Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/AYoaZiYET1JD-h_2dtD1QOXzbHg.roa
File: AYoaZiYET1JD-h_2dtD1QOXzbHg.roa (raw, json)
Hash identifier: F7sxOGj2rhKSFsgxenA3YqyomVwDaXu5bnGPSBV0WZ0=
Subject key identifier: 01:8A:1A:66:26:04:4F:52:43:FA:1F:F6:76:D0:F5:40:E5:F3:6C:78
Certificate issuer: /CN=f3751cf8c3a2d36c9744c96519899945ac607820
Certificate serial: 019FCE15FD8AAAF46693B968A0D5FA6380E2
Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/AYoaZiYET1JD-h_2dtD1QOXzbHg.roa
Signing time: Tue 04 Aug 2026 18:42:55 +0000
ROA not before: Tue 04 Aug 2026 18:42:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48956
IP address blocks: 37.46.13.0/24 maxlen: 24
37.46.14.0/24 maxlen: 24
37.46.15.0/24 maxlen: 24
45.90.0.0/23 maxlen: 24
45.90.0.0/24 maxlen: 24
45.90.1.0/24 maxlen: 24
91.207.52.0/23 maxlen: 24
91.207.52.0/24 maxlen: 24
91.207.53.0/24 maxlen: 24
91.230.42.0/23 maxlen: 24
91.230.42.0/24 maxlen: 24
91.230.43.0/24 maxlen: 24
91.246.104.0/21 maxlen: 24
91.246.104.0/24 maxlen: 24
91.246.105.0/24 maxlen: 24
91.246.106.0/24 maxlen: 24
91.246.107.0/24 maxlen: 24
91.246.108.0/24 maxlen: 24
91.246.109.0/24 maxlen: 24
91.246.110.0/24 maxlen: 24
91.246.111.0/24 maxlen: 24
193.254.238.0/23 maxlen: 24
193.254.238.0/24 maxlen: 24
193.254.239.0/24 maxlen: 24
195.88.114.0/23 maxlen: 24
195.88.114.0/24 maxlen: 24
195.88.115.0/24 maxlen: 24
2a06:4640::/32 maxlen: 32
2a06:4641::/32 maxlen: 32
2a06:4642::/32 maxlen: 32
2a06:4646::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:15:fd:8a:aa:f4:66:93:b9:68:a0:d5:fa:63:80:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820
Validity
Not Before: Aug 4 18:42:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=018a1a6626044f5243fa1ff676d0f540e5f36c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:05:b6:f9:e2:40:f2:6b:82:c7:9d:3d:80:cf:
b4:ad:ff:e0:ba:7a:26:a0:58:6e:dc:bd:a4:87:0a:
fa:b4:fc:c2:4f:68:7a:32:b2:05:52:1b:8f:bf:99:
b7:97:a1:1d:c1:d3:c0:e1:64:b1:48:b1:f9:bd:11:
64:09:d6:45:28:8d:10:cf:e7:0e:20:a4:51:32:f3:
57:c7:97:62:93:76:17:c0:aa:a0:3e:cf:93:26:c4:
9b:e4:c5:76:df:1a:54:27:f0:5c:4e:03:af:b3:01:
b4:41:cb:30:8b:45:12:69:77:c3:a3:91:db:fb:a2:
df:db:05:da:28:88:b7:ff:36:4f:af:96:88:02:bb:
b9:c8:ba:27:f2:b5:26:7b:8f:01:e0:58:6f:ee:bb:
37:bc:9c:e8:7e:d0:81:3d:40:9c:df:96:c6:45:1c:
5c:e7:e9:b4:b8:f5:8d:eb:0c:4d:9d:4d:a6:c2:c0:
e9:45:86:7e:58:e9:53:f5:ac:23:3a:20:bf:7d:bb:
d0:d2:27:15:bb:05:94:a2:2b:8b:50:7c:d4:fe:85:
d2:3b:4f:0d:2b:be:7c:67:de:91:fc:ab:92:2d:f8:
4f:f0:3d:29:b4:fd:d5:a4:fe:dd:df:69:61:a3:81:
39:2a:bf:53:38:c4:27:8d:62:0b:52:be:bb:ad:39:
a3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8A:1A:66:26:04:4F:52:43:FA:1F:F6:76:D0:F5:40:E5:F3:6C:78
X509v3 Authority Key Identifier:
keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/AYoaZiYET1JD-h_2dtD1QOXzbHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.13.0-37.46.15.255
45.90.0.0/23
91.207.52.0/23
91.230.42.0/23
91.246.104.0/21
193.254.238.0/23
195.88.114.0/23
IPv6:
2a06:4640::-2a06:4642:ffff:ffff:ffff:ffff:ffff:ffff
2a06:4646::/32
Signature Algorithm: sha256WithRSAEncryption
ca:cb:01:4e:8c:14:4d:70:2c:af:82:b1:d4:10:46:1e:d7:3d:
e6:77:3b:37:0a:c0:d2:9d:21:eb:7c:18:df:48:b6:a3:f1:f0:
25:19:d2:5d:03:74:03:5c:ee:69:e3:e3:89:c0:70:5e:d2:59:
de:19:20:6f:88:d9:d5:ae:a8:85:8c:84:4e:a7:88:bb:52:92:
17:a0:dd:36:9a:2f:69:ef:92:94:93:8f:c0:eb:6b:b4:bb:9f:
3e:6d:8d:a2:4d:74:3b:f3:27:e0:46:bf:35:5c:29:5d:86:18:
a8:3f:3e:ea:04:18:6a:37:dc:fe:30:3f:f5:57:84:94:82:e2:
0b:3c:f1:33:63:de:13:e4:39:91:a4:85:90:eb:75:d2:34:fe:
af:fc:fd:33:23:de:7a:e0:ee:71:1e:3e:d3:ba:54:dc:73:e7:
c7:3c:f6:47:f8:7a:3a:2b:8f:f8:e4:76:d3:93:77:0a:8c:b4:
21:28:78:45:a0:fa:80:e2:de:dc:76:01:a3:2a:89:37:58:e2:
77:e0:94:98:37:f2:6f:60:c0:fc:83:bf:dc:f9:61:3d:23:cd:
6a:c5:6c:fc:51:0d:47:d2:7e:93:b4:dd:a2:14:25:72:80:9f:
8c:07:95:8e:cd:7e:60:a3:d5:78:85:8b:ff:ce:03:57:16:01:
84:01:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:41:46 2026 by rpki-client