:11:a4:ad:54:2e:4b:a0:
73:88:2b:58:68:18:ae:2b:b5:fa:af:50:11:ee:5f:
5f:89:a6:7a:76:44:27:ec:42:bc:25:dd:61:65:e7:
db:27:8d:19:ed:e0:a1:38:a3:75:08:04:5b:cb:18:
ce:7d:a3:ea:a2:c1:c7:c3:5d:50:81:21:1f:0a:75:
62:62:d9:78:c3:1f:8f:0c:56:9f:21:95:96:9b:c4:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:39:38:2C:68:DA:27:FE:23:71:BC:08:DB:85:F3:CE:A1:DE:46:00
X509v3 Authority Key Identifier:
keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/Azk4LGjaJ_4jcbwI24XzzqHeRgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.192.0/21
69.161.192.0/21
91.199.50.0/24
94.185.80.0/21
94.228.208.0/20
107.182.112.0/20
109.235.48.0/21
194.110.67.0/24
IPv6:
2a00:dd0::/32
Signature Algorithm: sha256WithRSAEncryption
4d:f3:7a:51:d9:99:61:c4:44:36:1d:da:5a:c0:06:90:65:5c:
d0:e8:80:33:c2:6e:18:82:e6:9f:1f:07:4b:2e:02:06:90:66:
9f:2f:66:d0:5f:ce:54:2d:ec:4c:cc:fb:5e:14:97:a3:21:e3:
c3:35:f9:3a:32:ce:9c:3b:33:0c:d9:23:5d:f6:72:4e:b1:27:
ca:84:8b:25:2e:a5:d6:be:10:89:33:1c:e3:11:95:29:7f:54:
96:12:f6:40:bc:66:b6:9b:c3:fd:a6:1a:18:a4:85:66:5a:f3:
0c:29:76:11:b1:a3:95:c7:39:e7:87:5b:4b:2f:b0:44:24:f4:
72:5c:93:77:58:52:ef:a5:07:e2:0d:f4:b4:b0:b6:8c:eb:9a:
41:df:c0:34:8f:d8:5d:de:50:0d:56:86:f9:81:85:90:2c:12:
7e:d2:82:10:1d:21:bd:79:5a:d4:d1:91:15:fe:2f:db:c5:a3:
85:0a:b3:bb:8b:7e:4c:59:6b:9a:54:3e:fd:cf:11:92:b1:9c:
fd:dc:cc:5f:99:6d:aa:a2:82:a9:62:37:27:59:15:40:f5:9b:
2c:3b:51:5d:09:27:4d:d9:8f:b4:dc:d8:6d:44:70:17:95:c5:
67:6e:29:08:0f:85:d2:fb:8f:f0:52:b1:9f:d4:9f:81:aa:7d:
32:5b:03:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:55:54 2026 by rpki-client