Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/afrSIDvtgaoiDXDgWFOH0281IpU.roa
File: afrSIDvtgaoiDXDgWFOH0281IpU.roa (raw, json)
Hash identifier: /V6lI2C5Ozq98zclXOAylMB9OqI4iee+FyUiQ1dnijM=
Subject key identifier: 69:FA:D2:20:3B:ED:81:AA:22:0D:70:E0:58:53:87:D3:6F:35:22:95
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01A04777D06BE744D225B90C9E9AE124F5DE
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/afrSIDvtgaoiDXDgWFOH0281IpU.roa
Signing time: Fri 28 Aug 2026 08:23:49 +0000
ROA not before: Fri 28 Aug 2026 08:23:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218843
IP address blocks: 2a03:5840:160::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 31 Aug 2026 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:77:d0:6b:e7:44:d2:25:b9:0c:9e:9a:e1:24:f5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Aug 28 08:23:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69fad2203bed81aa220d70e0585387d36f352295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:46:1b:e8:97:9c:da:54:e8:64:8a:b5:c0:
14:00:9e:8b:02:2f:3f:f2:f6:e4:30:49:54:e3:e1:
13:fa:37:3e:66:05:46:c7:45:86:f1:60:7e:92:04:
92:e9:01:13:fd:e6:54:b2:41:01:64:df:f3:b5:9a:
24:01:1a:e6:a9:a0:56:1f:f7:24:48:3c:03:46:fa:
19:69:0d:1e:6f:14:1e:d7:2a:e9:8c:04:e4:58:70:
50:d1:6e:5a:6c:01:db:f7:d1:f6:f2:a2:d2:d1:06:
0d:ac:1b:90:63:8d:06:0c:76:7e:68:0c:21:02:99:
74:ec:6e:0e:7b:e4:1d:1a:f0:35:a6:4e:35:93:cf:
60:47:94:0c:30:09:35:18:1e:2e:79:dc:27:d8:46:
06:fd:c2:e9:40:9e:c9:2c:f6:ee:3c:5e:61:a2:c8:
6a:9c:b4:06:ae:66:40:89:83:3a:8c:76:a0:ef:ae:
1c:79:29:2a:8e:1c:4e:e6:e6:b5:8b:ce:fb:ee:e5:
23:18:4a:ff:90:bd:d8:59:2c:f4:d6:d8:a8:4f:e6:
a9:5e:cf:0d:dc:35:02:1e:12:72:24:95:9d:d2:7a:
9c:05:56:b0:25:d4:b1:44:a9:f4:82:8b:b7:e2:5b:
84:08:79:6d:5b:2f:e7:e2:25:ea:90:81:02:32:d4:
05:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FA:D2:20:3B:ED:81:AA:22:0D:70:E0:58:53:87:D3:6F:35:22:95
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/afrSIDvtgaoiDXDgWFOH0281IpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:160::/48
Signature Algorithm: sha256WithRSAEncryption
6a:f8:4b:3f:93:60:ad:44:02:13:21:2e:86:fb:e4:ef:46:83:
7b:40:c9:a6:82:57:8c:bb:07:c0:25:bb:17:97:26:6a:fa:50:
cc:52:16:47:f3:34:56:00:8d:bf:0a:36:05:0f:47:b0:00:e2:
34:f9:7e:30:f3:84:6e:dc:00:ba:40:49:3a:e7:8e:ce:fe:c6:
65:1d:4f:a5:94:54:d5:8d:76:59:2d:99:f7:ec:12:34:9d:55:
f2:71:e8:26:78:68:7a:00:f3:a3:de:14:d6:85:05:d5:30:9d:
f1:4b:94:34:50:a2:97:f0:e2:c7:fe:60:1a:7b:67:be:f1:5e:
29:a3:42:30:11:bd:84:58:a8:bb:e6:33:2b:6a:8a:b0:d9:7c:
70:87:7f:f5:4a:05:3c:fa:d6:25:21:83:d7:b6:b9:c3:bb:33:
ee:82:3e:c1:fd:a9:d7:c2:dc:4a:e8:43:b1:d5:e9:7a:eb:c8:
7e:f1:4e:a9:4c:44:0e:8c:65:b4:b5:08:ba:3c:1f:d8:e2:4f:
58:a2:2d:9f:18:c5:07:5b:8d:e0:a4:ef:3b:a6:c5:7a:23:f7:
57:82:f3:59:a3:c7:61:31:5e:ba:69:19:be:89:c6:6b:bc:4f:
b3:c7:30:b9:ac:21:eb:dc:29:18:9c:4a:d5:fc:7b:8a:80:61:
a9:02:a8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 03:15:28 2026 by rpki-client