Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AfVejoAIy_Sc6KAYsASlVErZ-hw.roa
File: AfVejoAIy_Sc6KAYsASlVErZ-hw.roa (raw, json)
Hash identifier: 3vJCMl12JDK5m3yBpv4/aULqVm1J/izMF+zFhKMtPpQ=
Subject key identifier: 01:F5:5E:8E:80:08:CB:F4:9C:E8:A0:18:B0:04:A5:54:4A:D9:FA:1C
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368EACEB3A1F9C4E1CD7346F5FC4792
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AfVejoAIy_Sc6KAYsASlVErZ-hw.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208690
IP address blocks: 212.38.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ea:ce:b3:a1:f9:c4:e1:cd:73:46:f5:fc:47:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01f55e8e8008cbf49ce8a018b004a5544ad9fa1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1c:6a:d9:c8:ed:83:cb:8d:ab:a0:42:08:f1:
fc:af:06:bd:30:22:b4:c5:b1:63:2c:3a:6c:7a:04:
93:a8:78:5f:3c:92:30:36:d4:75:82:86:c0:f2:c9:
c3:a8:3c:0c:76:ef:d0:f3:aa:37:05:07:8b:53:6f:
58:bb:42:a4:ae:ad:2d:85:3b:10:0e:86:04:cc:23:
76:ec:07:a9:15:fe:4b:27:a3:1c:ba:98:f4:be:42:
41:68:42:c9:0d:e8:a9:ee:59:99:b3:ee:8d:d0:40:
f3:fe:39:c4:64:04:ab:36:ba:6f:59:07:a1:d6:6e:
e7:5f:a4:7c:05:6e:a5:1c:f6:c6:5c:4e:60:49:b3:
32:1e:4b:e0:fd:7a:71:bf:6b:48:d1:61:e6:fc:be:
b6:45:cf:21:cc:57:0d:13:e5:95:e1:d1:80:e9:c1:
44:7e:79:54:13:84:42:b8:3c:7a:6c:6f:b0:ba:f3:
44:11:6b:86:73:b1:1e:4b:01:18:22:19:f0:82:74:
8f:53:2d:99:46:41:e8:cd:4c:be:de:68:4a:73:ea:
60:e0:6c:d3:c0:c7:cd:a2:67:3a:16:bb:53:d9:fc:
cc:97:8b:a4:a2:2a:5b:07:95:67:fd:92:c4:41:34:
28:d2:0a:98:05:83:4c:5d:6b:94:26:ae:1d:16:17:
32:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F5:5E:8E:80:08:CB:F4:9C:E8:A0:18:B0:04:A5:54:4A:D9:FA:1C
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AfVejoAIy_Sc6KAYsASlVErZ-hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.38.89.0/24
Signature Algorithm: sha256WithRSAEncryption
57:43:16:0f:a2:24:56:ef:09:a3:c6:0b:73:06:ce:d1:21:bd:
e0:4c:47:de:2a:ea:ce:4c:29:e2:03:d1:fa:ab:ce:b1:fa:21:
89:0f:0e:fa:a4:d9:50:74:9f:93:23:4a:2c:07:cf:e0:49:04:
0a:de:ad:15:70:6c:a2:3a:0d:a9:74:7c:5f:4f:79:0c:cc:4b:
fa:8b:6b:91:90:69:31:40:11:91:1b:f7:a0:f5:75:76:e0:51:
01:9b:9a:1f:3d:aa:50:fa:0a:fc:5b:58:e2:a7:e5:bd:30:f4:
ce:78:61:c4:e9:60:d6:f9:d3:53:1e:69:a6:a9:43:6c:fc:ef:
3d:26:7d:f5:45:61:62:57:40:51:9d:0e:1a:48:10:1d:3c:f7:
aa:9c:07:c3:fa:40:28:39:ba:a2:0e:0e:0e:c5:95:6e:bf:aa:
d0:7b:b1:ae:24:46:ff:bd:17:00:f5:c7:6f:ce:06:f0:6f:56:
02:b4:24:1a:d1:53:69:dd:33:b1:a6:47:8b:f0:72:48:37:2b:
84:76:68:b1:86:11:b0:6a:62:93:fa:d4:34:c6:c8:79:b0:e3:
fc:0e:f3:ca:32:eb:b5:c5:56:86:b3:38:5d:ae:40:dc:45:57:
2e:2e:32:2a:7c:ce:41:3e:0b:e8:5d:ee:40:6a:e3:13:57:bb:
7a:1c:34:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:13 2026 by rpki-client