Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/AAf9opHVWJgSdG0z23sJPDY_3AM.roa
File: AAf9opHVWJgSdG0z23sJPDY_3AM.roa (raw, json)
Hash identifier: iVy5buGzTgQUxgbWVG8NGcWMQhFRBdxznjdBNwotVPc=
Subject key identifier: 00:07:FD:A2:91:D5:58:98:12:74:6D:33:DB:7B:09:3C:36:3F:DC:03
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 01A0D52CBDFCC9372625CA7610C38F2AF3E3
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/AAf9opHVWJgSdG0z23sJPDY_3AM.roa
Signing time: Thu 24 Sep 2026 20:47:54 +0000
ROA not before: Thu 24 Sep 2026 20:47:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.133.138.0/24 maxlen: 24
185.133.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:2c:bd:fc:c9:37:26:25:ca:76:10:c3:8f:2a:f3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Sep 24 20:47:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0007fda291d5589812746d33db7b093c363fdc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d3:bf:a4:71:37:63:a7:98:5d:5b:c8:b1:77:
40:99:df:4d:49:15:b6:9a:2f:02:cd:27:4d:54:4a:
f2:aa:ed:93:c9:b8:23:c7:ef:a8:a5:38:31:6e:db:
69:d4:6b:83:e0:c5:6e:13:f0:b7:6a:9c:03:87:0b:
24:4a:1a:e9:2f:2b:95:45:fd:58:6b:d9:2d:24:c8:
23:63:2a:1a:36:e5:47:7a:1c:12:5c:d2:eb:f4:2b:
67:03:41:9e:4b:f5:6e:f3:a6:37:ce:20:24:e3:ac:
3a:ab:a1:0f:40:69:c7:7d:32:92:15:12:3d:59:15:
d2:fe:d0:be:9c:58:7c:ab:6b:9a:f1:1b:ab:31:49:
11:99:81:69:0b:8d:05:94:79:74:2b:b8:3d:3e:1f:
eb:d9:f2:1e:93:af:13:66:40:ba:8d:9c:5d:d1:80:
fc:ab:e4:40:27:f0:0b:d8:4e:d3:9f:4e:60:a7:70:
27:c0:2d:bd:df:1f:03:77:be:d5:47:d0:47:84:35:
29:92:78:4d:f7:31:dc:7b:e4:e9:32:94:16:e2:38:
e0:1d:43:c2:cd:28:57:57:35:e4:26:5a:70:37:7a:
81:da:24:87:e2:a3:cc:59:ca:20:cf:ab:2e:7c:91:
f9:0f:1f:fd:6f:4f:b4:a9:80:f4:aa:09:25:5b:f2:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:07:FD:A2:91:D5:58:98:12:74:6D:33:DB:7B:09:3C:36:3F:DC:03
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/AAf9opHVWJgSdG0z23sJPDY_3AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.138.0/23
Signature Algorithm: sha256WithRSAEncryption
00:05:b0:5a:40:43:60:01:61:e4:bf:ad:5e:75:e3:70:a5:27:
a8:79:8a:b6:e4:9c:de:3c:ef:5c:55:3b:41:c0:eb:af:a0:cc:
00:49:a6:29:e3:e8:bc:65:f7:ae:ea:1a:44:4d:56:d5:cd:31:
e9:51:5b:8d:43:85:72:61:44:68:59:56:9b:e3:75:23:ac:47:
87:71:ac:75:46:52:20:c6:58:8e:fd:bf:fa:bb:2b:3d:c7:8c:
19:18:16:c9:bb:34:12:ef:97:92:8c:20:fe:db:ae:67:65:2b:
80:8b:b6:f1:5d:1c:6d:a2:71:9f:c8:69:6a:e9:58:00:6c:a4:
74:31:f4:7a:31:3e:77:7e:91:ed:3e:6d:48:f7:a5:43:f3:bf:
2c:c1:57:7c:6e:06:c3:e1:d4:c7:db:9a:39:4c:7c:ea:b3:7e:
d0:ed:b1:9c:e7:0b:0a:4d:69:28:d1:10:dc:85:a6:6a:2b:2d:
2a:1d:1a:15:e3:a7:bc:70:26:5b:fe:1b:6b:2b:4e:d1:ca:92:
e4:f2:93:52:11:a8:90:6d:28:ad:4f:5f:cd:3e:4a:67:dc:62:
da:f0:40:41:f5:18:0c:e1:52:41:5a:d1:40:42:b4:ef:16:db:
47:d1:1e:9f:51:51:2f:84:f1:d6:9f:8a:de:c6:a0:ab:c4:46:
41:80:ea:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDVLL38yTcmJcp2EMOPKvPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5M2QyZjBhOTYxOTlhMDYwODU2Y2Y2N2UyMTA1ZmRhMmNi
OTNkMzcwHhcNMjYwOTI0MjA0NzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDA3ZmRhMjkxZDU1ODk4MTI3NDZkMzNkYjdiMDkzYzM2M2ZkYzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9O/pHE3Y6eYXVvIsXdAmd9NSRW2
mi8CzSdNVEryqu2Tybgjx++opTgxbttp1GuD4MVuE/C3apwDhwskShrpLyuVRf1Y
a9ktJMgjYyoaNuVHehwSXNLr9CtnA0GeS/Vu86Y3ziAk46w6q6EPQGnHfTKSFRI9
WRXS/tC+nFh8q2ua8RurMUkRmYFpC40FlHl0K7g9Ph/r2fIek68TZkC6jZxd0YD8
q+RAJ/AL2E7Tn05gp3AnwC293x8Dd77VR9BHhDUpknhN9zHce+TpMpQW4jjgHUPC
zShXVzXkJlpwN3qB2iSH4qPMWcogz6sufJH5Dx/9b0+0qYD0qgklW/KT5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAAH/aKR1ViYEnRtM9t7CTw2P9wDMB8GA1UdIwQY
MBaAFDk9LwqWGZoGCFbPZ+IQX9osuT03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMzY1ZGUtODAwOC00NzEzLWFiOTkt
NjE5ZmE4MGI4ZDc0LzEvQUFmOW9wSFZXSmdTZEcwejIzc0pQRFlfM0FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wMzY1ZGUtODAwOC00NzEzLWFiOTktNjE5ZmE4MGI4ZDc0
LzEvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYWKMA0G
CSqGSIb3DQEBCwUAA4IBAQAABbBaQENgAWHkv61edeNwpSeoeYq25JzePO9cVTtB
wOuvoMwASaYp4+i8Zfeu6hpETVbVzTHpUVuNQ4VyYURoWVab43UjrEeHcax1RlIg
xliO/b/6uys9x4wZGBbJuzQS75eSjCD+265nZSuAi7bxXRxtonGfyGlq6VgAbKR0
MfR6MT53fpHtPm1I96VD878swVd8bgbD4dTH25o5THzqs37Q7bGc5wsKTWko0RDc
haZqKy0qHRoV46e8cCZb/htrK07RypLk8pNSEaiQbSitT1/NPkpn3GLa8EBB9RgM
4VJBWtFAQrTvFttH0R6fUVEvhPHWn4rexqCrxEZBgOpG
-----END CERTIFICATE-----
Generated at Sun Oct 4 15:40:34 2026 by rpki-client