Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/aa1hzF_rvMsCHPPz8XLjEXxKqbQ.roa
File: aa1hzF_rvMsCHPPz8XLjEXxKqbQ.roa (raw, json)
Hash identifier: FOtd1tSudJEuWqdQe1qjGDxCbYMX+Uz0UsR5mshe4tI=
Subject key identifier: 69:AD:61:CC:5F:EB:BC:CB:02:1C:F3:F3:F1:72:E3:11:7C:4A:A9:B4
Certificate issuer: /CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Certificate serial: 019EAC286FE91816400B98CD723685D71B3C
Authority key identifier: A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/aa1hzF_rvMsCHPPz8XLjEXxKqbQ.roa
Signing time: Tue 09 Jun 2026 11:33:11 +0000
ROA not before: Tue 09 Jun 2026 11:33:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48685
IP address blocks: 94.142.152.0/21 maxlen: 21
176.10.32.0/21 maxlen: 21
176.57.224.0/20 maxlen: 20
176.57.235.0/24 maxlen: 24
185.25.252.0/22 maxlen: 22
185.169.188.0/22 maxlen: 22
185.169.188.0/23 maxlen: 23
2a06:a100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:28:6f:e9:18:16:40:0b:98:cd:72:36:85:d7:1b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Validity
Not Before: Jun 9 11:33:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ad61cc5febbccb021cf3f3f172e3117c4aa9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1e:04:94:26:3e:1e:6d:ed:ce:df:b8:be:bf:
b1:22:06:e8:d1:3a:27:e2:bf:fd:e9:4c:9c:ed:99:
cb:4a:18:96:6e:d0:2e:da:77:9e:3b:03:cb:23:86:
d7:4c:22:e6:1d:eb:be:ba:9c:a1:08:79:ee:0d:83:
4c:f5:6f:fd:b6:30:2e:cc:c5:1e:1a:1d:5f:c9:22:
a9:63:38:a2:28:a9:67:3c:7a:ed:15:51:ad:2e:09:
66:3f:54:01:2e:9c:17:ac:99:d7:18:18:91:85:df:
68:60:35:6d:2b:72:c3:ab:c3:4b:25:18:cb:51:8f:
d5:5c:08:8d:26:0a:d7:31:c9:83:18:2c:ec:9c:81:
0d:b9:26:12:49:72:a8:97:3e:cd:47:bd:ee:10:5c:
cd:d0:13:5c:f6:e3:1a:b2:d6:20:52:cb:9a:45:35:
ca:4b:99:90:1a:34:3d:04:8a:de:fc:48:c4:b5:49:
e6:ed:51:a2:2c:8f:ab:ae:6f:ac:31:e7:a5:1c:0b:
7f:a3:a8:23:c6:5b:04:92:d2:e5:9d:d0:d4:0c:a8:
34:d2:c7:76:91:49:c3:de:76:77:c1:40:fe:7b:5c:
dc:ea:bd:f8:16:1c:a3:6a:76:c2:97:71:91:c7:06:
fd:d4:7f:a5:21:a2:86:a9:e1:1e:eb:96:55:b5:b5:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AD:61:CC:5F:EB:BC:CB:02:1C:F3:F3:F1:72:E3:11:7C:4A:A9:B4
X509v3 Authority Key Identifier:
keyid:A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/aa1hzF_rvMsCHPPz8XLjEXxKqbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.152.0/21
176.10.32.0/21
176.57.224.0/20
185.25.252.0/22
185.169.188.0/22
IPv6:
2a06:a100::/29
Signature Algorithm: sha256WithRSAEncryption
38:4a:2b:43:07:df:11:cd:ab:fc:12:12:6c:df:49:52:78:b9:
53:7d:5e:43:ca:37:5d:7c:f4:58:e9:83:7b:47:68:77:1c:ee:
c7:5a:4a:7f:b6:9a:72:2c:70:33:a4:25:73:79:21:50:85:d0:
8c:1a:d1:d8:49:4f:60:e4:f2:c1:2d:d2:10:1b:dd:d2:6b:f7:
99:81:2e:e3:16:b9:94:c8:63:7a:48:ff:e6:b4:a5:6d:a9:41:
f1:a6:7d:81:04:f9:28:3a:02:71:f6:5f:3c:32:d5:89:ec:8f:
4f:c1:55:e7:eb:e5:4f:28:e6:fb:c4:41:f3:a9:a1:fe:07:09:
ac:f4:80:88:93:89:5a:16:f9:26:15:df:13:d3:a1:11:8e:5f:
73:97:b5:1b:e8:64:ea:a1:63:43:ad:f4:c4:05:7b:14:4f:e9:
ba:13:53:df:91:fa:5e:5a:b3:fc:3f:52:8d:ab:b7:33:b2:64:
e6:cb:4f:3c:cf:80:3d:39:3c:91:c6:72:51:43:26:92:69:3a:
3b:c2:00:a6:04:3e:67:2c:9b:f5:97:b6:24:68:a8:03:9d:ea:
b9:88:82:cb:09:d4:80:aa:8d:15:78:3c:9c:94:ce:0d:03:3c:
2c:b9:ee:94:db:a4:af:b5:28:00:75:61:77:32:e6:48:50:78:
75:17:74:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:28:31 2026 by rpki-client