Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/964mey1ll-AqSTVqRVFMkmj9R7A.roa
File: 964mey1ll-AqSTVqRVFMkmj9R7A.roa (raw, json)
Hash identifier: /W32m1FUs/kl31E7I7cB+ItUJPiLNdIiU90WMvkjKtY=
Subject key identifier: F7:AE:26:7B:2D:65:97:E0:2A:49:35:6A:45:51:4C:92:68:FD:47:B0
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01A018DD3E8DBCAFE90E37042422910A7D72
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/964mey1ll-AqSTVqRVFMkmj9R7A.roa
Signing time: Wed 19 Aug 2026 07:12:27 +0000
ROA not before: Wed 19 Aug 2026 07:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8342
IP address blocks: 185.103.166.0/24 maxlen: 24
194.4.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:dd:3e:8d:bc:af:e9:0e:37:04:24:22:91:0a:7d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Aug 19 07:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7ae267b2d6597e02a49356a45514c9268fd47b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:22:76:41:8f:a1:cb:08:82:44:d6:c2:63:
2d:e8:04:f5:28:4f:df:b1:46:4b:f7:00:3e:63:be:
a3:fb:e6:c7:91:20:98:94:0f:66:50:d5:97:f7:b4:
c2:87:30:79:5b:89:57:03:18:c9:99:7d:73:25:9e:
98:be:67:9e:38:dc:3b:aa:fc:5e:ab:29:b3:47:19:
b3:f3:74:35:6e:28:ca:e7:2f:a1:74:cd:b7:2d:52:
bc:1d:ec:ac:92:73:06:be:a9:e2:4e:bf:a8:c5:86:
54:e4:60:a5:c1:fc:7e:2e:f9:17:43:e0:2c:db:ba:
4d:c5:b3:1d:c5:c5:a6:e3:65:bd:34:95:6d:f3:1e:
16:d4:5a:04:2a:e8:97:81:ed:61:7e:9b:e1:b1:dd:
b7:71:e2:53:21:e7:73:3a:5c:3f:71:f8:0d:55:4c:
45:ff:a3:f9:07:a5:bc:11:51:22:f2:a5:ac:b1:6f:
70:87:b3:3d:55:c5:17:0d:d7:e2:3e:b9:bd:ac:28:
78:53:c5:4e:23:b1:c7:27:55:16:5a:88:8f:7f:bb:
ad:64:e8:b8:4c:2d:ae:5c:a3:45:4f:35:c3:51:24:
59:dc:77:88:74:1f:8d:e3:85:36:7d:b1:96:90:e1:
85:46:b3:70:28:55:b0:0e:f7:d4:d2:10:17:6e:c5:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AE:26:7B:2D:65:97:E0:2A:49:35:6A:45:51:4C:92:68:FD:47:B0
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/964mey1ll-AqSTVqRVFMkmj9R7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.166.0/24
194.4.48.0/24
Signature Algorithm: sha256WithRSAEncryption
63:1d:42:cc:1f:d8:8f:b4:4f:17:15:6b:9e:4f:59:03:7a:fe:
55:90:e8:2b:94:64:c2:2b:7d:4c:74:97:b2:08:ca:08:01:f2:
fc:4c:7a:4b:ca:9c:25:5b:a1:c2:43:bf:b9:c8:a0:ea:34:06:
0f:31:ec:ac:97:d5:3e:a5:99:07:c0:e9:f8:53:2b:49:06:e1:
dd:d3:67:bf:1c:a6:ac:0d:82:11:0b:33:33:f2:c1:df:c6:af:
61:e6:96:4c:44:2c:8d:1f:38:df:5e:c3:6e:a3:2c:4a:e9:ec:
d7:a2:e6:4b:3c:69:d1:c2:e7:7b:da:e9:f9:4d:1b:ce:f8:50:
2a:8a:68:cf:ea:a8:cf:05:d3:a3:72:e2:6f:84:47:bc:f0:d0:
39:cb:a0:ab:84:a8:c6:60:1f:cf:19:65:b7:b4:48:8a:4d:ed:
81:e1:24:4b:91:0d:0c:83:82:80:74:9d:bb:53:7d:b5:57:a0:
2e:e1:7e:20:72:ff:e4:d7:b9:5d:9d:f8:31:9a:eb:4a:c8:a0:
0f:26:45:09:e1:9d:3c:43:46:16:01:91:5b:53:1c:54:ba:99:
bf:73:ce:07:23:7e:7f:ba:07:60:bf:0a:54:65:e1:38:f4:91:
47:8e:16:e5:64:57:91:3e:ec:00:e9:86:de:e0:59:c0:db:be:
cb:7f:16:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:18 2026 by rpki-client