Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/AhMkHazE-91WYq1pzL4rD-YgpOY.roa
File: AhMkHazE-91WYq1pzL4rD-YgpOY.roa (raw, json)
Hash identifier: N7RR15LWLaA1GWhDaUwnFbFOrZQPw3IJjIesRqmsD5I=
Subject key identifier: 02:13:24:1D:AC:C4:FB:DD:56:62:AD:69:CC:BE:2B:0F:E6:20:A4:E6
Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477
Certificate serial: 019F236947FA207FF8913CEFF23A453B0B0E
Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/AhMkHazE-91WYq1pzL4rD-YgpOY.roa
Signing time: Thu 02 Jul 2026 15:18:50 +0000
ROA not before: Thu 02 Jul 2026 15:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215415
IP address blocks: 185.229.240.0/24 maxlen: 24
185.229.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:47:fa:20:7f:f8:91:3c:ef:f2:3a:45:3b:0b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477
Validity
Not Before: Jul 2 15:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0213241dacc4fbdd5662ad69ccbe2b0fe620a4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:91:b4:5d:71:b6:be:30:f6:53:9f:85:67:
ea:31:44:e3:d3:e7:fb:3a:34:ae:8e:3c:00:fd:24:
14:55:7c:55:79:85:26:d2:20:b4:68:b1:f1:cf:3e:
f5:c2:1e:df:1b:87:49:6e:0e:61:66:49:4f:74:94:
1f:f4:7c:8b:f9:f8:07:3b:a4:df:a9:24:5c:e4:d6:
6a:61:ec:cf:60:39:bf:05:5d:e2:5c:b5:f7:93:49:
04:4c:55:41:10:f6:7e:33:97:91:a6:dc:6e:68:ff:
2e:47:fc:9d:25:8f:28:ae:f6:fc:61:19:27:73:34:
f2:3b:a3:cf:be:8e:87:eb:0d:e2:9b:e6:c4:31:12:
86:de:74:95:62:c9:00:b2:06:e2:14:c2:fa:b3:2e:
65:cf:3b:3c:ec:db:22:1b:eb:6a:5f:1c:27:05:d9:
b4:54:02:86:a5:2d:09:ec:3c:71:86:07:4a:7d:b0:
79:3f:2c:b9:1f:6d:f8:64:bb:77:ce:a6:3f:06:87:
e4:57:a0:b6:d7:2e:88:24:f9:6a:82:b8:25:b7:7f:
16:1c:7e:4b:05:b7:dd:18:36:08:ed:9d:3c:56:e8:
c3:7e:d8:2d:20:b0:cb:81:0d:d4:6b:b8:0d:ae:08:
1c:96:81:c6:fe:b2:46:da:d0:e6:90:40:a8:3b:f3:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:13:24:1D:AC:C4:FB:DD:56:62:AD:69:CC:BE:2B:0F:E6:20:A4:E6
X509v3 Authority Key Identifier:
keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/AhMkHazE-91WYq1pzL4rD-YgpOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.240.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:21:ae:fc:3e:25:5b:e2:16:72:7d:ac:4a:35:53:d7:3b:cd:
00:2f:db:78:70:91:1a:1b:a5:a5:3c:3d:aa:8c:34:a9:a6:a8:
04:19:72:aa:5c:d5:f2:7b:1c:ff:08:30:e2:40:d7:da:01:51:
3e:7a:19:56:bb:14:85:94:5a:ef:01:34:46:a2:fe:97:cf:84:
d0:9e:67:f9:8d:54:7b:dc:70:9b:21:13:b4:6a:23:48:90:3e:
41:f3:c4:e8:89:9f:89:8d:68:9a:6b:e7:a4:17:25:ab:81:24:
7a:e8:a1:fd:fd:3e:7d:16:65:b4:58:7c:2d:61:18:b2:0a:f3:
bf:c7:2d:bb:c2:cb:bb:6f:5e:14:cf:df:e6:91:ca:4f:dd:2f:
21:b9:3c:d4:3c:e5:9e:86:6a:54:60:11:3f:68:25:bf:4e:59:
4b:70:f3:ae:02:fb:41:33:ca:c2:a1:d7:77:79:30:f0:d5:73:
78:a5:91:84:b0:d1:87:c1:02:e3:3b:48:35:49:3a:8a:dd:c5:
c0:34:49:bc:7b:a6:f3:4e:32:d1:c1:7e:61:70:22:26:d2:9c:
13:e4:d2:a6:f1:71:ec:13:8f:b5:e0:5f:da:9f:2d:bf:6a:d6:
19:37:a7:9e:dc:48:36:42:3e:7a:e0:58:d5:9d:b1:cd:33:5a:
52:d2:19:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:59:47 2026 by rpki-client