Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/AhwdTx9fEwDgDhS-KpvADaA0BHs.roa
File: AhwdTx9fEwDgDhS-KpvADaA0BHs.roa (raw, json)
Hash identifier: 3UdTrc5jccGiegk/yoLcgswRhXKAnZF+2bXK8uN1kuc=
Subject key identifier: 02:1C:1D:4F:1F:5F:13:00:E0:0E:14:BE:2A:9B:C0:0D:A0:34:04:7B
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019FB7ED6283A3485EA5003C193E250765D8
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/AhwdTx9fEwDgDhS-KpvADaA0BHs.roa
Signing time: Fri 31 Jul 2026 11:26:55 +0000
ROA not before: Fri 31 Jul 2026 11:26:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213607
IP address blocks: 87.58.215.0/24 maxlen: 24
150.251.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:ed:62:83:a3:48:5e:a5:00:3c:19:3e:25:07:65:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Jul 31 11:26:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=021c1d4f1f5f1300e00e14be2a9bc00da034047b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:aa:aa:e0:8a:39:c5:be:3d:f3:d6:96:cf:
31:62:63:79:26:f1:f9:cb:1c:8c:4f:18:5f:7e:b7:
6f:51:7e:de:e6:7b:57:fd:a6:46:8c:37:d1:50:14:
15:ec:dc:ba:bd:b3:4d:1c:f2:05:db:ad:b2:ba:69:
0c:76:06:ed:dd:17:56:a4:a0:ce:04:d1:49:fa:11:
96:06:02:50:4d:1f:e3:13:9d:ba:43:72:4b:24:67:
18:ce:69:8b:c2:38:a5:0a:92:08:4f:f8:aa:d9:90:
1a:45:1f:1a:d1:6c:b7:98:a0:a8:e4:bb:6f:89:e3:
d9:b5:9c:ce:f2:fd:b2:41:07:05:e1:ae:74:11:eb:
7d:16:2d:32:11:03:44:74:a3:ff:4a:36:2f:81:80:
34:b1:e7:40:1f:ed:5c:0a:0a:2e:d5:2a:c1:42:3f:
63:e2:ad:54:31:29:50:20:ca:16:85:5c:cf:b9:a5:
3e:2e:12:78:79:2b:ca:e2:c3:eb:c5:67:9a:65:20:
b9:4a:2f:75:fa:5c:a9:04:28:af:fc:c4:89:79:6c:
1b:51:62:f1:94:a4:8b:1f:92:79:ab:53:c3:68:bf:
e5:e3:ed:cc:81:7a:4e:40:5f:30:5c:1f:c4:0b:90:
8b:45:02:2f:12:d2:a3:22:f6:0d:e1:44:a0:de:dd:
21:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1C:1D:4F:1F:5F:13:00:E0:0E:14:BE:2A:9B:C0:0D:A0:34:04:7B
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/AhwdTx9fEwDgDhS-KpvADaA0BHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.215.0/24
150.251.136.0/24
Signature Algorithm: sha256WithRSAEncryption
16:47:41:d4:90:e9:dc:9a:76:d8:9d:92:e1:3e:89:c6:d1:f2:
93:ba:db:05:61:b0:51:52:34:e2:7c:85:d7:c1:7e:b1:80:8d:
b1:e5:4f:ef:a4:b5:dd:81:cd:94:35:1f:06:38:b5:4c:9a:4c:
04:9c:94:fc:7d:7a:f5:8b:4b:45:d4:ed:da:57:e6:b4:1c:b4:
c4:cb:ce:99:86:ea:b6:1d:4c:62:4a:b0:2d:ef:59:fe:49:49:
57:dd:33:0a:8e:d1:dc:02:e4:6e:9d:f9:5a:ab:47:cf:3e:80:
7f:07:5a:80:5b:61:96:57:ee:69:69:ef:1c:77:cd:28:c9:27:
d8:58:12:b3:25:6b:b3:05:32:ab:8b:ff:39:4f:65:f8:c8:4e:
75:f1:1f:fc:c3:66:cd:1d:d1:a3:23:25:c9:d7:28:cd:4f:f2:
9b:4c:43:f8:20:1c:b7:99:ff:55:b7:ff:8b:d7:dc:ad:d1:9f:
c5:0d:dd:85:8f:29:a6:9a:1b:83:1f:0c:0d:c6:14:51:fa:5e:
89:d9:0f:48:ce:f9:08:29:d4:a0:cb:05:d1:bc:69:6c:cf:81:
1b:b4:8b:4d:6a:0c:41:fb:23:78:f7:3b:fc:70:c8:b3:40:ea:
c5:19:ff:40:87:8e:d8:68:e8:6a:a7:96:04:a9:d6:2d:cc:da:
0c:5e:b4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 14:55:01 2026 by rpki-client