Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/ryrPySlNxpsVkX_ZxM78hhxv-f8.roa
File: ryrPySlNxpsVkX_ZxM78hhxv-f8.roa (raw, json)
Hash identifier: c2RA8jai5Wlkob7UVTv7PAf8GP4M7TVRsl2kLYkwKGQ=
Subject key identifier: AF:2A:CF:C9:29:4D:C6:9B:15:91:7F:D9:C4:CE:FC:86:1C:6F:F9:FF
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 019C4D070B3F36802784B98B2CF7DF3452C3
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/ryrPySlNxpsVkX_ZxM78hhxv-f8.roa
Signing time: Wed 11 Feb 2026 14:07:13 +0000
ROA not before: Wed 11 Feb 2026 14:07:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211619
IP address blocks: 45.95.168.0/24 maxlen: 24
45.95.169.0/24 maxlen: 24
45.95.170.0/24 maxlen: 24
150.40.96.0/19 maxlen: 24
2a0e:bfc0::/32 maxlen: 32
2a0e:bfc1::/32 maxlen: 32
2a0e:bfc2::/32 maxlen: 32
2a0e:bfc3::/32 maxlen: 32
2a0e:bfc4::/32 maxlen: 32
2a0e:bfc5::/32 maxlen: 32
2a0e:bfc6::/32 maxlen: 32
2a0e:bfc7::/40 maxlen: 40
2a0e:bfc7:100::/40 maxlen: 40
2a0e:bfc7:200::/40 maxlen: 40
2a0e:bfc7:300::/40 maxlen: 40
2a0e:bfc7:1000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4d:07:0b:3f:36:80:27:84:b9:8b:2c:f7:df:34:52:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Feb 11 14:07:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af2acfc9294dc69b15917fd9c4cefc861c6ff9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c0:1a:97:fc:79:bc:86:92:6f:e5:17:81:40:
0d:91:cc:26:e6:e9:7c:b2:d9:82:85:7c:5c:d1:2f:
65:07:b8:ba:27:12:80:05:19:a9:05:90:dd:94:7d:
99:49:70:be:30:db:83:82:d9:9f:ee:22:c1:2f:dc:
39:0e:26:a5:bb:07:28:56:23:be:c3:16:23:cf:e2:
1c:49:6b:a2:8a:23:f9:2a:7e:6b:4a:e0:0f:ae:73:
da:1f:30:ff:fa:f0:9c:c7:d2:b9:74:5f:d0:0f:1d:
d1:c2:a1:56:49:ad:da:63:25:d2:ff:fa:dd:26:01:
2f:68:40:e2:06:23:a5:cf:7d:32:c3:9f:0a:50:d7:
1a:f6:7e:72:40:00:5c:84:db:4d:7a:dd:9e:86:c4:
63:f1:21:7e:bb:67:f7:99:42:79:5a:c5:c3:09:d7:
3a:95:f2:8e:6a:1b:ac:07:6f:47:9f:29:02:ff:72:
c7:46:c0:c0:f7:3a:77:50:72:a0:c3:b7:0f:f3:a3:
bc:fa:a2:5c:33:3f:85:e4:5b:56:62:53:cf:55:93:
09:41:d1:be:78:93:68:fd:c4:7b:83:28:bd:ee:c9:
07:db:bc:57:e9:89:30:05:b6:32:59:2e:b1:73:ec:
53:4e:cc:52:25:dc:ad:f3:2d:76:54:30:93:29:f8:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2A:CF:C9:29:4D:C6:9B:15:91:7F:D9:C4:CE:FC:86:1C:6F:F9:FF
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/ryrPySlNxpsVkX_ZxM78hhxv-f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.168.0-45.95.170.255
150.40.96.0/19
IPv6:
2a0e:bfc0::-2a0e:bfc7:3ff:ffff:ffff:ffff:ffff:ffff
2a0e:bfc7:1000::/38
Signature Algorithm: sha256WithRSAEncryption
4e:41:bd:0f:f7:ec:9f:2d:4b:6c:c0:6e:26:e8:ea:e9:d4:ab:
9d:a2:5d:03:8b:a7:f1:15:3f:a4:1b:29:38:e5:35:fc:9f:d0:
6a:35:d2:34:6c:8b:9a:02:ef:78:5a:c6:66:1e:1c:8b:4b:28:
07:32:26:29:0c:99:53:44:2b:fc:76:6d:98:c6:a1:df:e8:9c:
a6:65:50:a7:3a:3f:12:ac:df:7d:69:10:2a:10:5f:87:1b:e6:
90:62:e8:89:07:ec:a5:f8:2a:76:bb:fc:d9:71:b3:09:00:08:
c6:d9:2b:fd:b5:a1:d6:ad:09:35:00:df:c6:69:2f:33:17:31:
4d:3f:a6:ea:96:19:4e:df:62:03:da:6b:10:8d:5d:6a:61:39:
42:8b:de:0c:b7:3f:02:07:e4:e0:60:fe:0c:b4:cd:e4:62:0a:
7e:61:64:8f:f5:16:94:33:58:6b:f8:ee:4b:d2:21:d3:9d:37:
34:62:46:a2:ba:5f:41:c3:9c:87:ec:72:ca:88:04:8d:70:49:
95:b3:b5:a3:48:57:bc:d0:7f:b8:6f:b7:21:43:ce:05:a3:9f:
12:a9:9c:c6:e4:71:0c:59:40:24:13:16:54:1d:06:e4:ea:85:
8a:5b:a9:9a:93:fc:08:a2:cc:84:d5:06:13:af:2f:13:ee:df:
05:f8:1c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:49:58 2026 by rpki-client