Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ahzKu3R6cDKSD8usIG_YshBNnX0.roa
File: ahzKu3R6cDKSD8usIG_YshBNnX0.roa (raw, json)
Hash identifier: 9CJGVAkqGO5nkcDeSMDHCQ9ErBhgAEIyiciJhNJ6URA=
Subject key identifier: 6A:1C:CA:BB:74:7A:70:32:92:0F:CB:AC:20:6F:D8:B2:10:4D:9D:7D
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A182F3D342251F8724A1F9E183B09E4C2D
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ahzKu3R6cDKSD8usIG_YshBNnX0.roa
Signing time: Wed 28 Oct 2026 14:39:39 +0000
ROA not before: Wed 28 Oct 2026 14:39:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48207
IP address blocks: 80.71.152.0/24 maxlen: 24
80.71.159.0/24 maxlen: 24
186.243.247.0/24 maxlen: 24
186.243.250.0/24 maxlen: 24
193.42.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:f3:d3:42:25:1f:87:24:a1:f9:e1:83:b0:9e:4c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Oct 28 14:39:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a1ccabb747a7032920fcbac206fd8b2104d9d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:82:a5:75:7e:71:e0:b9:cd:b3:8c:c5:8d:05:
06:81:db:ab:85:23:3a:6d:2c:a0:b3:86:0e:2a:dd:
57:b5:d7:1c:0a:5e:67:62:4e:00:3b:2b:98:65:32:
73:22:d4:45:e5:9d:90:6b:56:26:6d:bb:c4:e8:eb:
77:1d:a3:5d:08:52:14:6a:55:c7:80:15:c2:04:f8:
5a:a7:d0:32:08:a2:35:45:65:49:7d:47:63:e0:fa:
ed:9d:35:64:41:97:8a:81:3f:65:5a:b4:7a:ce:fe:
53:5f:d9:b1:9a:c0:2d:a6:de:0d:8b:69:06:ed:58:
91:8a:67:16:c6:80:c3:6e:99:01:62:ec:1d:28:24:
14:95:3b:e9:c0:e5:80:1e:1b:0c:7f:34:e5:94:08:
96:12:7c:c4:df:d1:aa:83:cc:2b:f7:de:f5:ec:62:
04:96:10:b6:ac:5d:5e:e5:83:01:5a:b0:46:db:5d:
a8:db:72:f8:4c:fc:02:dc:9e:d0:20:ba:7b:d9:73:
52:50:96:ab:86:e7:82:ee:90:80:97:40:f2:ef:69:
5c:d6:1e:87:23:d8:9b:3d:87:83:b9:5c:f1:9d:ad:
b3:bd:c1:bb:e7:f1:93:12:84:5f:64:f8:a0:a6:d0:
87:20:e1:a1:a1:62:48:fc:65:02:82:dc:7e:13:30:
60:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1C:CA:BB:74:7A:70:32:92:0F:CB:AC:20:6F:D8:B2:10:4D:9D:7D
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ahzKu3R6cDKSD8usIG_YshBNnX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.152.0/24
80.71.159.0/24
186.243.247.0/24
186.243.250.0/24
193.42.118.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b3:c1:09:a4:44:a6:cd:64:4c:6e:77:56:c3:34:28:38:ce:
66:1a:5e:ad:c5:5b:7c:d9:4e:91:ee:76:94:03:0c:e3:6d:44:
4f:f9:8e:fd:91:c6:25:e5:f8:d0:49:a4:d3:d2:5f:34:a1:4f:
65:73:da:28:0d:30:85:54:a4:b4:6d:b0:fe:1a:9c:d4:76:69:
15:41:32:4d:f7:f6:fe:41:d0:60:bf:c6:06:bb:c8:08:b9:9c:
32:6d:85:6c:0c:9f:b8:26:b0:c1:d7:4a:1d:67:47:c2:29:c4:
c7:42:29:85:6b:8a:69:20:b8:0e:e4:b3:8c:43:8d:ad:94:6b:
2e:78:25:b1:ea:f2:c2:63:8f:86:be:2a:48:4d:e7:78:92:70:
1a:25:06:f3:d9:d4:57:79:c7:c6:4f:6c:92:5d:18:81:66:3a:
16:9f:62:96:72:2e:64:bd:c4:dc:da:7b:35:f6:9b:59:44:6e:
ed:16:78:b2:91:85:a8:53:b2:98:a2:e3:90:e2:88:01:ed:1a:
87:1d:de:f4:21:de:69:84:cf:95:ad:39:e2:09:fb:22:77:06:
4f:24:7c:7e:f0:03:35:d5:bc:5d:9b:79:7f:4f:22:ec:99:3d:
2c:12:2f:b4:a9:7a:d3:0c:32:40:56:95:6b:88:2e:18:a6:7e:
8e:9f:95:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 11:43:38 2026 by rpki-client