Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/AslLusFgDFPPE7t41smLzW6s-Ls.roa
File: AslLusFgDFPPE7t41smLzW6s-Ls.roa (raw, json)
Hash identifier: rq5TrcLRyuOEA3h5a7I8IJzcKULtSjHcKrfXhJxVLNo=
Subject key identifier: 02:C9:4B:BA:C1:60:0C:53:CF:13:BB:78:D6:C9:8B:CD:6E:AC:F8:BB
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01A0ECB40EA90023253F2F1F993A9226C87D
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/AslLusFgDFPPE7t41smLzW6s-Ls.roa
Signing time: Tue 29 Sep 2026 10:26:58 +0000
ROA not before: Tue 29 Sep 2026 10:26:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218656
IP address blocks: 46.38.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 11:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:b4:0e:a9:00:23:25:3f:2f:1f:99:3a:92:26:c8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Sep 29 10:26:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02c94bbac1600c53cf13bb78d6c98bcd6eacf8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bf:a1:18:d8:62:bd:e9:8e:31:54:31:88:dc:
2d:08:9b:be:92:61:de:30:81:9b:db:4f:ad:b9:ac:
27:40:46:23:c4:52:8d:fe:da:99:d1:8b:54:b6:40:
8f:13:6c:73:e5:23:c3:00:4f:dd:e4:4e:71:1d:e8:
96:e6:8b:f4:61:f8:96:1e:a6:65:18:90:8c:09:c0:
dd:ed:c7:77:c9:11:d4:97:a7:08:76:50:0c:a9:a6:
20:4b:dc:35:20:d5:f5:c6:ea:c6:87:b7:0c:ee:30:
43:07:31:c3:6f:e3:a6:e0:79:7e:37:47:89:8d:53:
ce:1a:45:21:3f:71:e9:18:00:d5:73:e7:91:91:c0:
12:2e:a1:ef:1b:70:e0:ee:90:29:4e:07:53:eb:67:
f9:0a:2f:0b:63:71:fd:16:22:c0:16:9a:76:5a:8b:
01:43:8b:e0:bf:d5:d6:36:50:9d:2b:fa:65:57:02:
e9:8c:17:f0:8b:c7:4c:bb:aa:60:81:fb:af:ee:91:
81:9d:18:3f:08:f7:10:39:f3:a3:48:56:a4:a4:a4:
73:60:5c:7f:8a:5f:8f:48:e2:ee:f0:33:b3:c1:47:
ce:36:1e:bf:1e:0a:f2:2d:bd:97:4e:43:43:d5:40:
d1:2d:99:9a:b4:25:38:ca:ae:b8:2e:ca:ce:42:66:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C9:4B:BA:C1:60:0C:53:CF:13:BB:78:D6:C9:8B:CD:6E:AC:F8:BB
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/AslLusFgDFPPE7t41smLzW6s-Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.154.0/24
Signature Algorithm: sha256WithRSAEncryption
06:61:48:9b:ff:67:00:a4:b9:6b:58:c7:7e:85:26:3e:b4:57:
bf:b9:f2:36:bd:0a:91:ef:90:71:8f:d6:d4:4a:a2:f7:19:7a:
ef:8f:61:91:2d:3f:6c:c1:fb:b9:93:5e:2a:9c:46:f8:e2:6c:
e6:b4:1f:4f:24:72:d2:63:0b:80:a9:c8:01:e9:c8:aa:c0:8a:
ba:53:df:a2:d3:5e:91:ce:46:b0:83:af:08:f2:68:1e:d9:f8:
b2:95:0e:f4:32:75:09:bb:9d:c6:a1:1d:c5:8c:27:26:a9:db:
2f:77:e3:49:ea:e2:8e:13:d8:e4:34:13:07:9b:1d:7a:e8:d7:
0a:34:6d:e5:a5:9f:59:4a:0b:be:d7:0d:63:51:ba:9c:15:65:
f5:b3:16:eb:de:eb:bf:6e:99:16:d0:f1:1b:44:e5:0f:3c:4e:
a8:a5:0d:63:69:ef:dc:04:00:63:59:72:21:6a:34:34:29:64:
b7:49:e4:5d:3b:22:94:b7:13:4a:fd:80:35:03:d0:86:23:c1:
20:1c:6e:99:53:48:b8:51:ef:f3:94:5a:89:b5:84:91:96:8b:
ba:66:8a:51:90:55:65:56:dd:5b:b6:99:d3:90:70:f5:c0:6d:
6c:a2:ed:68:f8:29:56:79:18:e6:16:9d:95:37:44:72:17:c1:
98:ec:40:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:26:54 2026 by rpki-client