Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/seE8MA1IAHQhkFxKO3DiabXwc2k.roa
File: seE8MA1IAHQhkFxKO3DiabXwc2k.roa (raw, json)
Hash identifier: 3toCWdrJKeaWZ1jR0rxFlsqTNbw+YdEAy/zdrsfgu1c=
Subject key identifier: B1:E1:3C:30:0D:48:00:74:21:90:5C:4A:3B:70:E2:69:B5:F0:73:69
Certificate issuer: /CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
Certificate serial: 019D019845F33EFAB00114D7623B0EAFD4F1
Authority key identifier: 69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/seE8MA1IAHQhkFxKO3DiabXwc2k.roa
Signing time: Wed 18 Mar 2026 15:37:29 +0000
ROA not before: Wed 18 Mar 2026 15:37:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 195.146.160.0/24 maxlen: 24
195.146.161.0/24 maxlen: 24
195.146.162.0/24 maxlen: 24
195.146.163.0/24 maxlen: 24
195.146.164.0/24 maxlen: 24
195.146.165.0/24 maxlen: 24
195.146.166.0/24 maxlen: 24
195.146.167.0/24 maxlen: 24
195.146.168.0/24 maxlen: 24
195.146.169.0/24 maxlen: 24
195.146.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:98:45:f3:3e:fa:b0:01:14:d7:62:3b:0e:af:d4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
Validity
Not Before: Mar 18 15:37:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1e13c300d48007421905c4a3b70e269b5f07369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:39:5a:09:8e:b3:ab:79:83:39:95:00:2c:11:
45:0b:0c:19:3a:e2:96:78:6b:29:dd:26:71:6f:6a:
a7:c2:2a:53:3c:2c:52:4c:54:61:f9:4e:4b:23:67:
09:1f:25:a1:d3:de:60:63:b3:f7:8f:38:26:f8:52:
c3:01:c0:d9:57:8f:c1:a6:68:aa:0f:71:e7:5c:f4:
21:6b:ab:90:0c:ba:45:0c:a3:46:3b:f1:98:b9:9e:
1b:56:b8:a9:f9:ee:4d:ee:8f:3b:e8:a3:5b:55:43:
81:37:2d:3c:cf:74:3d:eb:a7:34:b9:bc:72:7d:42:
93:d7:7c:03:d3:2a:c7:33:f3:53:8f:e7:e3:1b:d0:
c0:ca:38:47:08:3e:0b:bc:6d:c6:cd:3b:f9:7c:c4:
6a:37:88:cc:4a:d4:77:a6:d4:8c:4c:60:fb:51:fc:
78:1e:40:cf:d1:25:62:0a:69:76:ec:8f:47:2e:3f:
ba:40:c2:cf:39:74:77:f5:eb:82:7f:aa:52:c2:c4:
ee:ac:40:13:65:8e:b5:c2:f1:40:12:a9:c4:83:78:
8a:9b:7f:e1:fd:3b:b8:3a:bc:f9:2f:ce:4c:02:bb:
b0:09:99:e4:0d:e0:0b:9f:db:91:60:92:4e:0f:97:
1b:cb:10:a5:9c:bf:8a:8c:1f:ea:a9:9c:fe:33:78:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E1:3C:30:0D:48:00:74:21:90:5C:4A:3B:70:E2:69:B5:F0:73:69
X509v3 Authority Key Identifier:
keyid:69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/seE8MA1IAHQhkFxKO3DiabXwc2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.146.160.0-195.146.170.255
Signature Algorithm: sha256WithRSAEncryption
52:d8:7b:0d:3a:39:ab:74:ff:a5:28:19:bc:d5:2b:7e:2c:8a:
1a:d5:d5:f7:79:af:6e:1a:8b:aa:f8:24:0e:be:c5:a6:6b:74:
5b:98:db:27:be:f7:1b:4a:55:6f:5e:60:a9:be:db:98:62:c0:
ee:02:68:a0:e4:12:01:de:3c:6b:78:78:4f:1d:11:ee:b7:96:
df:a1:53:ec:e4:69:4f:b1:cd:a8:63:3c:bc:eb:ff:21:6c:d0:
cc:fe:38:f3:8e:83:3e:4f:cb:32:63:00:65:0e:d3:b9:49:df:
c7:81:ba:8c:66:70:6c:ab:68:8c:94:d4:a5:0e:20:d0:ff:4f:
37:ff:0c:6a:eb:7f:f6:8d:58:d6:c4:e9:1b:ec:e3:39:e6:0d:
bf:d1:7c:73:4f:85:c5:17:5b:33:fb:d2:0d:d1:a6:87:69:d5:
22:42:34:58:33:f2:7d:ac:4c:c7:28:6c:89:c5:cb:f5:3d:e4:
6b:ae:5d:a8:21:52:57:6c:d3:9f:94:c4:76:4e:f3:29:91:8a:
7a:64:ff:5b:6e:f0:c5:0f:bd:7d:20:e6:76:3c:ba:13:b2:98:
12:26:ce:6d:5e:ee:4c:e6:1c:80:af:d2:ea:c2:fe:2b:ae:05:
b4:aa:1c:c5:a2:74:c5:c8:9d:9c:80:89:f6:70:89:bf:3f:54:
96:28:73:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:29:48 2026 by rpki-client