Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/rxBMafXmJSrXR8vDOASdZ176CWs.roa
File: rxBMafXmJSrXR8vDOASdZ176CWs.roa (raw, json)
Hash identifier: UwSN/p8tMYJe6IO6Z1F6/UCLvX0zPceoWwIqurlhRz4=
Subject key identifier: AF:10:4C:69:F5:E6:25:2A:D7:47:CB:C3:38:04:9D:67:5E:FA:09:6B
Certificate issuer: /CN=a3ede73bde6cfc7d768eb09558f4ec79fb068805
Certificate serial: 019FE080E434F54D7C0BD82A6CF0FE39B386
Authority key identifier: A3:ED:E7:3B:DE:6C:FC:7D:76:8E:B0:95:58:F4:EC:79:FB:06:88:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-3nO95s_H12jrCVWPTsefsGiAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/rxBMafXmJSrXR8vDOASdZ176CWs.roa
Signing time: Sat 08 Aug 2026 08:32:51 +0000
ROA not before: Sat 08 Aug 2026 08:32:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208732
IP address blocks: 45.87.32.0/22 maxlen: 22
2a0e:ef80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-3nO95s_H12jrCVWPTsefsGiAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:80:e4:34:f5:4d:7c:0b:d8:2a:6c:f0:fe:39:b3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ede73bde6cfc7d768eb09558f4ec79fb068805
Validity
Not Before: Aug 8 08:32:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af104c69f5e6252ad747cbc338049d675efa096b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:30:51:28:6c:9d:7b:28:5b:a2:cd:75:02:
6a:37:f2:86:4c:53:ec:87:c7:56:51:31:d2:13:9f:
43:70:42:b7:5a:1c:e5:a1:73:e8:08:05:fd:ec:c3:
44:7d:39:e4:e1:c5:6d:9c:06:57:d5:c3:a8:62:e4:
d1:55:cc:14:47:af:63:b5:87:ee:db:98:64:05:f7:
d8:28:c6:c2:2b:99:15:99:79:5e:81:47:b3:65:14:
17:eb:d9:82:44:12:3d:fe:06:fc:93:4d:2d:1d:60:
2f:8f:e0:51:13:bf:ef:ce:19:54:92:29:47:78:20:
75:09:8a:64:e7:5b:b2:8e:77:50:63:0b:0e:df:85:
0e:2d:3f:0b:8b:6a:db:aa:2d:66:34:01:4e:67:18:
33:37:9f:5d:5a:54:88:dd:2d:9c:a8:c9:93:e1:75:
f2:80:5b:0e:e8:92:5c:ce:17:29:16:67:d8:bb:53:
2d:92:cc:86:db:20:29:6a:80:cc:96:b2:b6:20:73:
7d:6a:b3:0b:81:14:06:54:cf:ad:4a:fa:42:5c:58:
bf:88:a1:96:e6:25:80:7a:07:bf:16:f6:9a:94:3b:
5f:5e:34:c5:11:3f:48:df:5f:62:a1:ae:00:b0:5a:
0c:76:59:fe:f7:cc:59:42:3b:03:5b:d8:28:30:8a:
02:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:10:4C:69:F5:E6:25:2A:D7:47:CB:C3:38:04:9D:67:5E:FA:09:6B
X509v3 Authority Key Identifier:
keyid:A3:ED:E7:3B:DE:6C:FC:7D:76:8E:B0:95:58:F4:EC:79:FB:06:88:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-3nO95s_H12jrCVWPTsefsGiAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/rxBMafXmJSrXR8vDOASdZ176CWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.32.0/22
IPv6:
2a0e:ef80::/29
Signature Algorithm: sha256WithRSAEncryption
2b:02:9c:ab:ac:27:26:47:97:51:78:89:c7:2f:6d:03:26:d0:
fa:db:a3:94:5b:0b:46:0a:1c:1a:e1:f1:66:ba:64:66:5b:e3:
29:c4:73:a7:30:a4:51:76:0c:1f:09:d1:fb:8f:81:be:71:85:
f6:9e:fc:a9:28:41:78:b4:64:2b:26:5c:7a:62:37:ab:db:0e:
5f:66:65:3c:36:54:79:61:5e:f9:b3:d0:be:f5:65:42:a5:38:
b6:ca:4e:15:81:19:d9:79:e3:fe:18:6c:4d:08:c1:0c:7b:10:
9d:70:bc:75:53:86:d4:af:49:11:ee:ef:d7:4a:dd:de:1b:f1:
36:86:d5:6b:db:c4:15:d8:3e:4e:e0:57:3e:02:b8:ae:98:1d:
3a:a0:47:c3:48:de:5b:fe:1d:f5:e3:ad:a0:26:05:9c:3a:a1:
35:e3:68:d3:05:0e:22:50:f0:e1:26:f4:a9:d3:86:22:45:af:
8f:b3:22:88:88:f4:ee:c6:4f:e2:20:5a:51:cf:03:8e:45:ef:
2a:89:44:9c:4e:99:d4:b4:c0:78:b8:d4:b9:50:8c:19:3c:c6:
ab:68:cb:8f:6e:31:28:4e:bf:b8:b0:92:86:c1:b1:1f:42:ca:
4d:74:90:f3:ee:6b:96:60:81:95:32:23:4c:91:1f:0d:d8:cb:
a3:59:f7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 21:15:04 2026 by rpki-client