Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/AmSIHyBV1dG41RsCsIKqIJFFqEU.roa
File: AmSIHyBV1dG41RsCsIKqIJFFqEU.roa (raw, json)
Hash identifier: 7wzXnnnuA5PhbYX0dhAhOPSQoJoekD6xhZVC1AoXN9k=
Subject key identifier: 02:64:88:1F:20:55:D5:D1:B8:D5:1B:02:B0:82:AA:20:91:45:A8:45
Certificate issuer: /CN=36d6044966c57439aaf520310885f81d45275b2a
Certificate serial: 01A15D8ED28C183C57BAD587BF1768F5BA9F
Authority key identifier: 36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/AmSIHyBV1dG41RsCsIKqIJFFqEU.roa
Signing time: Wed 21 Oct 2026 08:23:23 +0000
ROA not before: Wed 21 Oct 2026 08:23:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202034
IP address blocks: 134.168.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:8e:d2:8c:18:3c:57:ba:d5:87:bf:17:68:f5:ba:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d6044966c57439aaf520310885f81d45275b2a
Validity
Not Before: Oct 21 08:23:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0264881f2055d5d1b8d51b02b082aa209145a845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2d:29:27:93:82:98:9d:57:39:ad:00:a9:a6:
42:78:ed:c3:7b:d3:6c:d3:81:0a:f2:c1:7a:74:fe:
22:a1:7f:83:65:81:4b:9d:ca:ed:b2:b1:7d:ec:2a:
2e:70:65:13:ec:9e:74:18:10:6d:79:83:e5:ad:ea:
44:06:b4:81:cc:f0:1e:bd:14:d4:33:4e:40:60:00:
f4:55:4e:f0:aa:ad:7d:49:91:a5:f0:7a:0e:f9:d3:
08:17:c8:84:06:e8:29:2a:37:ab:bb:45:45:fd:39:
82:7c:32:2d:ae:b6:89:36:cd:2b:19:8a:66:93:86:
b3:15:a4:26:b9:44:6a:c7:e9:b8:c2:fd:b7:ae:10:
d7:2c:f8:0d:f9:a3:b2:be:67:de:98:23:87:2c:36:
a7:4a:b2:72:33:7f:25:89:5d:e4:9e:fa:8b:58:df:
d0:bc:9a:7b:ba:83:a8:db:2c:67:94:4a:49:b3:36:
b6:48:d6:b4:52:b0:97:a3:51:48:40:51:00:8f:fd:
4e:33:68:ce:42:be:a8:db:7e:19:c6:c5:6f:1d:d0:
29:ac:f6:83:b5:26:13:c3:f6:e5:20:2e:cd:92:86:
29:18:5a:78:c1:6d:57:75:eb:11:43:0e:b5:16:f9:
0d:2d:c5:bb:e1:d7:30:44:fd:35:c4:56:e5:2a:0e:
8b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:64:88:1F:20:55:D5:D1:B8:D5:1B:02:B0:82:AA:20:91:45:A8:45
X509v3 Authority Key Identifier:
keyid:36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/AmSIHyBV1dG41RsCsIKqIJFFqEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.168.128.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f8:0a:ab:2d:75:f9:14:c4:c3:18:8c:75:e9:4b:f2:89:15:
20:8c:c8:e1:d1:9e:25:8e:28:f8:8a:f6:23:db:00:96:0a:1f:
46:3a:54:e5:03:ba:57:42:da:56:d6:8a:48:f9:dd:42:45:41:
7e:b2:96:5c:ee:5d:85:82:0c:fc:ad:8f:b3:71:da:e5:97:17:
a2:ab:d8:d5:49:50:dd:bf:19:12:48:28:d2:14:af:71:9d:82:
12:cf:d4:39:a4:ad:7d:1f:07:79:97:e2:4a:9c:3f:6e:60:bf:
31:80:3c:47:cf:a0:db:6a:0a:6c:50:6e:3f:9b:f2:15:18:b6:
8a:70:aa:29:8a:41:09:5a:c0:f5:c5:6e:b5:30:91:a6:b4:fb:
3b:82:af:6d:58:d8:55:c8:93:31:a3:9d:d7:d2:2a:05:28:9a:
55:d9:59:7e:7c:d2:6d:56:de:e6:d3:8c:a7:e3:39:32:04:15:
14:67:cd:74:34:d5:56:cc:09:0b:0d:41:f5:de:c6:d4:7e:27:
2f:17:76:45:c1:cb:14:55:b6:f1:f4:7d:df:a9:80:19:7b:7e:
7b:0a:23:13:2b:39:fb:5c:87:a2:0e:fd:dc:e2:32:a4:ee:49:
77:76:bc:00:82:19:06:0d:d9:3c:f6:bf:de:4f:55:64:4c:cd:
d8:cf:66:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:19:42 2026 by rpki-client