Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Adqf-0ME2YqN8H_6B4asgnToAUY.roa
File: Adqf-0ME2YqN8H_6B4asgnToAUY.roa (raw, json)
Hash identifier: 0SCvbw5p8yy5uNnDdQjN/UMJ84WMVAkKE92NJKO0GTk=
Subject key identifier: 01:DA:9F:FB:43:04:D9:8A:8D:F0:7F:FA:07:86:AC:82:74:E8:01:46
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 019CB02F2A470520DFDA6F98034D1F5F6D8E
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Adqf-0ME2YqN8H_6B4asgnToAUY.roa
Signing time: Mon 02 Mar 2026 20:13:26 +0000
ROA not before: Mon 02 Mar 2026 20:13:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205775
IP address blocks: 195.10.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:2f:2a:47:05:20:df:da:6f:98:03:4d:1f:5f:6d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Mar 2 20:13:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01da9ffb4304d98a8df07ffa0786ac8274e80146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:49:26:99:0e:7d:a4:72:5f:11:ff:0a:11:
a8:1b:31:95:b4:3d:f3:98:82:47:09:f8:98:4f:82:
94:0f:e8:b3:34:44:19:5f:b4:90:d8:7b:a3:ea:d3:
8d:77:a8:24:d3:e4:ff:4f:02:4d:cb:a6:4e:be:31:
6c:74:ba:21:3d:13:de:75:01:51:38:c7:2d:4a:7b:
77:49:59:a9:bb:04:ff:af:10:52:94:12:db:8e:fd:
b0:3a:a9:0a:89:93:e6:41:b7:21:92:2d:b5:fe:d7:
66:56:d7:b1:07:d5:78:2a:5d:b1:09:8e:1a:17:a1:
eb:df:44:5f:8f:25:b5:6c:7a:95:29:46:ee:e0:8a:
0d:a3:5f:6b:a4:1a:73:b0:6a:29:2c:1f:90:e1:08:
5e:a5:8f:c3:26:4d:e6:8c:6f:67:e7:45:61:3c:cb:
6c:5c:34:95:d1:3a:5b:62:1a:41:ed:1a:25:62:e9:
a2:13:80:59:e8:01:a2:f8:8e:c1:15:ea:a5:8d:54:
53:ce:c5:99:5e:e8:df:e0:29:e6:1a:57:b1:c5:33:
a5:2a:69:ab:94:0d:42:67:b2:c7:46:8b:ac:88:2f:
40:5d:ba:3b:21:c4:84:b7:ff:83:1e:15:81:a5:b1:
44:50:ab:12:23:c3:19:54:f7:0d:7c:95:f9:45:f2:
05:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DA:9F:FB:43:04:D9:8A:8D:F0:7F:FA:07:86:AC:82:74:E8:01:46
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Adqf-0ME2YqN8H_6B4asgnToAUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.205.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:aa:97:8a:7f:a9:2f:2b:c8:c0:9a:ef:f0:2e:56:55:47:34:
a5:1a:9f:36:3a:b1:98:e1:a7:d9:0a:b4:a7:cc:87:ce:41:68:
94:4f:da:3e:c7:34:e2:34:f9:4a:1d:c3:9d:23:32:3c:76:79:
97:ae:c8:70:9c:8c:c3:e7:70:ba:dc:9a:7d:fa:bd:ef:cb:f1:
c8:fa:e3:58:0c:75:5a:86:3a:75:a2:37:88:ab:da:d1:b8:03:
15:39:87:c1:e7:11:4c:e3:34:92:29:0b:17:6c:27:9a:c1:66:
5c:7f:91:6e:92:2e:4e:b3:7b:49:86:12:56:5d:01:4d:70:d3:
e4:5c:7f:8f:4a:6a:2a:30:db:f3:e7:8e:e1:2f:b2:23:0c:23:
56:85:84:07:80:40:b6:80:13:13:dc:f8:e8:ff:fc:39:83:b6:
3b:fc:c0:63:76:94:f2:91:4c:8b:61:b0:88:9b:ee:69:b3:59:
7c:43:65:0d:9c:33:10:c9:2b:9d:bb:e7:85:f3:44:d0:13:8c:
16:27:d0:da:87:26:f1:e5:3a:22:41:41:16:93:bd:eb:6a:51:
6f:35:f8:07:a2:37:c0:85:5e:9e:dc:f8:86:60:07:af:09:0b:
9e:20:86:52:3d:ca:da:53:d2:60:bc:83:5c:78:b1:45:fa:29:
89:c1:c9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:14:07 2026 by rpki-client