Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/AvhSVHbyFsNJfn-87fA7oHcica0.roa
File: AvhSVHbyFsNJfn-87fA7oHcica0.roa (raw, json)
Hash identifier: JjNvwI8D/DTZ5Kz60xSRCIvB7TZ/neKfvnL3MZ2ZTSU=
Subject key identifier: 02:F8:52:54:76:F2:16:C3:49:7E:7F:BC:ED:F0:3B:A0:77:22:71:AD
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019CBE933EEA96773D00A15213501ADBDC42
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/AvhSVHbyFsNJfn-87fA7oHcica0.roa
Signing time: Thu 05 Mar 2026 15:17:26 +0000
ROA not before: Thu 05 Mar 2026 15:17:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213541
IP address blocks: 72.56.128.0/18 maxlen: 24
72.56.192.0/20 maxlen: 24
72.56.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:93:3e:ea:96:77:3d:00:a1:52:13:50:1a:db:dc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Mar 5 15:17:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02f8525476f216c3497e7fbcedf03ba0772271ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3e:02:74:0c:1c:f4:bb:30:22:ca:c8:65:55:
00:6e:30:9d:e1:ae:04:68:fb:fa:21:ba:61:28:f2:
37:b4:6a:79:63:d4:12:1b:af:a5:1e:18:f7:43:91:
06:9b:50:c4:6b:e6:85:84:82:09:0d:d7:c2:c2:7c:
4e:c0:68:f5:b0:50:42:7c:5a:fd:66:b6:04:51:3c:
17:52:bb:dc:96:41:45:70:44:9a:fc:a6:5a:b6:c4:
4b:98:c2:9d:c6:70:95:a1:23:ca:fb:29:d3:69:5e:
ed:3c:9f:48:6e:b7:77:83:1e:9e:69:38:63:76:5e:
a2:78:39:0a:9f:eb:97:35:47:b7:7b:55:bd:e9:99:
01:a0:a9:bb:8c:d5:53:60:5f:6a:cf:b0:90:b8:e1:
f2:32:5e:cc:eb:b8:c8:c4:18:4a:85:25:8e:65:ae:
fb:d7:0a:4f:ef:91:66:ea:b6:aa:72:02:16:3a:4f:
37:10:0c:39:1f:bd:dd:2d:3d:08:8c:ef:56:c2:55:
eb:b9:b3:a2:b5:a0:20:a3:52:ea:b0:a3:64:eb:73:
b5:b3:34:1d:8a:75:9e:5e:39:16:f1:a4:a7:b9:c9:
c7:db:77:cb:1b:c9:ba:bd:a1:20:f3:b4:be:57:f0:
7b:da:65:17:d6:95:ac:fb:20:ae:3d:52:d5:95:c8:
80:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F8:52:54:76:F2:16:C3:49:7E:7F:BC:ED:F0:3B:A0:77:22:71:AD
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/AvhSVHbyFsNJfn-87fA7oHcica0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.128.0-72.56.215.255
Signature Algorithm: sha256WithRSAEncryption
9b:58:ef:da:8e:5d:77:8c:a5:c3:85:11:35:22:dd:f5:01:23:
9c:d4:15:28:6c:cc:1d:bb:b4:e0:12:e3:d4:3c:4c:b4:4d:a6:
43:a5:52:43:66:74:22:16:ec:79:11:d2:b8:bb:d2:6b:53:31:
d5:37:36:de:e7:93:7a:4c:1b:9c:0d:4e:6a:b8:a5:f1:c6:b8:
87:4f:ff:fd:df:79:96:e3:34:a3:8c:fb:ba:8c:c6:04:2f:ce:
33:ba:44:5e:e3:f0:78:47:8b:9c:09:b1:3a:53:27:86:e3:18:
2b:70:5d:07:cf:46:16:8d:db:1f:a2:25:d7:b7:3f:3b:36:25:
35:ac:98:a7:f4:54:0c:ef:1c:19:f8:73:a9:c4:37:ad:47:5b:
f4:4b:04:7f:96:60:4d:ce:c6:ef:78:2a:0f:47:dc:bf:98:98:
cc:2e:f2:22:d5:a2:97:23:07:f9:9f:26:38:3b:4d:b6:08:67:
c5:73:63:d0:c1:49:8b:23:a9:be:c4:b2:85:52:9a:b1:25:18:
4a:1b:d6:f3:a3:f6:fa:07:dc:00:e1:a5:1c:f3:07:7c:ab:0f:
57:9f:cc:b3:1f:96:e8:bb:21:94:65:1f:75:2a:04:77:0f:16:
0c:ff:ab:04:4b:68:25:37:23:82:a0:b7:3b:48:2d:11:aa:79:
77:6a:96:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:54:30 2026 by rpki-client