Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/aBfCZ03S1Y0sPluo5LBFUZWFYMc.roa
File: aBfCZ03S1Y0sPluo5LBFUZWFYMc.roa (raw, json)
Hash identifier: Feultne/Hmjwrd1YJFj/DkrcIFBiGq7nwTwN4dvrKfs=
Subject key identifier: 68:17:C2:67:4D:D2:D5:8D:2C:3E:5B:A8:E4:B0:45:51:95:85:60:C7
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A0AE1772D699908EE74D85B23DB5DCB7C2
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/aBfCZ03S1Y0sPluo5LBFUZWFYMc.roa
Signing time: Thu 17 Sep 2026 06:39:27 +0000
ROA not before: Thu 17 Sep 2026 06:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198077
IP address blocks: 195.252.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:34:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:17:72:d6:99:90:8e:e7:4d:85:b2:3d:b5:dc:b7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 17 06:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6817c2674dd2d58d2c3e5ba8e4b04551958560c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:85:0e:a3:9a:41:48:a5:4a:c4:cd:e3:54:
84:35:5f:60:8d:3e:e9:38:92:3f:a4:48:85:59:25:
b7:f9:8a:dd:5d:5c:57:13:47:c0:d3:45:20:f1:d8:
f1:fe:c5:af:77:97:46:86:f6:19:3a:a5:cc:dd:dd:
5b:9a:45:a1:7d:d4:cf:6c:08:4a:c6:93:8a:d1:08:
76:64:92:c8:4e:38:9f:29:a1:41:2c:10:6b:7d:8c:
4d:a0:77:85:d0:97:b0:ec:d4:99:af:7b:b4:b6:73:
62:a6:bd:77:fb:df:b0:4d:cb:77:4c:ae:97:94:33:
04:43:a8:71:41:c8:81:51:ac:6e:ea:90:31:4f:6b:
65:88:a6:44:8d:20:e8:d9:dd:d4:89:1d:3e:e7:cf:
a7:9a:b4:2e:01:28:75:82:03:be:3c:0b:90:cf:43:
88:1c:b3:b6:69:4d:38:a4:cd:0e:0b:d1:bf:8e:9d:
4b:12:de:15:a9:6c:b0:a3:4e:61:39:b1:ff:2f:67:
2e:e9:3b:79:22:89:e6:7d:de:23:9f:3e:b8:ef:5d:
f9:f5:80:31:e7:fc:66:cb:23:65:bd:e8:2c:35:9c:
6a:4a:ed:aa:1b:14:6c:ad:3e:6d:db:b1:5e:d0:8f:
bd:1c:ab:8d:65:7c:ad:8f:67:d6:ca:67:0e:39:fa:
e7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:17:C2:67:4D:D2:D5:8D:2C:3E:5B:A8:E4:B0:45:51:95:85:60:C7
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/aBfCZ03S1Y0sPluo5LBFUZWFYMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.252.179.0/24
Signature Algorithm: sha256WithRSAEncryption
85:90:79:19:15:e7:ad:5b:d4:fb:91:f9:54:1e:fb:b1:12:82:
ee:c0:b3:ac:81:7f:d5:b2:ef:f3:13:54:e8:98:74:05:95:3c:
a3:1f:21:cc:5a:fc:27:98:a4:24:5b:7f:89:3d:f4:33:8b:a1:
f2:31:18:76:b2:69:75:be:d5:f6:57:6b:38:99:39:0e:5c:0c:
bf:76:cf:da:2d:cb:64:00:8e:f7:6a:10:70:93:b9:7e:be:05:
b7:c3:29:02:a2:b3:0e:34:f1:90:54:bc:15:58:44:14:0d:15:
ea:f0:4b:1d:0b:c3:5c:61:ed:a9:81:bd:bb:83:28:ef:1c:19:
7d:d0:d3:e5:80:85:bc:bd:2c:ee:4b:3d:3f:09:a1:49:ae:6a:
9d:df:b7:8d:54:c1:3f:ac:81:9d:f4:77:29:df:3d:de:2e:81:
e3:d3:d3:d2:4c:3b:3b:be:09:b8:e3:f7:51:9b:8e:01:f0:d9:
44:9d:1a:63:f7:0b:03:ca:2f:08:69:25:ca:66:ea:ba:2f:8f:
e9:35:e3:27:78:30:84:91:fc:c5:60:1b:7a:ce:35:ac:f7:6b:
24:e2:3f:0a:32:53:dd:04:70:f8:17:1d:4c:9b:1a:b8:9d:bc:
5d:4b:e3:32:2a:89:05:c4:4d:75:e8:2c:e5:dd:c7:79:59:34:
81:bc:f7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:38:49 2026 by rpki-client