Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/aG9W6j5KtXqHylusOag-9kZmDkU.roa
File: aG9W6j5KtXqHylusOag-9kZmDkU.roa (raw, json)
Hash identifier: 8wy/QUmJbzK5IUzl7twQeHy1b4/h9K/7cnOoHkJ+i8U=
Subject key identifier: 68:6F:56:EA:3E:4A:B5:7A:87:CA:5B:AC:39:A8:3E:F6:46:66:0E:45
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 01A136A257531EADEAF7A2A55625700A6A16
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/aG9W6j5KtXqHylusOag-9kZmDkU.roa
Signing time: Tue 13 Oct 2026 18:59:31 +0000
ROA not before: Tue 13 Oct 2026 18:59:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206739
IP address blocks: 194.110.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:a2:57:53:1e:ad:ea:f7:a2:a5:56:25:70:0a:6a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Oct 13 18:59:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=686f56ea3e4ab57a87ca5bac39a83ef646660e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:7e:c5:ef:e8:d5:2d:8f:4d:5d:7c:47:b3:
ca:b3:07:77:88:0f:c1:e7:0c:af:4d:4e:fb:3c:1b:
53:d6:ef:cb:ff:22:e5:05:d4:aa:d5:1c:64:43:57:
61:6d:e4:6d:bd:0f:58:bc:25:e5:94:37:ae:f7:16:
d7:05:f3:57:21:c9:4a:37:77:cd:df:0d:81:fb:1f:
19:2c:6c:3f:b7:5d:93:f5:9a:29:11:f3:00:5f:7a:
d7:ba:5d:e8:91:c6:97:e6:15:2f:c2:6a:fa:ba:64:
23:ba:a6:69:ec:01:72:77:7f:c8:12:ae:3c:df:80:
7a:c5:d0:76:d9:3d:cf:76:16:11:72:71:75:ab:6f:
13:44:21:99:a7:55:87:b3:ac:6b:24:38:55:3c:ec:
13:fd:16:de:e9:e0:0a:a2:ec:f3:43:68:68:7b:8d:
cc:e3:8e:ce:01:e1:4a:8a:7c:58:0d:e9:b0:6c:f3:
54:79:00:cb:b9:38:07:30:53:45:63:38:d6:ec:a2:
60:36:c8:6f:2c:34:99:6e:31:3e:e1:a0:f6:cc:1f:
21:73:0b:c5:58:5c:bf:c9:45:8a:0d:ca:12:dc:92:
09:96:e8:43:7d:64:b8:b3:7c:ae:57:80:aa:8e:4c:
9e:d6:ea:88:76:e3:ca:d1:fb:26:a4:f7:23:3b:e0:
28:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6F:56:EA:3E:4A:B5:7A:87:CA:5B:AC:39:A8:3E:F6:46:66:0E:45
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/aG9W6j5KtXqHylusOag-9kZmDkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.168.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:73:33:78:8d:96:a2:87:b4:9d:a8:91:08:dd:c6:6d:ce:cc:
e1:8a:f6:2e:c0:25:70:08:83:49:17:b1:e5:45:ee:a6:1d:c5:
88:27:2e:dc:c6:19:6c:64:80:fd:d8:90:02:24:88:1b:4f:3e:
e7:13:af:1c:31:7e:90:9c:88:54:ed:50:74:13:04:a5:04:87:
ab:44:9d:b9:f7:37:05:a5:cc:4c:29:19:5d:e4:55:2f:2d:32:
f4:92:fa:39:80:6e:b0:0b:e8:72:1b:dc:ca:3f:c3:27:fe:f7:
f1:19:7b:9c:d1:45:9d:04:39:f0:d6:1d:59:eb:f7:7e:84:2e:
f0:e5:71:20:89:ec:ac:d9:df:b0:ef:73:5e:9b:97:e9:53:1b:
16:1b:97:06:16:59:10:3a:10:7b:10:ce:f9:eb:f3:20:11:c8:
09:04:14:f0:d9:87:b6:7e:c9:e6:a9:81:68:7e:10:b3:da:f0:
fc:7a:05:10:50:02:e7:a9:ea:c5:82:07:21:00:0e:72:b3:80:
49:e4:23:b6:c2:c1:c5:ae:27:ea:82:3a:a9:78:5c:7b:8b:03:
6e:ae:e5:ad:93:0b:8c:3e:d2:5b:c1:a7:94:6d:04:85:5c:ed:
96:68:12:d1:f7:b0:69:ba:c2:2a:e3:2d:4c:e3:cf:7c:a6:5f:
0c:e2:da:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:26:32 2026 by rpki-client