Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/AwudNOQyHfmA7TMUOzDc2tq910w.roa
File: AwudNOQyHfmA7TMUOzDc2tq910w.roa (raw, json)
Hash identifier: 80zVOfWCTytG32getEJjNdoHljGnNkMJGRPUfPx/kUU=
Subject key identifier: 03:0B:9D:34:E4:32:1D:F9:80:ED:33:14:3B:30:DC:DA:DA:BD:D7:4C
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019FB3BB78E0AC9FD96375EB9CACD037A87F
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/AwudNOQyHfmA7TMUOzDc2tq910w.roa
Signing time: Thu 30 Jul 2026 15:53:55 +0000
ROA not before: Thu 30 Jul 2026 15:53:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219095
IP address blocks: 132.243.66.0/24 maxlen: 24
132.243.67.0/24 maxlen: 24
212.87.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:bb:78:e0:ac:9f:d9:63:75:eb:9c:ac:d0:37:a8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jul 30 15:53:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=030b9d34e4321df980ed33143b30dcdadabdd74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:b3:18:cc:bb:44:c0:88:86:ee:cb:48:aa:
1b:03:1e:c4:d4:7a:48:45:3f:3e:28:cb:40:cf:9d:
00:29:f9:90:96:1c:6e:d8:77:a2:78:d4:1c:58:fd:
be:75:fa:20:17:d8:f2:fa:57:04:19:77:86:37:8e:
f5:c8:75:89:f9:3a:07:39:e6:b8:82:dc:6a:4f:a1:
69:e6:9e:f8:fa:6a:d2:71:f6:2d:e6:96:5f:5e:d8:
f4:54:78:4a:6d:ee:ad:2a:ef:c0:24:0d:71:08:90:
4d:2b:6c:4c:e7:36:14:59:f6:f9:41:2e:88:a9:3e:
30:df:99:a7:59:32:a7:25:4d:6b:50:5b:dc:f7:05:
de:0e:e0:d8:46:59:d5:6f:94:38:44:85:09:97:2d:
08:10:06:ec:76:29:fc:9c:95:6e:5e:a0:e2:5c:fe:
4b:3a:25:0d:74:9e:17:9b:4d:94:b5:d5:7a:6d:57:
17:72:13:62:17:29:df:b2:2e:fc:a2:04:13:a6:ff:
6c:2d:4c:a9:d7:20:d8:f0:11:65:bf:76:af:f8:6b:
4f:cf:15:a6:80:27:71:01:33:55:80:a5:fb:9c:57:
26:e8:da:78:28:c2:2f:de:4a:5a:26:69:ef:0f:50:
dc:ed:c1:d5:06:06:50:fb:f7:f1:50:7e:6f:48:b3:
d3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0B:9D:34:E4:32:1D:F9:80:ED:33:14:3B:30:DC:DA:DA:BD:D7:4C
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/AwudNOQyHfmA7TMUOzDc2tq910w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.66.0/23
212.87.190.0/24
Signature Algorithm: sha256WithRSAEncryption
30:9c:91:78:b9:3b:3f:f2:60:1d:a7:90:ef:4c:ea:e1:ec:5a:
61:78:7a:8a:04:15:54:25:44:d5:ef:90:59:d3:6b:15:9a:16:
47:4a:a6:cc:64:cd:53:51:0a:22:dd:61:85:09:72:c8:30:58:
1d:8a:be:4f:0a:69:01:ac:83:b7:7e:08:99:a0:8d:b3:a3:ed:
1e:c4:d0:07:2c:7e:24:47:63:db:d3:5d:72:74:a3:a2:b3:73:
08:e8:90:e3:ed:88:50:71:90:87:fd:fa:42:ae:67:95:ab:3a:
95:d8:d0:1c:fe:d8:27:03:03:f4:5a:5d:2d:fa:f6:97:a0:49:
80:8b:f3:0c:8a:16:33:93:c1:c1:51:cb:ab:9a:47:ed:21:88:
e2:cd:b8:b1:94:33:83:a5:d9:5f:0e:62:08:d5:21:19:bf:41:
89:96:30:e1:7f:59:d8:c6:bb:17:9b:99:93:29:aa:a8:bc:d2:
fd:00:e7:20:36:19:aa:2a:a2:89:10:06:e2:e0:a6:4f:b2:6d:
48:41:89:bf:6f:51:72:8b:ae:99:f0:b3:9e:cf:dc:86:bd:21:
36:38:6b:a8:23:ed:46:02:2a:47:43:2b:a6:19:83:0f:a1:72:
64:20:8b:1c:d9:60:40:8e:b0:13:db:8b:c2:90:65:0d:00:f7:
0d:29:3d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:18:58 2026 by rpki-client