Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/AIs-v4MTJP3X4O8YQJnAripw4vs.roa
File: AIs-v4MTJP3X4O8YQJnAripw4vs.roa (raw, json)
Hash identifier: kHs1izlvzimCPZa6IfF/iyB6cbHIdll4P1d4fiptxlM=
Subject key identifier: 00:8B:3E:BF:83:13:24:FD:D7:E0:EF:18:40:99:C0:AE:2A:70:E2:FB
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 01A023E16242200A7524EB6C1238A67B1ECA
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/AIs-v4MTJP3X4O8YQJnAripw4vs.roa
Signing time: Fri 21 Aug 2026 10:32:48 +0000
ROA not before: Fri 21 Aug 2026 10:32:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201097
IP address blocks: 78.153.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:e1:62:42:20:0a:75:24:eb:6c:12:38:a6:7b:1e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Aug 21 10:32:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=008b3ebf831324fdd7e0ef184099c0ae2a70e2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:f0:54:a4:c6:93:e5:bf:2b:74:cc:88:60:
81:a4:a8:04:80:84:a9:2c:4d:c0:f8:13:27:ac:c8:
e1:5e:63:86:f3:08:3e:0a:85:a1:ff:9d:ec:4a:39:
85:fa:3b:28:73:ec:24:14:77:df:77:ea:12:6d:f7:
bc:2d:44:5c:93:39:6b:30:4c:6a:6f:7c:6a:bf:b7:
89:d8:ef:44:28:0c:50:22:57:37:e4:e8:55:69:7f:
c0:fb:3c:66:b3:7a:af:b2:71:85:4e:c2:82:1c:1a:
8c:1a:a4:62:be:5b:ec:c9:ef:a8:ec:68:6b:ef:a9:
60:b6:1c:0d:20:25:75:b8:c7:fe:4b:f3:c1:cf:8b:
03:57:44:b2:32:55:61:d3:15:17:12:0f:40:be:98:
87:61:d3:77:13:1d:0a:7d:b0:b9:d8:cb:a6:44:92:
bc:75:4b:61:4d:77:7e:ba:10:fa:cc:fc:ef:0d:9c:
d6:ae:3a:a8:74:97:9e:9b:12:f2:d0:fa:1e:f3:d2:
81:cb:b0:44:2f:d5:64:f8:6b:40:e1:d1:24:2d:c6:
31:b5:c8:9c:92:f8:cc:08:3c:3d:48:ea:ae:f3:d7:
d8:01:c0:43:31:1d:05:2d:20:d6:87:df:f2:32:68:
4b:4d:13:21:95:20:13:50:50:06:c3:96:b4:99:fd:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8B:3E:BF:83:13:24:FD:D7:E0:EF:18:40:99:C0:AE:2A:70:E2:FB
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/AIs-v4MTJP3X4O8YQJnAripw4vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.136.0/24
Signature Algorithm: sha256WithRSAEncryption
82:bb:cf:43:ef:32:d3:82:01:56:c1:e8:28:8f:b4:89:36:40:
8a:95:66:02:d4:d5:3c:39:49:fc:d7:96:bc:61:09:83:a1:95:
0f:49:8e:c7:41:f4:5a:f8:e2:8b:d6:80:3d:10:cb:06:bb:97:
6d:79:fc:2d:16:84:33:87:b3:d2:75:de:65:18:10:df:92:fa:
4c:41:4a:89:1e:bd:9d:bd:1a:a4:7e:c0:13:84:ac:dc:6c:5d:
c9:14:eb:ba:05:ce:30:53:fb:4e:10:59:47:f2:4d:0f:3b:6d:
d5:8b:1e:a4:84:49:d5:15:3d:14:d5:b8:62:fe:8a:7c:91:c6:
44:84:67:fa:ef:fe:09:cb:e5:1e:a6:d5:a6:4a:57:28:32:94:
46:18:38:bf:c4:bd:41:78:9c:69:b7:1c:c5:a9:8a:15:08:d4:
3f:5e:fc:34:ba:71:14:b5:56:cc:75:0c:db:3c:70:5d:bd:a7:
a3:6d:2d:d8:f3:7c:63:4b:00:a2:92:a8:4a:ad:4c:cc:9e:49:
b0:2d:d1:65:fd:08:f7:92:f4:1d:45:58:be:60:d7:09:83:b4:
1d:b4:a1:03:dd:f6:f0:bf:d9:fb:c9:7f:eb:d9:9b:96:70:64:
91:89:5a:5f:b9:24:22:70:ac:50:fa:ec:78:a7:4a:92:02:a1:
f2:eb:32:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:27:01 2026 by rpki-client