Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Asl0EvqZ36IAd1flftMYrv65YqQ.roa
File: Asl0EvqZ36IAd1flftMYrv65YqQ.roa (raw, json)
Hash identifier: yvaZSdtMb4EXuPrCVAEgVufTQRi5+ZS+3bmIzzhd+Z8=
Subject key identifier: 02:C9:74:12:FA:99:DF:A2:00:77:57:E5:7E:D3:18:AE:FE:B9:62:A4
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019E412F5E24FE3260BC9F306BAC4CDCA9F0
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Asl0EvqZ36IAd1flftMYrv65YqQ.roa
Signing time: Tue 19 May 2026 17:01:23 +0000
ROA not before: Tue 19 May 2026 17:01:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43094
IP address blocks: 194.114.144.0/24 maxlen: 25
194.114.144.128/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:41:2f:5e:24:fe:32:60:bc:9f:30:6b:ac:4c:dc:a9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: May 19 17:01:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02c97412fa99dfa2007757e57ed318aefeb962a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:26:84:9f:cb:3a:8d:8f:44:79:45:ef:7f:
97:64:57:4d:a2:ae:eb:d5:70:7d:05:6b:c2:84:57:
63:f9:2c:70:1b:44:a9:c2:53:b1:67:ce:3a:37:16:
28:d1:29:fe:2d:42:b9:a2:01:82:3d:0a:56:dd:73:
0a:0c:9d:a3:db:c2:3f:f3:a4:0b:b5:06:a7:f1:57:
94:46:06:5e:81:16:6e:0b:7e:d9:31:d5:ad:90:47:
b5:6b:5b:b1:86:3d:08:1e:9a:b8:cc:8d:2b:5d:a6:
81:7d:f3:45:56:fc:fd:fe:d3:11:e2:fd:9a:e3:50:
23:7b:30:8c:70:de:9a:76:91:c6:8d:1b:c3:08:4a:
e3:5b:0f:93:af:6f:07:38:65:0c:f0:3d:a1:a6:76:
6a:8e:c6:6d:52:86:5f:92:d2:f5:31:be:ae:f1:94:
49:62:d8:02:82:99:88:c6:05:cb:2f:ee:45:65:b5:
54:b6:20:a7:cb:13:6e:0a:0c:49:73:83:45:99:12:
bb:40:fe:15:c3:b7:1b:f7:f5:d4:26:f7:59:34:77:
2b:93:35:64:cd:cd:7a:f6:01:73:f2:ba:9f:0b:86:
32:74:8f:9b:ea:72:58:2d:71:32:6d:8b:14:a9:7b:
d3:dc:76:1c:a6:76:e8:84:bc:e6:78:e1:c9:cc:14:
c8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C9:74:12:FA:99:DF:A2:00:77:57:E5:7E:D3:18:AE:FE:B9:62:A4
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Asl0EvqZ36IAd1flftMYrv65YqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.114.144.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b8:a6:a8:f6:3b:c8:00:37:d1:82:96:ae:c2:1f:33:09:8b:
e8:75:e1:d5:6c:3e:7c:af:12:d8:5e:54:53:4d:e5:56:2e:24:
35:35:8e:77:f9:0d:24:13:c8:bb:88:31:df:d9:75:e9:25:54:
49:5f:1e:37:30:8a:c6:02:40:a0:b2:82:19:92:86:59:8d:6c:
de:cf:7d:56:ff:2d:e0:df:1e:eb:79:2f:76:62:5d:f2:1c:0d:
6c:23:d5:40:29:21:f4:9d:b7:29:21:5e:8e:c0:28:f3:11:ba:
9a:72:73:59:e5:f2:4a:22:00:f9:7d:6e:42:9d:f6:54:a2:b3:
58:48:44:90:95:e6:1d:85:0d:1c:c1:1c:45:be:5f:87:37:47:
bc:cd:44:25:57:f0:3f:9f:22:ec:a6:83:fa:6f:14:42:e2:5b:
8f:a0:28:6f:b4:bc:8f:9e:63:ae:fb:5c:cc:80:74:04:2b:80:
16:03:1f:6d:71:6f:b9:6c:62:ec:6d:6b:10:73:75:f5:c4:6f:
f1:c8:82:ad:19:82:a2:c6:c7:d2:12:79:b4:36:41:f2:11:91:
bb:97:4c:a8:e8:f5:d3:f6:24:dd:4a:60:e5:77:e9:31:f9:f2:
dd:b3:22:dd:ba:ab:8b:c2:5f:5e:d3:7a:62:48:7d:c8:5c:30:
d7:c5:fd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:53 2026 by rpki-client