Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/ro3d1JmzAdukByESOlpeuF0zW24.roa
File: ro3d1JmzAdukByESOlpeuF0zW24.roa (raw, json)
Hash identifier: gokr397VxWXE8kc3sUh9UfgOu6V2S+kyKdIbZvikusY=
Subject key identifier: AE:8D:DD:D4:99:B3:01:DB:A4:07:21:12:3A:5A:5E:B8:5D:33:5B:6E
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 019F6B163AF44259DB7096F52E78FCEE2989
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/ro3d1JmzAdukByESOlpeuF0zW24.roa
Signing time: Thu 16 Jul 2026 13:20:46 +0000
ROA not before: Thu 16 Jul 2026 13:20:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211768
IP address blocks: 45.83.160.0/22 maxlen: 32
185.86.188.0/22 maxlen: 32
185.124.192.0/22 maxlen: 32
193.19.128.0/22 maxlen: 32
193.148.188.0/24 maxlen: 32
193.148.190.0/24 maxlen: 32
2a06:b500::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:16:3a:f4:42:59:db:70:96:f5:2e:78:fc:ee:29:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Jul 16 13:20:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae8dddd499b301dba40721123a5a5eb85d335b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c4:a9:16:12:9c:c5:34:b8:0c:5c:24:9c:1b:
d1:eb:b1:a4:3a:de:43:22:2b:0e:6b:2e:03:ac:bd:
dc:b6:93:6f:e6:80:09:04:f7:02:c3:5e:4e:e7:10:
c9:41:ba:0a:e5:3b:37:a6:4b:9d:7b:66:2e:ab:11:
bb:b5:24:54:fc:c3:f6:b7:3e:84:a1:3a:dc:e6:48:
3d:e0:16:0d:63:9c:25:2a:06:78:6f:0c:e0:e7:3a:
fc:3d:70:da:b4:20:f6:8b:cf:de:1b:ee:b9:80:92:
e7:ea:40:10:19:2e:73:e9:90:7c:53:5d:7c:c4:bf:
ce:02:62:86:cb:6b:7f:7e:8e:38:4f:0f:63:3c:20:
ca:2d:45:66:95:85:4c:35:81:ef:ea:09:67:98:a8:
bc:78:c8:eb:e9:67:ca:0d:6f:bf:52:1b:dc:82:5d:
c3:74:70:8a:ef:93:c6:d2:14:6e:d2:d6:c2:6a:4a:
9f:e5:9e:13:15:bc:fd:c6:bd:eb:83:f8:9d:8d:65:
83:e3:19:54:ef:06:6c:c7:11:a2:b6:b4:13:32:9b:
fb:32:1c:2d:6d:f2:dd:a1:9b:66:70:1e:9a:2b:4f:
b6:57:46:fa:38:44:4e:46:1d:8b:2b:94:21:57:a9:
ae:45:92:c6:a8:f0:22:7d:0b:fd:90:6e:07:af:69:
88:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8D:DD:D4:99:B3:01:DB:A4:07:21:12:3A:5A:5E:B8:5D:33:5B:6E
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/ro3d1JmzAdukByESOlpeuF0zW24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.160.0/22
185.86.188.0/22
185.124.192.0/22
193.19.128.0/22
193.148.188.0/24
193.148.190.0/24
IPv6:
2a06:b500::/29
Signature Algorithm: sha256WithRSAEncryption
2c:87:b7:16:0b:26:7d:88:f4:13:c7:a4:13:e9:88:76:f1:c1:
aa:10:a4:f8:0d:66:7f:4d:54:d1:3d:0e:72:b9:f8:f1:59:83:
06:38:12:38:a9:52:dc:75:8d:5c:ba:c1:05:6f:4e:a2:58:76:
57:56:83:f4:be:c8:6a:95:db:31:3f:4f:a2:c7:63:2d:71:1c:
11:fb:60:c9:96:12:4c:38:e8:e6:18:06:6d:4d:1b:d9:b3:65:
a2:ac:de:3d:2c:d2:7b:b1:5f:cd:a7:8c:d9:e3:00:bc:e1:3b:
fd:b5:bc:4a:da:c6:7a:98:20:bf:8f:f4:1a:94:83:85:dd:bf:
be:f8:64:15:91:00:df:3b:13:fb:db:64:22:c1:4e:db:4a:08:
67:76:c2:31:a6:d3:4a:b7:37:df:a5:64:3b:14:b8:c3:85:78:
72:d4:7a:75:ce:20:1b:ec:4a:64:19:c7:f9:56:d4:78:cc:45:
68:5d:cc:7e:1a:6b:5d:ce:fc:f6:ba:a4:8a:c8:95:3b:fb:76:
a5:f0:e2:04:af:e0:3b:0d:b4:23:31:90:ee:85:ff:7b:e4:8a:
78:a3:ad:46:3a:fa:5b:99:1f:c8:66:14:87:18:7f:37:0a:83:
34:79:29:f4:7b:13:8f:e7:34:16:6d:ee:fe:6f:f4:46:23:85:
9c:df:b5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:00:54 2026 by rpki-client