Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/a4snBLGv5x9BUgTX8OqagmQxYq4.roa
File: a4snBLGv5x9BUgTX8OqagmQxYq4.roa (raw, json)
Hash identifier: v28FpMO1x0oIkmNzipvZuAj2xt/sVOZTdJkWdv7M7/Y=
Subject key identifier: 6B:8B:27:04:B1:AF:E7:1F:41:52:04:D7:F0:EA:9A:82:64:31:62:AE
Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial: 019CBD83BB5DDC219CF977DD826BBA6E2750
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/a4snBLGv5x9BUgTX8OqagmQxYq4.roa
Signing time: Thu 05 Mar 2026 10:20:52 +0000
ROA not before: Thu 05 Mar 2026 10:20:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.194.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:83:bb:5d:dc:21:9c:f9:77:dd:82:6b:ba:6e:27:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Validity
Not Before: Mar 5 10:20:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b8b2704b1afe71f415204d7f0ea9a82643162ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:70:26:86:fa:f2:36:ca:da:1b:c2:28:6b:
ff:fe:5a:b4:40:63:fc:91:bb:2e:52:f5:97:d8:63:
91:6b:4a:6b:63:29:85:1d:ac:2c:65:b7:f2:ad:a8:
af:41:74:f6:61:51:95:5f:d5:2e:7d:0c:7d:34:67:
9e:ae:b4:97:51:6e:9b:b6:1b:95:b3:2a:32:3f:55:
d1:8e:f2:51:63:46:18:34:31:57:85:3c:4f:e3:24:
8f:6a:11:da:07:0c:b6:27:7c:50:5c:50:91:47:5d:
4a:2a:15:e7:f2:a0:0e:6d:8b:a1:a8:33:b4:0d:24:
a1:37:bb:f3:94:72:2a:96:d2:d1:7a:f1:65:46:b8:
8e:42:5f:d7:c6:92:87:ef:b7:4f:85:8e:c6:dc:29:
eb:6f:74:39:f0:01:d9:07:ee:7c:5b:8a:a9:e2:45:
12:67:6a:70:9d:5d:bb:a9:c2:25:1d:26:82:03:cd:
81:ed:67:ef:8d:f6:c5:7b:84:e2:4c:15:d1:e3:94:
e0:c9:aa:b5:06:a4:e8:a2:66:30:cd:4d:39:6e:3b:
b3:bc:33:c8:ec:b8:09:ad:35:0e:50:be:0b:0d:5a:
3c:70:60:0f:17:e9:66:d0:1b:d6:32:36:0e:e4:7d:
d7:68:41:d7:a7:4f:5a:a8:92:c1:d6:81:bd:ea:28:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8B:27:04:B1:AF:E7:1F:41:52:04:D7:F0:EA:9A:82:64:31:62:AE
X509v3 Authority Key Identifier:
keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/a4snBLGv5x9BUgTX8OqagmQxYq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.87.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f2:a9:ea:98:55:3f:3f:b1:7e:e5:b4:c4:08:10:e6:12:38:
15:f2:53:88:b0:c3:9f:0a:30:5b:87:4a:4a:d5:e7:77:cf:74:
02:76:48:e3:28:ce:3d:97:52:97:12:e8:e5:17:e0:eb:a6:17:
67:4b:27:58:7c:54:d9:58:5b:ab:17:aa:2a:38:74:b6:32:8e:
27:83:da:83:35:61:1d:2a:6d:ad:90:36:6c:f7:e4:4a:01:13:
eb:ae:a5:0c:a1:00:01:f4:a8:c7:31:7a:07:3e:98:cd:80:c3:
8e:41:a8:b1:a9:f6:cd:de:79:d8:e7:0c:96:ae:fd:a7:77:e8:
98:1b:8e:23:05:85:c8:f0:3f:8b:57:ff:4d:c8:69:7d:bb:6a:
17:87:74:9d:cd:92:77:ed:d4:6f:d9:5b:c6:37:a3:39:e9:ec:
1c:a4:a0:36:c1:fb:9f:b5:11:a8:45:3f:87:54:6e:05:de:d4:
69:76:02:ce:4c:b1:38:5f:d2:94:4b:43:0c:67:b4:ec:d7:00:
7e:72:f4:88:bb:cc:5d:81:ae:47:d0:62:aa:90:0f:f1:b3:39:
12:05:0b:ac:36:1a:9e:99:ef:8f:f8:6f:70:55:86:97:d5:a3:
58:e5:9b:74:d7:8b:56:e0:c4:18:bf:d5:f4:f5:c8:38:c0:37:
3e:81:0f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:12:08 2026 by rpki-client