Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/AESpqkI4WTe7jx-yC_HTg6Sh9ok.roa
File: AESpqkI4WTe7jx-yC_HTg6Sh9ok.roa (raw, json)
Hash identifier: CCwkANLmNhgbzDwGP6j/uZpNlT/AEM2EMbdVhaDuVsM=
Subject key identifier: 00:44:A9:AA:42:38:59:37:BB:8F:1F:B2:0B:F1:D3:83:A4:A1:F6:89
Certificate issuer: /CN=ef786b53e64a240e8884ebc77a12ec1007cc9e7d
Certificate serial: 019F23686FAC6B5EDEA8FC555724CA4F8C97
Authority key identifier: EF:78:6B:53:E6:4A:24:0E:88:84:EB:C7:7A:12:EC:10:07:CC:9E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/AESpqkI4WTe7jx-yC_HTg6Sh9ok.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48503
IP address blocks: 140.150.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6f:ac:6b:5e:de:a8:fc:55:57:24:ca:4f:8c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef786b53e64a240e8884ebc77a12ec1007cc9e7d
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0044a9aa42385937bb8f1fb20bf1d383a4a1f689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:b0:f4:09:4a:8d:86:8b:9e:a1:ce:95:fd:
61:b4:96:92:4f:5c:50:dc:a3:85:8e:9a:4f:11:93:
d0:7e:b9:6a:d2:ca:da:07:3b:fb:4c:af:73:77:ed:
a5:76:ae:66:da:80:ac:da:65:25:f4:3b:4a:6d:2f:
1b:c9:ca:c2:b8:7f:9b:57:9c:c0:7b:e8:75:4b:ab:
53:d4:09:9d:ee:9a:d7:70:5e:6f:09:8d:6c:f5:4d:
9f:5a:de:e2:e4:ca:40:f6:5b:90:34:b6:f3:d2:a4:
b6:c3:b0:94:a5:6c:8b:eb:5e:43:ac:33:0e:c8:8d:
c4:0a:e4:90:07:39:15:4e:43:fb:0d:67:b1:fd:2b:
f4:92:96:ac:6a:ce:5d:54:f1:6f:9f:ec:ae:24:dc:
80:5b:c7:49:29:a5:1a:87:31:6d:69:d3:29:59:59:
e1:62:f1:c0:c9:a3:d4:9d:f2:5c:b3:ed:fd:ce:1b:
61:6c:a2:f4:7b:32:3a:74:4f:8f:f4:d4:90:59:cb:
c4:e6:71:85:54:72:85:a0:cc:ae:d0:a1:10:9c:2f:
14:90:59:91:5c:c2:c9:b3:b4:4d:98:fc:bd:0a:84:
51:ad:85:78:af:d5:7f:30:c4:8f:e6:b0:64:86:00:
1e:64:b5:7e:1a:56:67:9f:2d:65:c3:c1:0d:86:d1:
27:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:44:A9:AA:42:38:59:37:BB:8F:1F:B2:0B:F1:D3:83:A4:A1:F6:89
X509v3 Authority Key Identifier:
keyid:EF:78:6B:53:E6:4A:24:0E:88:84:EB:C7:7A:12:EC:10:07:CC:9E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/AESpqkI4WTe7jx-yC_HTg6Sh9ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:54:0f:eb:ee:51:3e:6b:f5:d3:56:68:2d:40:d1:4c:1c:f5:
5b:01:4f:44:6d:cc:d2:42:43:bf:b6:c0:84:85:26:f3:3c:50:
5d:1b:fd:81:b8:bc:32:aa:f1:fe:55:9c:53:42:86:73:b8:6b:
d4:0f:11:af:80:6a:e9:d9:93:be:1b:01:85:27:52:77:47:09:
99:bf:ab:2c:6f:21:6f:43:3b:78:a5:21:65:3e:04:01:18:32:
bf:84:11:9d:4d:35:54:ca:21:47:4d:31:46:19:23:0a:97:a3:
1c:17:8d:22:7e:66:de:1e:0c:9f:97:5a:28:ce:d5:c8:fa:e3:
39:94:5e:35:65:e0:18:2f:1a:8d:c7:c1:0a:1a:cc:df:b0:95:
74:7b:f4:5e:9d:b5:dc:26:e5:8f:17:07:1c:c5:59:b8:f8:e4:
c7:ab:d4:0b:69:2d:1c:52:39:55:b9:66:63:0b:23:96:9d:76:
18:84:7f:6f:43:e9:09:01:07:df:b2:5a:a2:ff:09:93:45:a9:
46:b9:56:7a:ec:c5:4c:9b:db:5d:9d:db:26:23:e9:37:8c:c3:
4e:c8:76:40:24:9d:d8:67:67:2e:e1:7c:38:bc:27:9c:f3:dc:
d3:96:d0:21:b9:de:ee:76:a1:dd:e2:ac:82:5d:c1:72:d3:1a:
37:61:b9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:45:46 2026 by rpki-client