Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/aVgebze3DGF-KEsMnZC5Ko2CIfY.roa
File: aVgebze3DGF-KEsMnZC5Ko2CIfY.roa (raw, json)
Hash identifier: NfZpKGjWtpW8R47mtlOQxNS8rkEPFNCDlcl++B9KFvk=
Subject key identifier: 69:58:1E:6F:37:B7:0C:61:7E:28:4B:0C:9D:90:B9:2A:8D:82:21:F6
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A0527101AB9457EDFB5E9B46D079FE4FBB
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/aVgebze3DGF-KEsMnZC5Ko2CIfY.roa
Signing time: Sun 30 Aug 2026 11:32:12 +0000
ROA not before: Sun 30 Aug 2026 11:32:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200404
IP address blocks: 185.157.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:52:71:01:ab:94:57:ed:fb:5e:9b:46:d0:79:fe:4f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Aug 30 11:32:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69581e6f37b70c617e284b0c9d90b92a8d8221f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:6a:63:85:7c:4e:a5:ff:78:21:9b:93:44:
53:c4:f3:54:c5:33:30:dc:22:7a:91:5c:f3:2f:af:
09:2c:c4:7d:a0:88:d8:a4:d7:12:29:19:72:15:d7:
72:42:e7:93:65:80:f6:f1:34:e0:47:7a:e9:e2:dc:
b1:73:ba:07:5d:00:fd:27:bf:aa:f7:6c:1a:d7:9b:
87:5d:08:9e:55:8f:50:63:55:af:34:11:fa:7a:d3:
d7:d3:00:dc:89:e9:f5:c3:5d:a2:0d:fd:34:82:6a:
a7:88:ef:bb:e7:8d:a5:af:c3:c1:f1:c2:b4:2d:3d:
33:77:ec:96:06:c5:f6:ad:cb:f4:ab:f1:7f:e8:42:
f7:78:d8:bc:51:cb:82:35:f1:c5:c8:90:1b:39:c8:
33:4c:90:28:4d:6e:e5:ea:a8:17:50:76:df:88:72:
a2:98:77:94:96:ae:a5:0c:56:c8:8a:c1:99:2e:fd:
c6:18:6d:f4:4d:0f:c1:57:3a:14:17:e6:92:27:f6:
b0:75:fe:ae:4b:70:af:58:c1:a5:2f:67:6c:20:83:
60:6b:0c:a1:05:2d:33:88:ca:5a:2d:6e:6d:4a:ef:
4c:ae:fb:d7:1d:f9:5f:8e:93:6b:62:6a:37:96:66:
9b:e0:37:9d:eb:08:28:32:8e:fd:09:60:94:61:77:
8e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:58:1E:6F:37:B7:0C:61:7E:28:4B:0C:9D:90:B9:2A:8D:82:21:F6
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/aVgebze3DGF-KEsMnZC5Ko2CIfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.218.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:9b:3a:4a:d8:0f:fd:f8:c6:cc:7e:4a:ce:e6:3e:64:b0:3c:
5b:16:ba:eb:b4:a0:16:66:a7:36:ee:22:15:c9:16:cd:08:46:
8b:88:54:61:f0:51:cf:17:2b:b2:ec:dc:3a:e2:a1:4f:a4:b0:
5f:8f:c1:3b:ff:38:da:22:32:6d:f9:5e:03:90:aa:67:c1:35:
76:0a:78:ce:a9:8c:20:2e:42:ce:70:6d:4a:5e:94:e3:75:f9:
5f:f1:8c:d7:b0:01:b0:92:71:1e:b7:1d:07:c3:58:b7:df:a3:
f1:7c:3d:d5:9c:86:5f:b0:d0:76:52:e0:00:f2:9b:93:59:df:
7e:8b:c6:35:a4:98:5d:0d:e3:74:14:94:5a:82:f6:b3:a9:7f:
68:08:50:41:ce:49:6a:45:63:93:ba:e4:25:ed:5a:98:17:64:
00:21:eb:a1:c0:bc:84:81:78:83:a9:07:b9:7a:93:1e:1c:51:
a4:38:e9:09:c1:9f:fa:48:2e:ba:99:64:67:a2:e7:29:1a:47:
07:7b:84:e4:a6:3e:a1:29:84:61:e9:2d:c3:6e:0c:e9:b8:76:
af:22:f3:70:11:09:54:d7:30:b5:6d:d6:d9:ee:f2:b7:a3:ca:
02:91:44:fa:89:93:fc:0d:9a:df:ae:3c:09:e3:6e:20:fb:49:
d0:7a:c6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:11:40 2026 by rpki-client