Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/cab51f-8fd4-41f7-8f13-a372fba696d3/1/asBzVgLZ02ozFS-WwWgop4qtI0s.roa
File: asBzVgLZ02ozFS-WwWgop4qtI0s.roa (raw, json)
Hash identifier: FYpoTfldSZHpBsVnN0R3027DuxogFmo1nX4UDqfcqlY=
Subject key identifier: 6A:C0:73:56:02:D9:D3:6A:33:15:2F:96:C1:68:28:A7:8A:AD:23:4B
Certificate issuer: /CN=1a515f311562004fd6ce6bdc3907d0df2a0af5c7
Certificate serial: 01A0E6B22831542EFB78F3DCB1AFFF98E9B4
Authority key identifier: 1A:51:5F:31:15:62:00:4F:D6:CE:6B:DC:39:07:D0:DF:2A:0A:F5:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFfMRViAE_WzmvcOQfQ3yoK9cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/cab51f-8fd4-41f7-8f13-a372fba696d3/1/asBzVgLZ02ozFS-WwWgop4qtI0s.roa
Signing time: Mon 28 Sep 2026 06:27:10 +0000
ROA not before: Mon 28 Sep 2026 06:27:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15694
IP address blocks: 194.50.83.0/24 maxlen: 24
195.137.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/cab51f-8fd4-41f7-8f13-a372fba696d3/1/GlFfMRViAE_WzmvcOQfQ3yoK9cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/cab51f-8fd4-41f7-8f13-a372fba696d3/1/GlFfMRViAE_WzmvcOQfQ3yoK9cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlFfMRViAE_WzmvcOQfQ3yoK9cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:b2:28:31:54:2e:fb:78:f3:dc:b1:af:ff:98:e9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a515f311562004fd6ce6bdc3907d0df2a0af5c7
Validity
Not Before: Sep 28 06:27:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ac0735602d9d36a33152f96c16828a78aad234b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:e9:c3:d4:84:3c:b3:da:fc:28:d8:30:76:
b4:a9:35:d0:bd:8e:52:b4:c2:a2:2b:36:8e:fb:69:
9f:9c:4f:6b:e3:ea:4a:a0:66:39:eb:95:ec:65:fe:
96:9b:5e:ea:b0:26:0b:f6:30:12:4b:fc:28:62:c5:
ad:82:b3:f3:63:7d:51:b8:5f:44:fb:34:10:67:b9:
bc:3a:0e:7a:dd:67:a1:f9:1c:a0:15:51:ae:79:ac:
e1:77:b1:5c:80:6e:b6:dd:80:82:ae:14:82:c3:64:
e4:79:9a:21:43:a4:8d:c4:ee:c3:71:72:2c:5a:bb:
21:9c:bd:fc:a3:d7:7d:25:eb:59:e6:1b:d2:f2:33:
9e:25:7e:c4:3f:00:65:f9:de:b4:31:3e:b7:2c:fe:
b2:53:fe:db:1a:35:77:1a:9b:b5:b3:58:73:3d:a4:
08:85:40:d9:d3:13:e5:a9:c2:a0:da:94:49:ea:07:
b7:cc:42:97:bb:cb:82:84:44:00:3a:91:8d:1f:6f:
f0:09:24:f4:91:57:f9:03:c3:23:90:e8:87:15:66:
68:b6:a8:77:ef:f1:d8:f2:11:0b:e1:6b:f9:fc:a7:
79:fd:80:a1:71:54:7c:87:f9:35:6b:97:10:c2:43:
de:83:b4:2e:ec:91:c1:96:ee:df:37:42:44:15:d3:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C0:73:56:02:D9:D3:6A:33:15:2F:96:C1:68:28:A7:8A:AD:23:4B
X509v3 Authority Key Identifier:
keyid:1A:51:5F:31:15:62:00:4F:D6:CE:6B:DC:39:07:D0:DF:2A:0A:F5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFfMRViAE_WzmvcOQfQ3yoK9cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cab51f-8fd4-41f7-8f13-a372fba696d3/1/asBzVgLZ02ozFS-WwWgop4qtI0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cab51f-8fd4-41f7-8f13-a372fba696d3/1/GlFfMRViAE_WzmvcOQfQ3yoK9cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.83.0/24
195.137.189.0/24
Signature Algorithm: sha256WithRSAEncryption
26:03:50:b5:5f:3f:0b:d7:22:9d:e0:e8:d7:16:d5:d4:5d:90:
53:ab:b9:3f:78:7f:23:ce:67:50:3f:a0:12:7d:3f:cd:e7:a0:
f1:15:c5:d5:51:57:29:c0:9a:d0:e3:9d:87:b3:cc:f8:74:6a:
e7:df:00:3b:23:6c:05:32:cc:bb:fc:15:93:33:7f:4b:1c:ab:
c5:b0:bc:90:d1:01:27:ce:88:1b:1e:b9:b1:ab:ef:bb:bf:27:
13:9e:09:ca:9f:8a:de:2b:22:42:9e:2a:a6:96:5e:e1:98:c7:
da:96:98:74:46:82:f3:f0:0b:3c:fd:75:bc:7e:78:31:11:5c:
28:06:f2:3a:7c:8e:fb:7e:54:84:e8:f5:8f:db:f6:84:d4:c1:
27:9e:79:a8:44:99:5a:bb:51:80:03:78:24:64:18:ec:15:23:
68:4b:0b:c2:ec:62:bc:05:6f:60:83:47:7d:d4:81:b4:01:1b:
c6:5b:72:76:ce:ac:50:30:ef:b6:9c:fe:41:ce:9c:5c:55:66:
1c:b1:a2:4e:41:ba:0a:fe:a9:e2:27:c0:30:f5:ef:4c:16:bc:
4b:5d:ca:11:90:2a:ca:71:6e:83:dd:c6:09:b9:d4:81:43:5a:
75:02:47:22:98:49:c9:7b:2b:e3:33:02:d1:e6:34:1b:97:3f:
9a:27:12:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:19:33 2026 by rpki-client