Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AvicPBsmQ09f0vrS59nmV7fDxjM.roa
File: AvicPBsmQ09f0vrS59nmV7fDxjM.roa (raw, json)
Hash identifier: HGSTl6zZ5ZYxwJQsqjlhPefyj5x5ODLHS1yUjwfVgvI=
Subject key identifier: 02:F8:9C:3C:1B:26:43:4F:5F:D2:FA:D2:E7:D9:E6:57:B7:C3:C6:33
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01A1630F1B4FE1B26AD4C5C54154D7C15A84
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AvicPBsmQ09f0vrS59nmV7fDxjM.roa
Signing time: Thu 22 Oct 2026 10:01:36 +0000
ROA not before: Thu 22 Oct 2026 10:01:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207676
IP address blocks: 31.148.0.0/24 maxlen: 24
92.253.218.0/23 maxlen: 24
92.253.235.0/24 maxlen: 24
93.170.14.0/24 maxlen: 24
146.120.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:0f:1b:4f:e1:b2:6a:d4:c5:c5:41:54:d7:c1:5a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 22 10:01:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02f89c3c1b26434f5fd2fad2e7d9e657b7c3c633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:18:0c:81:2f:ff:c0:27:60:ab:c2:86:6d:
85:3b:e4:ff:e0:e0:96:b3:c7:ca:20:68:2a:1c:ae:
4e:23:1f:72:49:43:84:a7:63:3d:89:c0:4b:d3:d8:
34:18:75:52:74:c6:06:9e:d3:78:ef:46:6c:91:2d:
3a:a5:a8:94:e8:d9:fc:06:a1:11:46:66:55:ab:b6:
05:a2:8f:d9:82:a8:ce:0e:9d:f3:75:5a:c4:ca:a2:
ff:20:d3:55:78:b3:ea:d2:ff:cf:35:8f:44:c2:41:
1e:93:9c:86:cb:03:3c:7e:a9:9d:ac:f9:8f:1d:81:
d1:7b:69:12:f6:86:21:f1:27:81:4b:1b:3b:dd:49:
62:c7:6b:49:7a:0b:56:13:c3:0a:12:a2:72:db:f0:
e8:83:23:20:01:55:4e:9f:e2:b0:e0:e2:95:47:46:
9e:62:bf:33:97:f5:26:f4:b4:33:09:6e:0f:10:30:
57:a2:f9:97:77:f5:d8:be:2d:e7:e5:41:4d:27:02:
a0:f8:bd:7e:f8:40:01:dc:ca:d0:b5:49:df:1c:bd:
72:96:03:b7:12:a3:62:f1:07:72:26:86:fa:fc:e4:
e6:6e:7b:ea:02:61:b9:9d:cb:9d:68:2b:4c:67:2b:
9b:b2:ec:92:81:68:de:57:98:11:76:54:3d:00:e5:
b2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F8:9C:3C:1B:26:43:4F:5F:D2:FA:D2:E7:D9:E6:57:B7:C3:C6:33
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AvicPBsmQ09f0vrS59nmV7fDxjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.0.0/24
92.253.218.0/23
92.253.235.0/24
93.170.14.0/24
146.120.110.0/24
Signature Algorithm: sha256WithRSAEncryption
68:03:d6:28:e7:2b:af:06:49:a1:7a:78:d1:c9:93:73:92:c1:
cc:10:60:a0:85:71:b6:70:a8:bf:e6:ca:fd:3c:82:19:d1:a3:
a7:6d:c8:6c:30:6e:35:35:68:dd:d0:dc:5b:97:4b:1e:b4:17:
05:b7:02:41:29:fd:65:4d:a6:68:3a:2d:b0:2f:fe:5c:95:40:
8c:1b:c3:28:ac:ea:7e:1c:00:1b:b8:e9:35:f4:83:ea:37:cc:
da:e5:48:ec:6f:25:00:ab:a0:46:23:f7:87:f2:6a:a7:8b:34:
a7:9b:65:c4:2b:03:3f:ac:3b:a0:a3:b3:5a:65:c7:47:cb:8a:
c0:9f:98:62:73:eb:c7:0a:5a:c6:52:38:f4:8d:4b:55:86:5e:
c9:a5:97:aa:c5:25:e1:12:63:f2:7e:e7:27:44:0e:d9:88:63:
18:b8:00:ff:33:be:e3:de:cf:93:66:50:9a:79:aa:cf:32:3c:
f2:d1:a3:71:38:46:ab:3e:1f:c7:ef:d5:b4:6e:a1:45:05:d7:
bc:08:9d:79:9e:40:36:38:cd:27:59:8d:f6:4b:29:c1:73:43:
50:54:3b:7f:8e:e9:a4:19:aa:1a:32:ce:2a:cb:05:f4:5b:9d:
01:d8:b2:30:61:97:27:ed:85:40:ba:e9:c0:dc:23:2a:52:ba:
e7:18:74:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:15:11 2026 by rpki-client