Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/A6L9PpROsGTUUs-i8Xov3X7OVPo.roa
File: A6L9PpROsGTUUs-i8Xov3X7OVPo.roa (raw, json)
Hash identifier: QpufVZnUEI1nEXK+UQ/a1ahZr+4mGWh8St5kKnUW8iY=
Subject key identifier: 03:A2:FD:3E:94:4E:B0:64:D4:52:CF:A2:F1:7A:2F:DD:7E:CE:54:FA
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01A08A449D26BCFD09BB21208E67B86CA283
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/A6L9PpROsGTUUs-i8Xov3X7OVPo.roa
Signing time: Thu 10 Sep 2026 07:42:27 +0000
ROA not before: Thu 10 Sep 2026 07:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 84.232.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:44:9d:26:bc:fd:09:bb:21:20:8e:67:b8:6c:a2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Sep 10 07:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03a2fd3e944eb064d452cfa2f17a2fdd7ece54fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:8d:11:df:a3:dd:c5:03:06:1c:3e:57:6f:
b3:25:5c:e5:3a:48:22:83:2e:a0:2a:2e:0e:89:93:
e3:b3:05:b9:23:ee:b8:d3:e2:ab:23:0e:2a:6f:bf:
01:0d:83:e8:5b:b6:2f:9c:ee:0a:d7:02:da:d1:59:
96:fa:25:c4:76:bf:ff:2b:23:a3:7e:2a:a5:bf:1a:
0e:c6:c6:ac:08:46:59:62:b0:67:08:29:b1:c5:52:
8c:bf:72:b1:83:a9:ff:13:13:b1:58:a2:36:15:76:
ea:fb:72:fd:e9:41:68:d7:ac:47:6b:39:dc:d2:74:
df:36:ed:ce:5e:cc:9f:9b:0b:b5:61:d7:0e:b9:42:
d8:16:92:83:76:25:63:6c:55:8a:2c:0f:7e:40:ce:
cb:aa:23:73:51:79:16:4e:44:59:32:31:a6:17:94:
19:f3:9c:c4:e1:db:df:8a:a0:33:2f:e0:9b:1a:24:
fb:e1:00:98:5a:2a:f5:2b:5a:a4:85:f7:32:4f:8c:
78:48:df:51:db:b2:79:fe:61:a7:24:28:57:aa:c6:
ce:27:4f:6a:e1:44:d8:29:08:c0:57:fc:b0:6b:33:
cd:3a:ec:cb:72:e0:6c:d6:8a:5a:eb:cb:4d:98:12:
4f:7c:34:fc:d3:59:fa:d2:76:ca:ea:ee:15:b4:10:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A2:FD:3E:94:4E:B0:64:D4:52:CF:A2:F1:7A:2F:DD:7E:CE:54:FA
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/A6L9PpROsGTUUs-i8Xov3X7OVPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.93.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:19:42:5a:95:6e:80:c5:50:fc:64:86:7e:1f:38:0a:1a:10:
32:21:6d:58:3b:36:23:5a:f0:20:d5:6b:4f:2b:e8:3e:d5:e2:
d8:74:25:34:51:76:7e:72:2c:3c:d7:5c:97:96:53:06:af:bd:
a9:3c:8d:d8:c4:76:78:79:14:cb:34:21:49:cc:bf:76:0b:5f:
8e:fe:86:24:d5:8d:5d:9c:f8:42:7b:58:76:eb:33:d3:92:56:
54:bd:1f:07:69:47:5c:8a:66:1f:3e:99:bd:44:08:e7:77:6c:
b6:a4:c1:77:de:01:58:66:09:66:a6:a3:79:90:f3:32:78:2a:
01:d6:8d:9c:04:59:2e:30:e8:55:0a:34:95:fa:2c:e9:12:71:
a3:78:da:82:92:76:ea:4d:62:2f:74:fd:f2:55:be:98:47:5c:
70:6c:23:68:48:71:a5:1f:fb:11:33:fc:57:02:39:1f:13:59:
f7:cf:07:fa:92:68:09:61:cd:a8:8e:ed:f6:15:87:74:6e:b9:
f7:f6:f1:9f:12:62:11:e9:a1:32:b5:c8:61:61:8e:de:87:1b:
b9:57:bd:bb:d2:47:a3:8a:02:6d:61:7c:f4:bd:57:8b:01:8d:
7f:39:52:6d:d3:bf:7d:46:1b:fd:96:b6:04:9f:ee:6c:cd:9d:
79:2d:77:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:20:08 2026 by rpki-client