Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/A64W6614jSKOipagUq4esU4_VnM.roa
File: A64W6614jSKOipagUq4esU4_VnM.roa (raw, json)
Hash identifier: xLqDioXNu9/ImV10GNbnXjX0lmGB/yXNEGDqLOMVfeA=
Subject key identifier: 03:AE:16:EB:AD:78:8D:22:8E:8A:96:A0:52:AE:1E:B1:4E:3F:56:73
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 019B76EB91A27C16AEF46873ACF97AAF3579
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/A64W6614jSKOipagUq4esU4_VnM.roa
Signing time: Thu 01 Jan 2026 00:18:28 +0000
ROA not before: Thu 01 Jan 2026 00:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200820
IP address blocks: 185.94.12.0/23 maxlen: 23
185.94.12.0/24 maxlen: 24
185.94.13.0/24 maxlen: 24
185.94.14.0/24 maxlen: 24
185.94.15.0/24 maxlen: 24
2a03:9fc0:1::/48 maxlen: 48
2a03:9fc0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:91:a2:7c:16:ae:f4:68:73:ac:f9:7a:af:35:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Jan 1 00:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03ae16ebad788d228e8a96a052ae1eb14e3f5673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:59:39:ab:74:e8:2a:d8:ff:b6:6a:1d:7a:b2:
c9:61:e6:2c:ab:2d:2f:e9:8e:c4:37:5e:6a:9a:ec:
72:45:1e:a2:26:71:b6:91:9f:26:99:48:c6:bd:57:
0f:4d:40:4d:91:98:b0:1a:97:ac:aa:c9:15:44:60:
11:12:e8:dd:bd:e5:3b:2d:67:01:14:09:cd:a8:5f:
f4:25:d7:e1:b8:48:53:6f:9f:9c:48:4a:a7:38:d1:
b2:bf:de:0b:47:92:3c:78:cb:fe:69:9e:3c:5d:57:
a0:e0:8d:38:74:cf:dd:8b:88:81:45:8a:8d:71:6a:
67:ab:10:e2:54:a8:f2:99:84:02:ba:cb:73:01:1a:
6c:73:41:cf:8d:2d:95:3b:f0:c4:76:a7:75:02:ef:
8e:54:61:2a:6b:05:80:1d:8e:27:de:a9:2f:72:bc:
77:63:13:2b:f0:f0:0d:bb:e2:73:4e:e1:d8:be:95:
00:fb:29:6b:78:91:de:88:ce:ed:71:9b:b6:29:7d:
6b:17:45:b8:b8:41:c1:37:69:9f:c5:bb:0f:31:a7:
d6:1a:6d:7e:1a:97:66:95:d2:44:cb:fa:25:f1:4d:
22:cc:fa:94:e9:9a:f3:85:46:ff:80:80:c7:ac:29:
e8:06:40:8e:90:5f:58:75:6c:08:e1:17:11:6e:27:
cb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AE:16:EB:AD:78:8D:22:8E:8A:96:A0:52:AE:1E:B1:4E:3F:56:73
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/A64W6614jSKOipagUq4esU4_VnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.12.0/22
IPv6:
2a03:9fc0:1::-2a03:9fc0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
86:70:a7:a8:6c:80:a1:a1:ed:be:34:ad:51:b4:d8:0f:1d:bf:
3d:18:ba:e4:30:3b:f2:41:79:cf:cc:67:e1:5f:b5:54:b4:aa:
88:6b:36:ce:81:ce:30:ec:47:4a:d9:1e:25:17:b3:54:58:f3:
1b:49:2c:df:73:16:a4:51:78:4f:d7:ce:8e:fc:67:51:37:63:
6f:b9:bd:04:85:7e:4b:99:94:96:b4:e4:80:7b:be:af:e8:f3:
3b:1b:be:8d:ec:9e:bf:44:3b:cd:78:f0:4f:b4:2c:73:91:87:
8e:30:05:b5:a2:24:ed:0f:ca:4a:db:fb:4e:22:27:a0:b0:9a:
04:e2:9f:b1:15:6f:9c:dc:d5:a6:01:79:c6:a7:5d:fa:f4:d9:
21:3e:98:43:48:c6:79:fe:25:ca:23:04:52:e9:1f:22:14:6c:
e1:a7:d1:cc:63:75:a7:c1:ac:16:12:e1:f6:a3:73:e9:f1:29:
89:a3:c4:0b:28:cc:c8:ea:10:2f:f1:0f:0a:db:a7:26:9a:d6:
63:5f:f1:a9:43:fa:1e:9e:6a:a3:6c:1f:b6:db:24:6e:e7:31:
d2:44:2a:0a:76:08:2b:06:6c:0d:8f:d9:1c:f7:5b:8c:b1:5c:
25:93:fa:c0:8b:0e:4e:9d:18:d3:32:e3:15:61:00:ef:93:26:
93:68:5e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:08:08 2026 by rpki-client