Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/az65XDjo2ppJEAUDxgONjCii4JM.roa
File: az65XDjo2ppJEAUDxgONjCii4JM.roa (raw, json)
Hash identifier: KKW2/9btopQsCSi6Q0T0i2j+xys3nWakyAcxPszdD+E=
Subject key identifier: 6B:3E:B9:5C:38:E8:DA:9A:49:10:05:03:C6:03:8D:8C:28:A2:E0:93
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 01A01C93919B196D57F8021EA59B33AF9051
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/az65XDjo2ppJEAUDxgONjCii4JM.roa
Signing time: Thu 20 Aug 2026 00:30:27 +0000
ROA not before: Thu 20 Aug 2026 00:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201744
IP address blocks: 45.95.171.0/24 maxlen: 24
150.40.109.0/24 maxlen: 24
150.40.110.0/24 maxlen: 24
150.40.111.0/24 maxlen: 24
150.40.112.0/24 maxlen: 24
150.40.116.0/24 maxlen: 24
203.31.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1c:93:91:9b:19:6d:57:f8:02:1e:a5:9b:33:af:90:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Aug 20 00:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b3eb95c38e8da9a49100503c6038d8c28a2e093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fb:b0:9c:33:2b:93:83:2a:e5:9f:26:62:93:
0a:4c:29:17:05:01:ae:30:b8:b9:1c:a1:b9:e3:d3:
66:8b:9b:6f:44:4d:70:da:36:69:b8:90:f4:40:19:
bc:25:52:91:d2:aa:2e:cc:6f:1f:d3:86:20:b4:b5:
3c:77:59:ce:2e:83:19:39:c4:28:d5:1b:6f:c2:7c:
94:08:87:20:58:3c:86:28:f4:03:e8:95:b0:4e:cd:
1f:d3:72:56:d0:b0:7a:c0:6a:7f:c8:37:6a:76:b0:
b3:61:2f:8a:1e:41:a6:60:3e:fd:33:fd:ca:5e:09:
53:ab:64:cd:5f:76:d6:03:db:6b:e6:65:d4:87:0b:
82:8f:94:63:d9:b5:e9:3d:b4:15:11:3d:ce:1e:90:
f8:1d:c5:42:ea:33:cd:b6:73:3a:87:53:e8:89:be:
f0:44:ca:45:25:f6:68:56:ce:f1:d9:ce:d9:d8:ed:
f2:38:30:6e:d4:22:18:c7:1d:1a:7e:be:7e:ab:1b:
d3:f7:5b:f3:f0:b0:bd:31:3c:fc:4b:62:90:eb:d4:
0a:2c:38:9f:cb:60:59:2a:62:d8:3b:de:5d:05:cf:
b4:1a:63:26:dc:3a:cc:7d:f1:89:92:b8:c2:79:13:
94:01:d9:d7:e2:72:b5:00:e4:47:a2:aa:1f:e9:f8:
0c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3E:B9:5C:38:E8:DA:9A:49:10:05:03:C6:03:8D:8C:28:A2:E0:93
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/az65XDjo2ppJEAUDxgONjCii4JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.171.0/24
150.40.109.0-150.40.112.255
150.40.116.0/24
203.31.217.0/24
Signature Algorithm: sha256WithRSAEncryption
91:58:3c:7e:3e:12:7b:66:87:dc:3f:89:ba:bd:8c:5a:13:f7:
33:b6:e5:04:8a:16:60:db:15:1e:51:14:a4:a1:d8:da:34:4a:
ae:d6:d4:2b:d2:e2:d5:83:7e:39:f3:1e:9f:14:20:b3:c3:47:
8a:36:71:48:23:59:2d:bb:8a:8a:b0:07:74:aa:8e:49:d1:34:
f9:5c:2c:99:20:ad:f8:e5:16:3d:d7:a5:6f:d1:b9:89:6c:68:
f6:14:89:a4:6a:a2:69:3e:a5:be:c0:56:d6:21:8b:6e:25:04:
d4:82:db:c2:45:0e:db:fa:92:9e:20:61:eb:ec:32:8b:86:58:
4a:77:d0:0d:20:12:5a:8d:57:04:23:a5:46:4e:50:4c:9d:79:
bf:1e:62:4c:b1:e7:83:c1:3b:5d:a4:56:be:fd:e5:6a:f7:5e:
9f:f7:27:97:2e:5b:be:45:ee:b2:0b:df:b9:76:11:6e:f8:3d:
b6:b0:8b:5b:e6:fd:30:bf:2e:0a:d1:0c:55:42:f6:c5:2e:79:
bd:78:56:ae:bb:51:c3:df:ae:1f:1f:4a:88:01:ac:8a:c1:63:
86:f0:11:64:d5:82:3d:da:e8:41:3d:3e:dc:03:0c:3e:0e:6a:
c0:aa:e5:51:e3:f3:4d:8d:84:11:a3:26:97:9a:05:41:ee:f3:
54:bb:1c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:13:55 2026 by rpki-client