Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AVTAgjl5w4-MWujhzPSowhhRowo.roa
File: AVTAgjl5w4-MWujhzPSowhhRowo.roa (raw, json)
Hash identifier: Oe7g5/AK0OH8dCtTXchgkKTXMp5lTJ/9JeGBHj5Sqlg=
Subject key identifier: 01:54:C0:82:39:79:C3:8F:8C:5A:E8:E1:CC:F4:A8:C2:18:51:A3:0A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019EA76B5B792CBCF7560F593A0D8B7A4B64
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AVTAgjl5w4-MWujhzPSowhhRowo.roa
Signing time: Mon 08 Jun 2026 13:28:11 +0000
ROA not before: Mon 08 Jun 2026 13:28:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219513
IP address blocks: 31.148.240.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:6b:5b:79:2c:bc:f7:56:0f:59:3a:0d:8b:7a:4b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jun 8 13:28:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0154c0823979c38f8c5ae8e1ccf4a8c21851a30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:74:6b:12:83:48:54:31:c4:9b:2b:ba:19:
c5:2e:05:24:6d:55:df:44:3a:54:68:d8:87:d3:91:
97:da:54:bf:a2:1e:ab:52:52:12:2a:0f:88:69:47:
98:92:e3:9f:16:7c:ca:3a:25:71:ec:c4:f1:9f:3b:
b9:7f:d8:6e:ad:fc:94:7c:3b:21:9e:fd:25:9f:fe:
98:73:25:7a:ec:c2:db:a5:cd:dc:a7:3e:1d:3a:37:
cc:b2:ab:94:4c:b4:8f:bb:67:c6:02:9b:36:0b:8f:
19:a1:da:44:ec:de:b0:8c:12:5f:6d:b2:4a:0c:4f:
f8:0f:40:54:66:33:20:d2:cd:de:f0:b4:e6:d0:6e:
0b:d1:e0:0c:33:7d:35:05:f5:5c:29:fb:d0:c8:e6:
a9:ef:f4:9c:0b:d4:cc:df:97:7e:f5:cb:61:f5:6a:
6b:20:fe:78:bc:0d:4d:e5:03:ef:2c:13:b6:6a:ae:
87:b2:79:22:ae:9b:07:a5:20:a4:e7:71:2b:7f:4f:
4b:65:fe:e3:50:a4:38:92:51:32:cf:5c:d5:d6:3c:
a6:2e:97:04:c4:be:bb:e4:5a:6d:65:f1:9c:bf:fa:
ea:24:d1:7b:b4:7f:38:84:51:66:1e:6f:7e:ae:d4:
e0:47:ad:b8:44:aa:13:e2:96:21:2f:49:70:d3:d0:
ca:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:54:C0:82:39:79:C3:8F:8C:5A:E8:E1:CC:F4:A8:C2:18:51:A3:0A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AVTAgjl5w4-MWujhzPSowhhRowo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.240.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:58:1c:7f:7c:13:3a:a1:c7:4c:63:4a:af:0a:4c:3e:dd:ef:
0b:ae:4a:7b:e5:4c:18:fd:69:6e:b4:3d:4a:ce:ab:0c:b7:80:
f2:44:82:77:aa:75:e6:64:2e:f5:d6:14:2a:1f:0c:77:eb:fa:
a2:fd:f5:f2:f1:1e:16:b1:d7:55:b7:38:de:10:65:11:46:fb:
73:0f:32:8f:1d:81:a6:69:90:f7:eb:ce:9b:c7:c9:1f:7c:f1:
15:66:69:b2:f4:83:18:25:9c:e9:6b:d9:59:cd:b8:dc:4b:56:
80:25:69:ff:40:2a:bb:7e:f5:4a:cf:7f:7f:53:7b:fe:d1:31:
8f:aa:80:c3:b3:25:90:31:ae:c3:99:7a:90:0c:8a:2d:8b:2a:
21:c0:ad:56:a6:94:dd:af:43:c9:f0:8c:6d:1d:f0:d6:bf:d6:
ae:c5:fa:b5:a8:ed:6b:60:53:dc:3b:6c:a7:9f:7a:18:07:fc:
de:89:10:4c:f7:7e:9d:61:9d:f7:66:f2:3e:f6:88:9a:40:7d:
34:09:0d:8e:97:e3:ad:a8:d4:55:a9:1d:ad:2d:02:25:eb:f5:
d9:d6:63:8c:8e:a8:bf:22:30:ee:d8:56:79:f8:0e:09:be:15:
b6:82:f9:e1:98:23:92:a0:71:78:24:a7:b4:e7:b2:81:f0:df:
4d:71:f6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:55:23 2026 by rpki-client