Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/aAsJVr20IPmCcACQyDrc9l7eymA.roa
File: aAsJVr20IPmCcACQyDrc9l7eymA.roa (raw, json)
Hash identifier: jaEjSZ0pIoUcTdvD/xtgqNjoZeLCThwgJ5O00L9VLSM=
Subject key identifier: 68:0B:09:56:BD:B4:20:F9:82:70:00:90:C8:3A:DC:F6:5E:DE:CA:60
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 01A0FB3F8652C61D26E513E9BC25A17A691F
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/aAsJVr20IPmCcACQyDrc9l7eymA.roa
Signing time: Fri 02 Oct 2026 06:13:59 +0000
ROA not before: Fri 02 Oct 2026 06:13:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51765
IP address blocks: 94.26.33.0/24 maxlen: 24
94.26.34.0/24 maxlen: 24
94.26.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:3f:86:52:c6:1d:26:e5:13:e9:bc:25:a1:7a:69:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Oct 2 06:13:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=680b0956bdb420f982700090c83adcf65edeca60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:44:05:63:01:f8:66:98:aa:f7:e2:01:dc:c2:
88:49:8d:6f:40:ea:24:47:1e:6b:ca:3c:a8:7f:81:
e1:cc:df:ae:fb:d6:91:8e:38:ff:d5:5a:13:c3:6a:
96:ff:b1:a5:c2:94:90:c6:6b:79:e0:e3:f9:35:75:
58:f4:09:83:d4:9a:97:73:39:94:8e:65:23:98:9e:
e5:54:2c:3e:f4:52:e1:c5:26:7b:c7:a8:2a:d1:3b:
19:29:5d:15:0f:cc:07:8b:78:f9:58:d5:a0:6b:01:
6b:ca:c3:3a:e0:50:46:6d:b6:3f:a3:0d:55:a5:3e:
71:4d:cb:ff:da:2d:b0:09:8f:1a:2a:66:97:87:62:
82:cd:26:62:07:d4:ce:44:ce:9c:87:f3:26:6a:55:
be:98:f6:ba:4a:75:43:cc:ba:80:2f:17:5e:83:16:
8d:22:1a:8b:01:c7:e9:13:b0:a9:0c:cd:0a:22:92:
55:18:ff:0b:50:4b:4f:de:93:72:a7:14:55:67:7b:
69:08:1c:a0:3f:4c:43:7a:6b:66:b9:ad:5c:f6:1c:
3d:51:cc:e3:e9:c2:34:10:a8:5b:ac:f1:e9:53:49:
2a:04:83:51:cd:72:bd:b2:15:81:70:9d:3b:98:7e:
ec:0e:a8:8f:c1:2a:d4:a2:fb:f2:ef:bb:09:0b:bc:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0B:09:56:BD:B4:20:F9:82:70:00:90:C8:3A:DC:F6:5E:DE:CA:60
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/aAsJVr20IPmCcACQyDrc9l7eymA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.33.0-94.26.34.255
94.26.70.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e1:7d:a4:ec:9a:2f:06:79:e8:e0:e7:d8:c1:65:28:ee:12:
4b:78:ca:8a:47:8b:aa:7a:74:e9:42:1f:ac:3e:88:80:50:cc:
65:26:70:03:bf:3b:fd:a4:2d:5a:a7:95:42:f6:5d:33:db:a8:
77:32:01:a7:4c:ef:25:27:25:f7:f8:ef:19:db:81:1f:48:7e:
5d:a2:ed:99:f5:e4:cb:57:dd:6f:a7:bc:20:47:71:98:fb:f0:
92:05:a7:3a:a0:fb:d7:75:77:82:a0:a9:8b:f1:0a:37:fb:c7:
9f:7e:57:30:0e:14:c8:3f:e9:a2:c1:f0:ea:e6:48:b9:ff:c6:
d8:3c:69:eb:b8:c8:13:ed:eb:d5:95:be:81:52:0f:57:30:4c:
08:9d:12:a3:44:08:c3:8e:14:de:cb:53:72:e7:96:84:2b:03:
2d:35:a4:07:68:41:d6:3c:13:c2:f0:e5:32:16:1e:54:36:c6:
b9:99:06:c0:95:6f:0b:06:1f:44:c9:56:fd:44:3b:d0:06:d8:
3f:cd:2b:86:79:9b:8c:44:53:c1:d9:0d:e0:7b:19:2f:22:22:
32:63:5c:ed:95:bd:55:49:30:9e:ce:38:13:ad:c6:06:9c:3b:
25:f7:1c:e8:c1:0a:39:88:89:4a:38:c6:d9:84:6b:76:16:b0:
00:61:3d:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:18:21 2026 by rpki-client