Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/amgcdNKE5tv8cGii42ckAYiCH7M.roa
File: amgcdNKE5tv8cGii42ckAYiCH7M.roa (raw, json)
Hash identifier: JER9hBTtwxkDbdt6FDk1qkYipiZ//Jc0pr2hGz53NTo=
Subject key identifier: 6A:68:1C:74:D2:84:E6:DB:FC:70:68:A2:E3:67:24:01:88:82:1F:B3
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01A0F18E74146B49E5F1BEE06C65A354F2FC
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/amgcdNKE5tv8cGii42ckAYiCH7M.roa
Signing time: Wed 30 Sep 2026 09:03:59 +0000
ROA not before: Wed 30 Sep 2026 09:03:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205536
IP address blocks: 188.136.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:8e:74:14:6b:49:e5:f1:be:e0:6c:65:a3:54:f2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Sep 30 09:03:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a681c74d284e6dbfc7068a2e367240188821fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:70:5e:2e:84:62:2c:74:3d:20:f4:9c:1c:
11:c6:10:26:d1:cb:30:9b:3e:66:34:55:fb:44:06:
90:ba:17:8f:c7:04:27:0e:f2:aa:4e:f8:4e:e9:52:
2a:8a:95:8a:7b:c7:8d:a9:b2:fd:21:f3:cc:28:2e:
77:e1:06:aa:4e:45:40:fc:7c:69:5c:b5:ca:5b:4a:
49:7e:9e:4a:8a:ac:e0:f5:8b:63:fa:3c:e7:9d:ba:
6b:55:76:7a:64:f1:c9:5d:e4:56:e3:62:59:2d:6c:
d8:39:a6:a4:90:9b:5b:68:a1:06:d3:a3:73:90:63:
aa:fb:51:21:ea:7a:39:02:bd:8f:f3:b1:5f:7a:d1:
25:dd:bc:c1:a4:84:bf:2f:db:cb:63:96:07:eb:5c:
65:64:60:9c:ec:87:6f:8c:96:ac:ab:2b:b7:48:8b:
85:f1:ff:5c:d9:f8:5e:3b:0f:05:e4:0a:6b:36:74:
75:fd:39:ca:4c:c0:10:53:fb:94:34:6a:89:b7:51:
c3:60:0f:21:48:45:ac:2a:d3:73:33:85:07:11:58:
73:65:4c:c8:77:ff:c6:56:8b:38:f5:dd:9a:f4:df:
5a:11:3f:98:ff:b3:11:03:2e:18:78:ee:2f:34:e0:
e3:d0:71:c3:c0:98:15:e7:75:67:b7:3c:39:f0:32:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:68:1C:74:D2:84:E6:DB:FC:70:68:A2:E3:67:24:01:88:82:1F:B3
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/amgcdNKE5tv8cGii42ckAYiCH7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.136.159.0/24
Signature Algorithm: sha256WithRSAEncryption
69:90:6e:b2:55:82:3f:1c:d2:4e:c2:69:02:d7:6c:4d:d2:2b:
13:22:3f:55:df:a7:67:3d:88:20:90:67:5c:02:88:01:e2:1a:
d5:b6:89:1b:1c:8b:db:80:8f:d0:ff:0c:5f:8a:c1:c9:e7:42:
a0:c1:52:19:f3:77:8a:6a:64:fa:8f:aa:15:d5:a5:37:05:4f:
4c:24:c7:99:d7:bb:28:c2:5a:b0:3b:3d:a7:a6:99:c7:b7:ee:
d8:6e:22:80:d5:4e:ba:89:24:1d:73:a3:a9:49:46:32:07:5c:
37:11:62:eb:39:94:da:23:1b:46:8c:f9:ec:e7:df:af:c8:6b:
93:3a:66:cb:1b:ab:bc:7f:4e:ee:64:cc:b1:c2:3a:68:43:41:
04:f8:32:3e:4a:67:ef:a1:b3:2e:a8:52:11:35:51:e0:90:3e:
66:0f:c7:42:da:60:6f:b5:17:de:e8:04:89:85:ad:c9:13:af:
1e:08:ad:a8:0f:92:ae:f7:15:da:d0:a8:e2:22:a8:a1:0e:c2:
ef:1e:2e:ab:f6:29:20:1b:8e:b1:4c:0f:df:a1:29:f8:1f:f5:
d6:5d:f2:54:e0:b7:f2:9c:40:70:18:f1:ef:a7:81:e9:71:d4:
32:70:dd:f0:e5:1c:dc:8a:79:34:90:19:8c:f6:b2:ac:ac:93:
10:94:33:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:00:16 2026 by rpki-client