Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/az8-qmAm__Q2vWY0AcJPLxKPa7w.roa
File: az8-qmAm__Q2vWY0AcJPLxKPa7w.roa (raw, json)
Hash identifier: wZzIfzMKAO+r012Fp/hJId8drWxI5XCw8K4AvtAAvEM=
Subject key identifier: 6B:3F:3E:AA:60:26:FF:F4:36:BD:66:34:01:C2:4F:2F:12:8F:6B:BC
Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial: 019F1E0AFA3EF131A4E6038BC57F8CC47DCE
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/az8-qmAm__Q2vWY0AcJPLxKPa7w.roa
Signing time: Wed 01 Jul 2026 14:17:43 +0000
ROA not before: Wed 01 Jul 2026 14:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206264
IP address blocks: 45.84.192.0/24 maxlen: 24
45.84.193.0/24 maxlen: 24
45.84.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:0a:fa:3e:f1:31:a4:e6:03:8b:c5:7f:8c:c4:7d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
Validity
Not Before: Jul 1 14:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b3f3eaa6026fff436bd663401c24f2f128f6bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ff:9a:dc:ab:83:b9:50:19:8e:35:d9:72:59:
23:b6:42:47:08:c3:11:e5:73:ee:09:82:4f:44:a8:
f1:46:6b:12:96:e0:dd:d6:26:1d:59:ee:30:50:13:
0d:64:4b:62:60:20:93:68:cb:64:b3:11:bb:4c:6c:
9d:c7:34:56:f4:cb:3f:e8:b4:0e:e2:c3:f7:c4:5c:
5d:39:9f:2f:6f:a0:73:c4:12:6c:bb:57:fe:43:41:
22:dd:fd:16:73:42:59:d3:59:f4:b6:cb:81:93:95:
cd:4b:20:d1:2b:5c:96:70:09:69:e1:3b:21:df:ee:
9f:5a:4e:ef:fa:6e:f3:b6:51:17:06:a2:42:5b:5b:
64:e0:64:75:a9:de:0b:43:a8:87:9a:59:e9:ca:4e:
5a:20:c2:7b:25:37:25:dd:7b:4f:75:c7:eb:19:63:
4f:25:56:df:65:e4:de:cc:48:6e:0a:61:58:a1:19:
90:19:69:33:74:15:5e:ae:5d:4a:a9:7c:98:2e:61:
b3:ff:6a:dc:8e:56:02:89:9b:11:91:ef:f8:37:18:
e5:d5:23:b7:92:d3:d0:08:e0:7e:4a:c4:e7:25:05:
c9:45:ae:bc:ab:e8:7f:7d:13:1d:b7:ce:a8:b5:15:
41:95:28:58:43:b2:69:a2:38:0e:95:91:3c:52:6e:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3F:3E:AA:60:26:FF:F4:36:BD:66:34:01:C2:4F:2F:12:8F:6B:BC
X509v3 Authority Key Identifier:
keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/az8-qmAm__Q2vWY0AcJPLxKPa7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.192.0-45.84.194.255
Signature Algorithm: sha256WithRSAEncryption
71:5c:70:f2:93:70:13:30:05:92:01:00:0b:d6:0a:58:64:1b:
20:a9:c5:b4:00:17:f1:73:a7:e1:4f:e1:21:c9:73:e6:87:52:
dd:4d:1f:ee:39:e0:62:2e:9a:ae:d6:ab:3f:31:be:b8:3f:5f:
a6:99:6e:ad:33:04:b7:01:b5:9a:ce:76:ad:69:ca:1d:f8:12:
d1:b1:37:41:4a:e1:7e:af:fa:d4:c4:93:94:4d:16:e6:e5:93:
70:e5:c8:d0:2b:31:93:9e:44:27:b2:55:50:d5:ea:7b:ff:e9:
b7:5e:df:ef:c3:4b:3b:90:f7:57:f4:1b:12:c0:d9:8e:0c:74:
5c:c6:48:73:82:1c:2d:d6:0f:93:50:1c:f7:6b:cf:3f:44:34:
2a:2c:f7:1f:8a:02:23:b7:67:2f:fe:4c:0f:e1:e4:12:e8:53:
36:85:b4:87:8b:2b:66:d9:21:d8:39:e7:72:46:e9:4b:48:a3:
81:40:3c:d3:0c:5b:60:da:5c:02:88:32:76:d4:07:18:50:11:
d4:88:16:6d:39:38:dc:04:4c:a9:93:07:d6:0d:a0:17:38:7f:
22:f1:84:87:c0:7a:ad:19:70:9c:48:82:33:15:45:46:5b:24:
79:54:d4:b0:f9:a7:d2:1b:2a:84:ac:94:8c:d0:b0:d0:cf:b5:
ed:09:81:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 04:09:34 2026 by rpki-client