Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/aod_DktF53Tt-zNeeRQupJVLMQ8.roa
File: aod_DktF53Tt-zNeeRQupJVLMQ8.roa (raw, json)
Hash identifier: yB6sdIgHjKBnXT3MB4XSMfE1vvY6rKhZAhejibcjeBs=
Subject key identifier: 6A:87:7F:0E:4B:45:E7:74:ED:FB:33:5E:79:14:2E:A4:95:4B:31:0F
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A15E05D7C66C479CA846CF615A3671B072
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/aod_DktF53Tt-zNeeRQupJVLMQ8.roa
Signing time: Wed 21 Oct 2026 10:33:23 +0000
ROA not before: Wed 21 Oct 2026 10:33:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218568
IP address blocks: 185.98.63.0/24 maxlen: 24
193.160.140.0/24 maxlen: 24
193.160.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:05:d7:c6:6c:47:9c:a8:46:cf:61:5a:36:71:b0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 21 10:33:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a877f0e4b45e774edfb335e79142ea4954b310f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:4f:9c:9b:a3:74:40:a6:65:2b:5f:fc:ab:
1a:e1:c8:71:89:52:32:25:9a:35:89:3b:80:df:80:
1b:45:96:18:20:03:0e:75:8b:0f:74:2d:ff:be:d8:
de:ad:7b:51:99:db:26:02:0f:a9:15:72:ff:44:46:
18:f0:b0:cc:90:70:5d:bf:1f:95:4f:b4:92:62:a9:
08:73:58:94:3f:0a:fb:6d:a2:ad:dd:d1:72:79:0e:
b0:d4:48:85:6b:c9:79:b4:31:58:05:12:6a:7d:8e:
98:c5:ea:90:22:b1:3d:06:cd:e6:f9:98:98:4c:b3:
d3:54:50:b3:fc:ba:38:1d:90:6d:58:0b:87:b2:17:
b2:0e:09:7b:d8:18:19:ab:5c:7e:b0:c2:80:2a:3c:
fd:31:0e:e2:59:cf:8c:0e:68:cc:cb:78:6b:35:b5:
4e:79:ef:c4:02:49:7b:f3:1e:e9:8f:b7:c4:dd:31:
7a:58:14:45:2a:69:d2:b6:30:40:cf:aa:93:51:19:
50:14:06:36:99:05:2f:31:bd:8f:34:bb:06:a8:3f:
18:27:7b:7e:7b:0b:23:78:08:a4:60:8c:e3:a7:b5:
fe:1e:f7:e9:83:81:1f:e6:0f:6f:e7:ce:7d:b3:30:
f8:8a:7d:f6:32:f3:e6:93:85:6b:07:5a:be:ae:5a:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:87:7F:0E:4B:45:E7:74:ED:FB:33:5E:79:14:2E:A4:95:4B:31:0F
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/aod_DktF53Tt-zNeeRQupJVLMQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.63.0/24
193.160.140.0/23
Signature Algorithm: sha256WithRSAEncryption
70:c2:a6:da:1e:65:07:fd:40:ad:44:a3:65:98:ab:25:25:fc:
79:13:18:c5:03:95:0f:5c:20:b8:10:a6:7b:4a:f3:c3:30:91:
c0:41:85:07:6f:ed:ea:75:11:c4:9a:bd:4c:a0:ab:6f:f2:3d:
43:3c:01:76:b9:69:05:c5:60:11:48:db:ec:31:c6:d3:d2:b5:
a9:5a:0a:a4:a1:fc:e7:ca:21:af:c9:bc:13:ac:13:60:cf:9d:
f4:df:ab:d2:57:1f:da:8d:d2:90:45:d9:c1:0c:15:61:0b:28:
61:b7:62:6f:64:47:23:e2:78:67:5f:83:94:29:57:c6:7a:fa:
1e:aa:33:4f:10:ec:f6:84:21:26:23:94:61:1e:90:18:76:5d:
fb:d0:48:13:b5:d1:90:f7:22:df:31:2f:40:46:41:4f:17:40:
35:d2:90:84:be:75:0c:4b:ff:68:01:36:ee:52:b2:36:ec:a9:
49:21:d8:f4:56:4e:92:43:d5:81:68:e6:ff:1a:06:9b:9f:39:
62:a4:d7:d2:98:a6:c4:5b:e9:2f:b1:d9:06:54:d5:b6:dd:be:
2d:23:0c:fe:5e:7a:2f:5e:3f:85:89:43:b5:f6:fd:4b:30:be:
e1:ea:52:91:dc:92:09:0b:53:38:70:99:51:77:3b:1c:b8:48:
18:c9:98:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:18:15 2026 by rpki-client