Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/ATVqQtAWTPxoWYA-bA_tqx1t6Zk.roa
File: ATVqQtAWTPxoWYA-bA_tqx1t6Zk.roa (raw, json)
Hash identifier: zHw7xwudgdHmBwfwqxxIlWMsHT8XI3LjE5P7UGbwbrg=
Subject key identifier: 01:35:6A:42:D0:16:4C:FC:68:59:80:3E:6C:0F:ED:AB:1D:6D:E9:99
Certificate issuer: /CN=2ef67b74ce8f2a4ca350163a7b3e13c37173c7ae
Certificate serial: 01A0494EBE706AA737A07A0BF60D8AFE7137
Authority key identifier: 2E:F6:7B:74:CE:8F:2A:4C:A3:50:16:3A:7B:3E:13:C3:71:73:C7:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/ATVqQtAWTPxoWYA-bA_tqx1t6Zk.roa
Signing time: Fri 28 Aug 2026 16:58:12 +0000
ROA not before: Fri 28 Aug 2026 16:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 136.176.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:4e:be:70:6a:a7:37:a0:7a:0b:f6:0d:8a:fe:71:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef67b74ce8f2a4ca350163a7b3e13c37173c7ae
Validity
Not Before: Aug 28 16:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01356a42d0164cfc6859803e6c0fedab1d6de999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:a8:46:ae:25:0a:04:5e:1f:d4:93:c7:51:
1f:09:cc:f1:e8:39:75:f5:2f:c8:61:fe:b9:f3:dd:
52:c1:65:02:cf:53:99:ad:a0:26:75:c2:ed:ec:15:
59:4b:e4:81:ed:74:7d:db:38:52:4c:86:74:a0:c2:
2b:51:70:b4:a0:09:b5:cc:84:8a:dc:5a:e5:d7:77:
1a:e1:58:97:47:38:2c:f3:b7:f0:97:ae:30:7d:42:
80:46:03:5e:18:ab:f7:b8:0a:27:81:83:7f:5e:9d:
2d:b5:f8:d7:2a:52:02:7a:4e:a9:19:5d:ba:8d:58:
59:cc:84:66:7e:fd:49:32:b7:14:be:ea:33:b5:59:
a9:c1:be:92:5a:83:31:14:47:b1:a9:4b:81:f3:4b:
d3:79:f1:34:d9:38:e1:d8:a3:41:cc:fa:08:13:01:
28:2c:2b:2f:0f:4c:35:36:ac:b2:5d:81:20:d9:7d:
30:32:c1:65:ab:fd:66:3a:ad:d3:e4:0a:b6:71:0e:
a6:e1:b1:79:85:a9:d0:94:5d:09:06:e7:fd:18:3f:
3b:80:9a:ca:c6:e0:b7:fe:55:fa:21:f9:2e:de:ca:
40:d2:6d:1b:db:3b:27:52:57:da:51:5c:d8:93:b6:
4f:8b:9b:44:7f:72:d5:64:55:a8:c6:5a:55:34:96:
65:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:35:6A:42:D0:16:4C:FC:68:59:80:3E:6C:0F:ED:AB:1D:6D:E9:99
X509v3 Authority Key Identifier:
keyid:2E:F6:7B:74:CE:8F:2A:4C:A3:50:16:3A:7B:3E:13:C3:71:73:C7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/ATVqQtAWTPxoWYA-bA_tqx1t6Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.176.193.0/24
Signature Algorithm: sha256WithRSAEncryption
07:90:5f:50:01:84:c9:9e:2c:59:d3:32:e7:05:39:59:ed:ec:
e3:0c:44:12:ea:c6:a0:e7:a6:6a:af:5f:1a:5d:ce:99:83:3d:
a0:87:80:54:17:55:46:0b:b6:fa:e6:89:f6:25:6b:06:d1:a8:
06:e7:a0:1f:64:d2:a3:3c:f6:b4:f5:0d:8d:05:a3:dd:bb:b9:
98:c2:36:4d:0b:e7:97:86:54:39:e8:34:f7:ae:2c:a9:f4:ca:
a0:3e:d8:1c:e3:88:92:57:1c:0e:94:21:32:47:a0:8f:32:bd:
d5:da:7b:e7:1e:28:ef:24:da:23:5b:f3:99:ff:1a:dc:15:d0:
5d:0b:06:d4:28:13:fe:94:39:f0:78:c2:54:e0:72:c8:73:86:
cb:00:61:fa:6a:3c:aa:46:70:a1:07:f1:86:b6:56:12:1a:bb:
33:56:62:81:cc:ad:b1:fc:c9:00:22:55:4d:e3:fa:fb:d1:fb:
3d:49:29:f3:7c:39:a2:c4:ee:44:77:a4:13:c2:e3:2c:ff:16:
7c:c5:cc:61:1e:58:33:bc:6b:90:60:70:cf:08:a0:3e:36:88:
65:97:2b:27:4a:31:87:fc:98:1b:27:99:1d:84:f2:3f:72:24:
27:22:df:c2:fe:d8:74:cc:7f:af:09:90:32:a6:01:53:07:f4:
59:43:e4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:43:47 2026 by rpki-client