Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/aBkGIeHaROiVyf6y4zQUYjIbWLo.roa
File: aBkGIeHaROiVyf6y4zQUYjIbWLo.roa (raw, json)
Hash identifier: QrqArFPVF1/qMWn5zOGo4TUbL6WlcsofMlRqGn2AHJw=
Subject key identifier: 68:19:06:21:E1:DA:44:E8:95:C9:FE:B2:E3:34:14:62:32:1B:58:BA
Certificate issuer: /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial: 019F02AC555A32C40E07B7751ED7003D25BD
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/aBkGIeHaROiVyf6y4zQUYjIbWLo.roa
Signing time: Fri 26 Jun 2026 06:44:36 +0000
ROA not before: Fri 26 Jun 2026 06:44:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201262
IP address blocks: 185.52.192.0/22 maxlen: 24
199.195.56.0/22 maxlen: 24
199.195.58.0/24 maxlen: 24
2a01:9aa0:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:02:ac:55:5a:32:c4:0e:07:b7:75:1e:d7:00:3d:25:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Validity
Not Before: Jun 26 06:44:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68190621e1da44e895c9feb2e3341462321b58ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:ec:0b:0f:af:1e:1a:8f:cf:0c:78:f6:6e:
91:bc:8c:e6:28:18:48:7b:bc:25:d6:d5:d0:5f:8f:
4f:fd:75:9b:9e:93:8d:1b:f6:45:f6:5c:68:c5:32:
e2:1e:a2:d0:5f:0f:a6:9a:a0:70:3d:21:10:af:80:
7a:63:d6:f4:ea:c4:41:97:c2:91:96:a2:f2:5e:de:
0f:2e:b8:71:44:11:37:6b:a4:af:5c:e0:9e:a6:c0:
83:0f:df:6f:4e:38:da:5f:f3:14:5a:a6:32:9f:fb:
5b:a7:79:43:32:e4:46:64:8a:ea:d1:98:5b:e3:40:
32:60:c5:5a:96:37:ff:3e:c7:08:ff:2f:eb:43:f3:
f3:b5:92:fc:30:25:68:14:d2:92:0d:f1:2d:3f:ef:
7c:49:8d:be:56:f0:a2:fd:20:a3:94:10:48:d7:20:
58:51:83:41:b0:32:0c:7a:8b:1b:fc:82:18:ba:3c:
03:6a:2d:41:4e:b0:c8:b0:ae:0b:5e:04:9f:79:20:
e7:d1:b2:60:02:8d:a6:ca:d8:f8:b7:5d:70:7c:aa:
ac:c5:75:ec:be:e3:d2:c3:2f:c8:07:24:0b:8c:8f:
3f:b2:41:53:46:0c:f4:0a:f3:73:18:1f:0a:64:f9:
7f:b0:da:f2:35:39:e0:b5:50:aa:ea:88:7c:52:90:
ff:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:19:06:21:E1:DA:44:E8:95:C9:FE:B2:E3:34:14:62:32:1B:58:BA
X509v3 Authority Key Identifier:
keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/aBkGIeHaROiVyf6y4zQUYjIbWLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.192.0/22
199.195.56.0/22
IPv6:
2a01:9aa0:200::/40
Signature Algorithm: sha256WithRSAEncryption
8c:32:7f:8f:ad:fe:5c:b0:89:ea:99:86:5a:9b:77:a8:ec:49:
7f:e8:36:4d:e2:9c:3f:85:9d:a2:38:9e:c2:75:f1:31:06:bf:
3f:d4:36:25:a1:77:f9:83:0d:38:ec:6f:79:a4:5d:d6:59:24:
00:86:87:56:a3:f2:3d:a0:af:d0:09:02:2c:cc:10:db:b9:81:
b1:d9:23:97:93:82:63:19:84:6e:88:92:ce:40:a5:59:7a:10:
67:15:55:6a:01:b8:04:25:cd:25:ce:bc:3a:2d:5d:04:4f:e4:
b7:75:63:b6:35:eb:c8:06:3e:e3:89:23:ba:75:2d:b9:c9:70:
db:f1:30:b9:a5:35:d4:0e:41:cf:27:d1:ec:89:28:6f:ff:c5:
0e:a0:23:6e:61:41:fc:11:f6:c9:59:94:e4:7d:c1:1b:3b:f5:
42:27:7d:0e:16:cd:53:28:83:65:7f:dc:3f:7b:51:3d:30:19:
22:87:5c:9e:2f:5e:d9:f8:6c:e0:35:39:b6:bb:97:70:44:1e:
04:6a:32:4d:03:b0:2a:3b:aa:d2:f6:06:ae:02:df:9c:de:5c:
8c:28:3b:33:7d:7e:73:e8:e0:b4:cb:de:cb:7b:ec:72:2f:fa:
55:19:aa:3f:d6:2b:d0:65:12:45:29:ca:4c:4a:3c:1c:9a:35:
f1:61:d1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 22:29:53 2026 by rpki-client