Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/AFumXuOXKbFW_VkGOp5C3uN9vdM.roa
File: AFumXuOXKbFW_VkGOp5C3uN9vdM.roa (raw, json)
Hash identifier: aE6C4dtIcbKwEv5eXKa14vptksNPYJV0xnZklbhvP6E=
Subject key identifier: 00:5B:A6:5E:E3:97:29:B1:56:FD:59:06:3A:9E:42:DE:E3:7D:BD:D3
Certificate issuer: /CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Certificate serial: 01A072C04C83DC6958E0C44BB24AB2AC5C47
Authority key identifier: 91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/AFumXuOXKbFW_VkGOp5C3uN9vdM.roa
Signing time: Sat 05 Sep 2026 18:06:40 +0000
ROA not before: Sat 05 Sep 2026 18:06:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198352
IP address blocks: 88.151.120.0/21 maxlen: 21
151.237.160.0/21 maxlen: 21
185.132.252.0/22 maxlen: 22
2a0c:b4c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:72:c0:4c:83:dc:69:58:e0:c4:4b:b2:4a:b2:ac:5c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Validity
Not Before: Sep 5 18:06:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=005ba65ee39729b156fd59063a9e42dee37dbdd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:4c:26:22:25:34:36:69:ca:c0:2a:e8:61:
21:2c:ee:cf:dc:82:37:2e:37:d8:2d:51:96:cd:b9:
46:88:bb:33:8a:a3:d7:f9:6b:3e:1e:fe:d1:02:a1:
41:f2:6d:30:a5:54:f1:dd:13:83:03:b0:db:9b:cd:
2f:1f:85:45:69:40:2b:b8:9c:93:2f:97:8e:a5:bd:
63:9d:a9:26:b4:ea:26:31:cb:42:05:be:c7:eb:fc:
76:70:25:6f:65:6c:79:bc:d2:38:aa:1c:8f:4f:a8:
01:37:80:ce:5f:5a:07:9d:55:3e:bf:57:f1:cb:2c:
46:78:29:71:a7:77:61:9a:5c:58:9d:3b:28:b4:4f:
ae:87:5b:64:3f:96:90:01:0b:c0:0b:93:be:e1:83:
1f:b5:52:6a:2f:0e:95:3e:a6:31:93:94:51:19:14:
bd:bd:41:5b:16:21:70:70:15:99:fb:dd:f6:6f:9f:
38:c8:1c:f4:40:db:7d:1d:83:3b:40:3d:9b:12:dd:
e7:c2:ed:ae:50:b9:f5:ef:bb:b9:7c:8f:db:43:6f:
80:9c:20:1b:8b:ad:01:78:62:e1:8e:e3:77:e0:07:
88:47:99:0d:e4:37:63:22:0e:ad:35:c3:0f:32:05:
64:5b:ad:00:f3:78:ff:fd:c0:68:8a:ec:13:a2:30:
da:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5B:A6:5E:E3:97:29:B1:56:FD:59:06:3A:9E:42:DE:E3:7D:BD:D3
X509v3 Authority Key Identifier:
keyid:91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/AFumXuOXKbFW_VkGOp5C3uN9vdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.120.0/21
151.237.160.0/21
185.132.252.0/22
IPv6:
2a0c:b4c0::/29
Signature Algorithm: sha256WithRSAEncryption
87:45:3f:84:4e:91:02:7c:92:cf:db:f3:1c:ab:71:46:f5:f8:
d6:0b:39:b6:4d:13:1b:3a:85:5b:d2:13:25:6c:d9:3c:2f:9d:
a4:8c:6d:50:2b:71:ec:5a:b0:5d:e3:4a:c5:db:f2:83:51:7b:
d1:db:66:30:25:e2:23:9d:fc:5b:44:db:f2:39:38:cf:f4:a3:
d5:60:14:bd:c1:6e:40:de:1c:0d:7c:d3:0f:53:ca:f2:25:81:
4a:c7:f3:8c:22:bf:7e:c1:21:1e:6d:cc:4f:2c:0a:d2:89:89:
ef:98:5e:ad:38:c1:43:d4:ac:03:32:59:b2:df:3e:d6:d3:7a:
6f:d0:27:b0:d0:f7:d5:c4:1c:8e:7f:3c:43:7c:93:df:4c:2b:
cb:e3:de:b6:00:f0:5b:4f:5a:0a:aa:46:f1:2c:44:5d:81:9d:
62:99:c8:55:39:74:63:39:a5:f1:30:8f:b6:d0:2f:6c:22:d7:
3d:7e:07:07:81:bc:65:b4:1c:e0:c7:7b:ef:02:f7:5f:75:45:
a5:80:de:cf:ce:39:3f:32:13:ed:ed:5b:00:94:6a:8b:f2:a0:
4a:50:77:ee:f2:6a:29:af:7d:bd:a0:b7:d9:0c:4b:b6:63:c3:
c5:a1:95:f2:f1:e2:02:1d:58:f4:56:bd:dc:c0:f4:88:6a:7e:
8c:3c:43:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:53:03 2026 by rpki-client