Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/AzhaPPvPxNiGq157vVJ0SmVSylU.roa
File: AzhaPPvPxNiGq157vVJ0SmVSylU.roa (raw, json)
Hash identifier: vBr8RZJ/KmDM3/LGeI+13Tr4woX1yQS7FNlR960bnRs=
Subject key identifier: 03:38:5A:3C:FB:CF:C4:D8:86:AB:5E:7B:BD:52:74:4A:65:52:CA:55
Certificate issuer: /CN=d019f415fc29cc12fa026ac83d3100f6e2092148
Certificate serial: 019FF08DC717CE6C0832540F76997400EE25
Authority key identifier: D0:19:F4:15:FC:29:CC:12:FA:02:6A:C8:3D:31:00:F6:E2:09:21:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/AzhaPPvPxNiGq157vVJ0SmVSylU.roa
Signing time: Tue 11 Aug 2026 11:20:51 +0000
ROA not before: Tue 11 Aug 2026 11:20:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60633
IP address blocks: 91.220.99.0/24 maxlen: 24
185.176.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:8d:c7:17:ce:6c:08:32:54:0f:76:99:74:00:ee:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d019f415fc29cc12fa026ac83d3100f6e2092148
Validity
Not Before: Aug 11 11:20:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03385a3cfbcfc4d886ab5e7bbd52744a6552ca55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:9c:57:af:93:23:6e:26:64:c6:0c:b0:c5:
a6:72:ab:f7:77:f5:4b:c7:8d:78:68:e9:e1:f4:99:
b1:17:2e:e3:4d:2b:3f:ea:86:f2:9d:08:c1:50:97:
3f:be:e4:22:95:a9:ba:24:c7:93:b9:dc:90:03:93:
df:1d:3c:85:59:fc:97:3f:71:fc:f1:d2:37:25:7d:
79:34:bb:38:d0:d3:83:e9:59:1b:17:4e:83:0a:47:
d0:ff:03:5f:c9:ab:f2:f6:28:da:a9:08:b4:f0:fb:
db:4a:b3:59:f4:c0:26:1a:9a:79:67:67:c9:1b:88:
61:74:3e:57:7f:45:44:a3:4f:8b:7e:f0:9e:81:3e:
ac:4e:7d:ef:7c:de:73:ac:a4:65:a6:84:ff:9c:8b:
31:33:1b:16:c0:ec:7a:0c:a9:db:c1:85:e8:d8:66:
5e:13:1b:05:f2:ac:66:82:79:97:14:c5:73:42:50:
80:a7:d0:a8:4d:c1:1b:71:76:f5:24:c5:82:a0:d9:
7c:d9:9b:31:18:86:22:0c:bd:d1:fa:98:44:2a:e7:
b1:d1:77:8f:28:e0:3e:0a:46:5e:ea:92:69:fa:e9:
6c:15:25:25:a2:aa:a3:fa:79:b9:ef:72:44:eb:ca:
4d:45:1a:97:19:c6:7b:b0:74:ea:fa:48:60:d9:2c:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:38:5A:3C:FB:CF:C4:D8:86:AB:5E:7B:BD:52:74:4A:65:52:CA:55
X509v3 Authority Key Identifier:
keyid:D0:19:F4:15:FC:29:CC:12:FA:02:6A:C8:3D:31:00:F6:E2:09:21:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/AzhaPPvPxNiGq157vVJ0SmVSylU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.99.0/24
185.176.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:e1:8c:9b:61:4e:91:0b:56:2f:2c:0e:13:e6:cb:20:57:03:
50:88:ce:e7:78:11:ee:86:9e:a4:20:64:f1:60:15:10:1d:38:
be:d7:15:33:2e:c3:63:72:fe:98:2c:e9:bc:10:d0:5a:50:9b:
e6:af:3f:07:42:59:0b:29:a5:44:57:42:24:7f:6e:fa:df:b1:
c4:c6:ec:5d:8b:64:d4:f2:10:cc:7f:40:10:4d:e6:88:02:e4:
f8:bf:9f:2d:d2:76:16:e6:75:cf:58:9a:33:35:9c:6e:67:ec:
70:a2:3d:14:4c:4d:22:22:b6:29:0b:6d:f0:f3:1b:20:a0:77:
dd:c4:4d:cb:64:0a:9e:65:fc:bc:a2:48:1d:17:21:23:a2:27:
2f:49:b7:56:a8:23:b7:7f:a9:b6:c8:37:e6:84:97:1a:cd:56:
99:e6:6d:35:21:9e:6b:02:10:a6:99:87:3c:c5:ef:f7:10:ad:
8a:47:13:78:8a:57:97:11:0b:a4:7d:18:1b:35:37:48:f6:e2:
45:1a:62:b9:75:7e:17:ae:0e:a4:ec:7c:64:6a:03:9b:97:f1:
00:e6:b7:b0:19:a1:53:20:1c:a4:e7:c0:72:ce:b9:b5:bb:e2:
f9:c4:0c:86:3b:ff:1b:b0:01:c8:9c:76:55:6a:97:1a:68:87:
10:a8:14:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:23 2026 by rpki-client