Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/aGXmqEebMCQFY0ulmO_5ASNdi1k.roa
File: aGXmqEebMCQFY0ulmO_5ASNdi1k.roa (raw, json)
Hash identifier: hYurKQHH3rt5VdpzNspB+yj11+qCVo7mk3/5QUwtvfw=
Subject key identifier: 68:65:E6:A8:47:9B:30:24:05:63:4B:A5:98:EF:F9:01:23:5D:8B:59
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F236946A926AA72719BECB55C2E9D2417
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/aGXmqEebMCQFY0ulmO_5ASNdi1k.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58126
IP address blocks: 46.174.200.0/22 maxlen: 22
176.113.176.0/22 maxlen: 22
176.116.231.0/24 maxlen: 24
176.121.104.0/22 maxlen: 22
176.124.172.0/22 maxlen: 22
192.162.186.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:46:a9:26:aa:72:71:9b:ec:b5:5c:2e:9d:24:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6865e6a8479b302405634ba598eff901235d8b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:5f:e5:bb:25:86:2c:63:5f:c3:78:e2:d5:
8a:8a:ac:2d:c0:6f:ed:78:a2:75:07:28:76:ae:df:
f1:f2:c7:db:bb:79:2a:06:ce:b3:bd:e1:7e:63:d7:
7c:0f:1a:94:52:b8:cf:09:f5:67:1b:bd:b4:5a:e8:
d0:7a:ea:3c:7d:63:92:2d:8a:60:14:e1:8a:f3:30:
68:ba:a0:cb:47:5d:8e:56:f2:26:62:50:ad:4e:13:
b6:1d:65:59:33:eb:06:9c:91:57:3a:79:bb:c7:2e:
e1:77:d0:9a:f9:50:90:d1:32:2e:2d:be:c0:64:46:
49:ba:1b:28:bb:30:68:a5:dc:3b:57:79:9c:56:33:
27:43:50:91:8a:7e:b9:16:f9:6e:eb:5a:e0:83:92:
95:28:f6:34:bb:84:6c:65:9b:71:73:31:44:36:48:
29:00:0a:b5:ba:15:b8:13:e1:41:b9:5a:4f:d7:f1:
3f:bb:ea:ef:32:b2:5b:d1:b8:70:b3:d8:20:45:de:
63:1c:27:17:aa:41:c6:93:6d:40:50:b4:f9:8c:33:
f5:9e:98:71:3d:76:40:32:76:7b:b0:dc:6d:3b:61:
0f:b4:26:48:8e:2b:ad:bd:a9:54:41:ae:40:ce:1f:
87:c8:2d:0d:2f:d7:c2:ce:d8:5b:98:7a:82:9b:ed:
7b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:65:E6:A8:47:9B:30:24:05:63:4B:A5:98:EF:F9:01:23:5D:8B:59
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/aGXmqEebMCQFY0ulmO_5ASNdi1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.200.0/22
176.113.176.0/22
176.116.231.0/24
176.121.104.0/22
176.124.172.0/22
192.162.186.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:90:3f:0b:f1:50:5b:a2:15:fc:13:a8:ab:b2:a8:e1:76:42:
8d:e1:14:6b:f8:1e:ef:5f:5b:19:e0:1f:4b:d5:1d:d2:99:ca:
7a:1e:7c:4d:32:00:9e:ca:3a:8f:0b:ca:52:94:37:be:b9:13:
92:13:e7:97:40:19:8b:19:30:bb:ef:f6:d0:fd:0d:93:db:6f:
d9:fa:a4:db:19:fb:28:b8:e1:2f:55:11:54:f2:68:8f:1c:95:
83:ca:34:ae:11:86:2c:ab:72:c3:31:46:80:4f:fa:1b:ba:8a:
9f:da:ff:33:2a:2f:43:7a:f1:a3:e9:97:8c:c7:be:72:30:87:
d3:f9:3b:28:5d:c8:20:52:82:9f:7f:10:14:27:ef:4d:14:44:
b5:dd:5f:0c:d6:85:cc:10:61:8b:ff:cb:2f:5d:db:07:4c:91:
e3:16:42:b0:5f:17:21:ec:75:91:65:d2:3a:ae:b1:49:d1:01:
d5:6d:4b:76:64:10:f4:26:23:37:a2:1a:35:fa:e0:25:6a:d5:
9d:29:18:40:93:f2:66:de:d2:83:46:f2:27:10:a6:be:3a:bc:
09:37:5b:1d:0f:cf:3f:1b:7b:c3:db:04:4d:bb:60:a6:cd:8a:
44:a1:8f:68:99:45:cc:4d:91:a1:a9:1d:8a:b4:68:85:21:72:
04:be:1c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:26 2026 by rpki-client