Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ATVqZ1RhALmrt63UghVQXpuLTBs.roa
File: ATVqZ1RhALmrt63UghVQXpuLTBs.roa (raw, json)
Hash identifier: tDISTxXSWtlfikDVy4Pv/Bt9npwA1JBXnk9HyNpPETw=
Subject key identifier: 01:35:6A:67:54:61:00:B9:AB:B7:AD:D4:82:15:50:5E:9B:8B:4C:1B
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368E7D85D76F59C146766084B2F028F
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ATVqZ1RhALmrt63UghVQXpuLTBs.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207594
IP address blocks: 194.105.84.0/22 maxlen: 22
194.105.92.0/22 maxlen: 22
212.38.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e7:d8:5d:76:f5:9c:14:67:66:08:4b:2f:02:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01356a67546100b9abb7add48215505e9b8b4c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:85:6d:1c:5b:63:9f:65:84:23:0b:0f:12:
47:2c:5f:05:ef:1d:71:f1:84:7a:fc:05:3c:d6:ba:
be:c9:8b:98:c5:e5:ee:40:0a:9d:eb:ba:22:aa:de:
0b:c5:93:9c:1d:c2:29:7b:16:42:7d:5f:dc:42:58:
73:04:49:86:1a:bc:ec:aa:72:9f:b8:a6:af:11:90:
cd:ee:22:4f:dc:ea:8a:37:1b:62:b1:1f:ff:f5:f9:
4d:f9:c7:55:6f:49:35:68:7e:f7:27:6a:75:a9:71:
84:cb:6f:25:9e:02:bb:aa:e0:30:62:0a:03:5c:e7:
79:f9:9e:bc:11:ce:29:5a:1b:35:11:96:de:3d:b7:
34:4e:06:c5:f8:09:71:c3:cf:1e:10:0c:4f:53:cd:
d4:0c:22:38:66:3a:49:78:75:bf:a7:1a:3f:c1:b2:
2a:24:49:4c:50:fc:c9:dc:d8:9f:bb:f4:0f:71:02:
f1:67:87:11:a2:e6:47:8b:c2:10:ad:13:58:a6:bf:
1c:14:e6:c8:87:78:28:00:62:2c:5d:a9:7c:89:c7:
1b:b9:54:24:bc:8b:ad:74:bc:22:f8:dd:67:2e:81:
60:8b:58:ad:34:d0:6d:5a:f0:bc:d3:10:c4:1b:9f:
54:a3:69:3a:37:c1:0e:c7:92:9e:af:8f:26:64:36:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:35:6A:67:54:61:00:B9:AB:B7:AD:D4:82:15:50:5E:9B:8B:4C:1B
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ATVqZ1RhALmrt63UghVQXpuLTBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.84.0/22
194.105.92.0/22
212.38.83.0/24
Signature Algorithm: sha256WithRSAEncryption
61:de:33:f0:b4:a7:08:61:cf:03:4f:3a:7d:f8:59:b2:01:d5:
3c:40:64:7c:7f:7c:ef:91:5f:33:fa:20:56:c8:2d:12:0d:6d:
1b:46:c7:b0:42:85:c9:f8:d0:ee:e8:d4:7a:2c:eb:2d:66:da:
dc:eb:ae:0f:9a:f8:56:3a:e3:08:ad:d8:98:0d:78:31:c4:8c:
cf:8d:1f:09:dd:bb:94:5b:b6:9e:58:3b:e0:bb:06:be:52:74:
8e:a7:01:97:8f:32:fa:de:56:0e:ce:86:d5:67:da:9f:20:4a:
4a:81:d3:cf:02:ad:cc:8a:ec:d8:86:a3:c1:69:e7:21:c2:0e:
1a:e5:2d:05:c4:cc:08:b5:17:ad:08:a4:f9:74:a5:43:f8:6c:
ae:76:a5:7c:97:a1:cb:35:1f:7a:f3:c2:6a:0e:ae:dd:fe:d5:
50:0d:3b:24:79:92:d9:6d:b0:88:cd:6f:9c:f8:3f:d1:71:d9:
e3:e9:b4:0b:af:bf:8f:1a:9f:4f:23:71:0d:9b:ab:8e:46:b3:
0b:cc:83:77:ac:f2:c3:5d:f8:77:ab:97:59:a5:ba:03:17:69:
be:5a:75:d0:a7:7c:c9:b7:1b:60:4a:f8:80:e4:68:df:fa:f2:
73:e1:0f:80:a6:35:a9:36:29:93:c2:f0:c9:15:29:c7:df:b5:
bb:10:cb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:16:30 2026 by rpki-client