Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/afRxnYS9xX0pCvGVtIiS73I1z44.roa
File: afRxnYS9xX0pCvGVtIiS73I1z44.roa (raw, json)
Hash identifier: 3LuTMNKBz2sfRa7X5G714MtGThF0TEEgGy5wQUhxdjE=
Subject key identifier: 69:F4:71:9D:84:BD:C5:7D:29:0A:F1:95:B4:88:92:EF:72:35:CF:8E
Certificate issuer: /CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
Certificate serial: 019F921A229F9A77F4CD4DE408987219AD2C
Authority key identifier: EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/afRxnYS9xX0pCvGVtIiS73I1z44.roa
Signing time: Fri 24 Jul 2026 03:10:14 +0000
ROA not before: Fri 24 Jul 2026 03:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62
IP address blocks: 93.191.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:1a:22:9f:9a:77:f4:cd:4d:e4:08:98:72:19:ad:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
Validity
Not Before: Jul 24 03:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f4719d84bdc57d290af195b48892ef7235cf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a8:a2:79:3e:a7:50:d4:53:4a:c9:1b:71:67:
a5:ef:9e:d2:b6:34:76:ad:cd:21:90:2b:31:6c:e0:
22:4c:e2:b1:82:d5:8a:79:73:91:9f:a9:6c:51:c4:
92:7a:7b:f8:be:fa:0c:21:06:61:d6:07:8a:84:b7:
7e:4c:76:63:a9:02:22:6e:09:3a:48:bb:9e:13:5f:
5e:bf:cc:04:59:3d:70:91:3c:b5:85:25:02:76:a6:
98:e0:f6:fc:e7:c5:79:7d:c7:6e:43:b7:8c:07:ae:
01:de:a1:e5:a4:e6:8f:57:47:ae:cd:1d:64:01:9e:
2d:38:ac:54:f1:3c:31:55:96:62:30:81:08:2d:e6:
59:7e:eb:f0:fa:3c:6f:47:9f:c0:64:f1:7c:e7:57:
bb:27:8b:92:cf:a7:a2:e5:80:ad:3a:67:17:5f:ad:
22:74:50:fb:e6:98:fa:1d:69:88:2f:99:3e:2b:aa:
40:20:cf:a6:dd:ac:43:0e:16:53:14:d2:43:6d:1d:
bc:ed:71:09:69:41:43:6d:e1:c2:4d:2f:3a:4e:39:
74:fe:08:4c:5a:56:79:fb:1a:94:68:ba:89:90:f9:
24:99:b2:f5:e5:90:d1:63:4d:af:22:f4:6c:4a:e9:
e2:24:2c:ff:95:d7:ad:40:dd:d6:53:de:61:fc:a5:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F4:71:9D:84:BD:C5:7D:29:0A:F1:95:B4:88:92:EF:72:35:CF:8E
X509v3 Authority Key Identifier:
keyid:EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/afRxnYS9xX0pCvGVtIiS73I1z44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.148.0/24
Signature Algorithm: sha256WithRSAEncryption
84:70:36:7e:ac:60:57:5c:ad:b6:af:c9:f0:02:e3:5c:98:05:
11:6e:24:e8:2a:6d:f5:fc:61:70:e3:b0:4b:b0:a7:de:b7:f0:
80:fc:b0:c6:e7:37:0d:18:1a:60:d2:2d:c4:a4:65:01:19:65:
a2:23:cf:6a:2b:77:72:2f:f8:57:4e:e2:b8:a6:72:ea:8b:d7:
08:5c:10:f6:43:25:02:8f:df:d0:d7:00:49:d9:91:f1:b6:3f:
fd:6d:8b:72:6c:6e:4e:61:9a:7b:7b:32:bb:a8:41:81:9f:d5:
48:58:b9:37:84:c2:a7:79:80:ff:d1:2c:57:bc:c6:f8:70:80:
cd:3d:50:37:30:5c:80:ac:22:3b:ca:1f:4b:55:b7:f1:fa:01:
7e:f3:24:a1:b5:5f:ec:06:06:79:fa:9a:ee:fc:82:90:21:73:
2e:cf:e5:44:f1:cc:4f:6f:a7:18:1f:3c:cf:fe:f2:65:20:63:
81:a6:08:fe:ea:9f:ac:cd:f0:f4:3b:39:75:6b:10:81:88:63:
9b:ae:5c:97:f8:0a:31:0a:07:f4:b4:b9:a8:bd:2d:70:20:12:
b8:e3:9a:14:f9:87:43:e4:8a:0d:80:02:11:8f:79:a9:cc:86:
79:e1:4c:aa:be:53:6f:09:ac:07:43:dc:4d:47:72:7c:51:7e:
55:40:11:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:47:52 2026 by rpki-client