Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/AepDD3jigplk6QcR9LyLUoqqihY.roa
File: AepDD3jigplk6QcR9LyLUoqqihY.roa (raw, json)
Hash identifier: THecEgKrOHG2Vkm6EotNhxdWtYOa+cyczX1SMz1TciA=
Subject key identifier: 01:EA:43:0F:78:E2:82:99:64:E9:07:11:F4:BC:8B:52:8A:AA:8A:16
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 01A01934BF36C490671A2AE2A8C533CFDA39
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/AepDD3jigplk6QcR9LyLUoqqihY.roa
Signing time: Wed 19 Aug 2026 08:48:02 +0000
ROA not before: Wed 19 Aug 2026 08:48:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 185.30.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:34:bf:36:c4:90:67:1a:2a:e2:a8:c5:33:cf:da:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Aug 19 08:48:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01ea430f78e2829964e90711f4bc8b528aaa8a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:59:81:71:d4:8a:38:54:72:0b:81:5d:c7:
b2:ab:d5:b1:a0:68:95:73:0b:be:44:81:3e:f0:62:
b4:da:7f:29:06:7f:21:36:e2:2c:96:d5:24:fd:72:
f7:a2:5a:a4:10:2e:99:07:ae:9d:be:32:b8:ef:8e:
08:7d:90:20:7f:7d:c5:0c:14:0f:5a:af:ea:78:ac:
3e:8d:dc:2c:9b:0d:c5:0d:41:e4:b9:67:cd:2c:78:
3a:e8:ba:61:82:f5:55:74:b1:4e:d3:5a:79:80:16:
17:6c:99:cd:bb:43:49:0c:90:96:b4:e9:70:30:61:
14:5d:de:ef:63:28:33:8d:9d:18:85:af:5d:e5:35:
47:70:50:9f:ba:a4:2c:5f:01:98:4e:39:aa:28:17:
5a:d1:28:4b:9f:59:59:f8:54:10:ed:b0:34:9b:7b:
8a:a0:c6:a3:74:0f:bc:eb:d1:63:86:36:30:7b:5d:
34:20:4f:36:12:1a:91:f0:ec:9c:ec:97:a0:c9:b6:
7e:fd:e6:aa:d9:e7:b5:7c:a5:be:bf:77:54:53:01:
02:c4:72:5a:c2:6f:c1:ae:4b:c7:be:f7:a5:8c:0a:
f9:71:a7:98:6f:ba:7f:aa:37:f0:8f:75:7e:01:f6:
8e:57:96:f7:ed:12:8c:bd:1f:68:04:e2:7a:15:31:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EA:43:0F:78:E2:82:99:64:E9:07:11:F4:BC:8B:52:8A:AA:8A:16
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/AepDD3jigplk6QcR9LyLUoqqihY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.214.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:23:fc:05:0d:4e:10:95:0d:a1:0d:88:93:08:69:bd:e3:3e:
6d:f2:b3:b8:71:42:28:46:c3:18:7b:8a:79:35:2a:6e:2b:bc:
10:39:88:90:c3:97:72:48:00:4c:86:e6:a4:06:a8:87:b3:ec:
17:57:2c:a4:9a:f4:b2:77:4b:db:ec:d3:8c:18:83:87:57:fe:
5e:27:0b:59:8c:2c:2b:70:99:e1:55:05:1d:93:2b:3a:9b:7b:
09:fc:b3:ea:61:1c:9c:14:3f:a0:29:31:7a:06:b4:13:ea:59:
11:8f:fc:eb:25:e1:30:70:fb:3c:c5:32:75:78:fc:5b:c1:5e:
11:0a:a9:50:17:81:cd:79:72:ec:61:9b:90:c2:68:bf:26:1a:
e1:56:3e:73:2c:38:6a:64:0b:0b:f1:32:6a:d9:7d:d8:e2:4c:
76:56:3a:15:06:24:93:41:e2:f4:9e:aa:7c:d4:c3:1d:07:46:
50:df:0e:a4:47:e3:24:08:84:33:b6:d7:07:16:2b:9d:94:79:
dc:e0:e9:76:0d:87:74:2e:f6:18:78:8a:45:4b:2a:f1:ec:9c:
df:90:30:0b:10:4f:c8:7c:39:d4:c8:2f:74:78:63:11:9e:0b:
6a:44:b6:bc:02:8e:20:d9:6e:ad:48:c7:19:fa:64:71:ee:9d:
b3:fd:8e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:56:14 2026 by rpki-client