Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/anoAzrJOBoD9JpP5FqUgzX-f6-E.roa
File: anoAzrJOBoD9JpP5FqUgzX-f6-E.roa (raw, json)
Hash identifier: IskdJP4FXXgbtLijonxfuZHM9j/dth82BlTSTwUCPuk=
Subject key identifier: 6A:7A:00:CE:B2:4E:06:80:FD:26:93:F9:16:A5:20:CD:7F:9F:EB:E1
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019D885CDC0FD26448D0378EF9D5BB6CF35B
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/anoAzrJOBoD9JpP5FqUgzX-f6-E.roa
Signing time: Mon 13 Apr 2026 19:41:20 +0000
ROA not before: Mon 13 Apr 2026 19:41:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34224
IP address blocks: 188.191.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:88:5c:dc:0f:d2:64:48:d0:37:8e:f9:d5:bb:6c:f3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Apr 13 19:41:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a7a00ceb24e0680fd2693f916a520cd7f9febe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:59:7e:be:f8:2c:fb:ad:a1:73:9a:6e:3e:
08:4e:e6:e8:f6:89:a8:35:9b:e0:b8:4c:b7:6b:02:
d1:04:18:7a:5a:58:4a:3b:a2:fa:a0:8f:26:02:cd:
3c:54:63:7d:32:e5:35:e5:27:d5:ce:e3:59:3b:cb:
76:8d:01:8e:0c:f8:54:8a:c5:49:9c:4a:e9:c9:2d:
30:63:b8:ed:84:cd:ed:e3:54:35:8f:ba:94:96:8b:
7c:83:11:d1:df:8b:6c:24:51:a8:be:07:a7:04:8c:
e8:6f:4a:db:ac:40:66:e0:11:cb:17:25:95:f2:b8:
38:ba:90:6e:ab:7d:7e:71:6b:17:bc:e3:95:da:c7:
46:e8:d8:14:a2:0d:07:b8:44:a3:1f:45:68:38:1b:
ff:65:1c:37:cb:51:56:ba:02:84:85:ce:94:15:31:
78:bc:60:c8:f4:bb:60:7c:42:66:9f:c8:c4:d2:ea:
73:2a:d0:34:be:19:e5:cb:3e:e2:44:42:84:e9:f7:
9a:d6:c2:1d:c6:d1:a9:fb:0e:7e:17:91:81:c6:e9:
a6:65:64:dd:ff:1c:b5:ec:72:bc:49:2a:39:10:40:
13:35:e0:90:28:59:3b:f5:fb:0a:ec:f2:ee:3d:10:
3e:67:fc:02:fc:6d:42:29:3e:3a:11:d7:8b:8b:ea:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7A:00:CE:B2:4E:06:80:FD:26:93:F9:16:A5:20:CD:7F:9F:EB:E1
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/anoAzrJOBoD9JpP5FqUgzX-f6-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.97.0/24
Signature Algorithm: sha256WithRSAEncryption
64:16:46:b0:4d:54:1a:d7:ea:8a:95:fb:00:8f:e6:10:a0:c6:
e9:35:be:99:19:f0:30:ec:cd:73:ec:7c:bc:92:24:43:75:ed:
f9:ac:2a:57:c4:05:97:24:22:97:d9:44:31:7b:d2:44:81:17:
c6:7d:ac:58:6c:f7:b1:d8:7d:79:fe:4a:0f:4b:a3:67:6b:6f:
a8:8c:16:28:b5:9f:c7:af:45:4a:e7:25:2f:5d:12:5f:e7:4a:
eb:5f:44:eb:9e:44:a7:e0:6f:57:f8:c6:81:2e:64:3d:7a:59:
2f:13:29:2c:02:fe:d4:e2:d5:e8:09:a1:fe:ab:59:64:5a:06:
cd:b3:c9:65:e3:d0:c4:73:f9:33:c9:b0:d0:bf:fe:00:0f:2c:
a7:4a:7f:7c:29:08:a4:25:61:cf:56:ed:b1:36:90:cf:79:e8:
84:6d:71:19:84:fb:e8:c0:01:ff:54:d4:a5:05:bc:e6:0d:6b:
d2:7c:c4:b1:e6:25:2a:95:0d:ac:9d:b7:47:29:dc:03:d7:d5:
cc:3e:4a:a4:1b:f9:bd:9f:90:51:24:e2:14:3c:73:b8:43:32:
ef:3f:e4:48:2a:a6:ee:c0:a5:2c:38:04:4c:29:ae:a8:05:b7:
47:5f:bb:6c:91:65:43:5f:68:b7:4b:97:bf:6e:a0:2d:6a:e0:
e1:3e:83:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:16 2026 by rpki-client