Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/AuIgXyr9qnahEcMOUGb2fl_Rk94.roa
File: AuIgXyr9qnahEcMOUGb2fl_Rk94.roa (raw, json)
Hash identifier: cLMZZYYkPB0wWqaF8AgBOlzwhMgryo70uvWnlGDiKvs=
Subject key identifier: 02:E2:20:5F:2A:FD:AA:76:A1:11:C3:0E:50:66:F6:7E:5F:D1:93:DE
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 019D88F4D6E92966269FAA08234FC1A443C8
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/AuIgXyr9qnahEcMOUGb2fl_Rk94.roa
Signing time: Mon 13 Apr 2026 22:27:20 +0000
ROA not before: Mon 13 Apr 2026 22:27:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6707
IP address blocks: 85.153.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:88:f4:d6:e9:29:66:26:9f:aa:08:23:4f:c1:a4:43:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Apr 13 22:27:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02e2205f2afdaa76a111c30e5066f67e5fd193de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:81:a9:6c:01:1f:0d:00:df:7d:ba:98:79:18:
f8:5e:9d:d3:b0:25:cb:78:b7:82:e2:66:c6:a0:55:
a6:fc:9a:a3:90:37:2f:6f:23:05:7b:ae:85:f2:d2:
4a:92:aa:66:52:32:65:f0:ec:42:9a:6d:90:83:ea:
9a:56:52:9f:09:03:ca:d7:61:79:06:d8:3a:48:93:
2c:cb:86:67:ee:41:4b:53:0d:50:a5:11:a5:8f:3b:
d0:28:23:7d:fd:03:c7:a3:02:fb:f2:88:c8:cf:0c:
21:c8:73:df:1b:9c:f2:ba:d4:5c:ea:34:ef:07:81:
96:d6:69:4b:2d:51:bb:46:38:28:d1:44:6f:4b:1d:
f2:dc:b6:02:c0:d9:34:43:bb:3b:41:fb:38:c5:cc:
26:b0:8f:a6:16:9b:17:2f:d0:33:ef:ac:3f:a3:1c:
49:71:38:d3:d8:07:51:91:4d:58:19:14:27:e1:ff:
ca:6b:e0:70:c5:8e:53:f0:f6:4e:b7:33:85:71:54:
77:b6:87:c1:ae:e3:33:07:ca:72:64:3c:88:a3:03:
7e:43:ad:5b:9a:cf:f4:e3:50:88:9c:f6:cb:11:f6:
50:50:1e:69:dc:e4:90:ee:76:9d:90:08:f4:41:c6:
7c:cb:02:db:97:88:11:9b:ba:1b:f1:19:fa:7f:79:
db:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E2:20:5F:2A:FD:AA:76:A1:11:C3:0E:50:66:F6:7E:5F:D1:93:DE
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/AuIgXyr9qnahEcMOUGb2fl_Rk94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.160.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:3d:b0:f3:52:0c:20:3f:a6:62:27:7c:0a:d3:b1:5a:50:b9:
e1:25:ee:82:1d:24:3c:71:04:e3:0a:4a:54:2c:a5:e8:8e:80:
9b:ca:ce:2a:1c:aa:0f:b6:e9:d3:e7:38:5c:3f:ef:9a:94:9c:
3e:14:6b:e8:fd:c1:7f:76:77:69:36:84:f1:a2:b6:9f:77:27:
36:65:26:45:53:69:4c:a7:09:2f:06:ac:65:3f:8d:36:0d:b1:
4c:a8:43:5f:ff:ae:06:ba:d8:6b:4c:4f:ba:54:b9:16:c6:d0:
f9:e0:d9:c2:98:cd:43:45:9c:df:04:e4:df:db:2f:e2:11:e6:
2a:e4:ce:cd:b8:9a:d1:56:30:76:e5:a3:29:3f:db:82:d1:e2:
13:1f:05:4c:eb:8b:8b:cb:d4:9b:83:7d:df:d3:e0:64:70:7c:
fe:8c:c1:12:72:52:6a:80:0c:c9:78:b5:2e:1a:46:be:dd:d2:
ee:a2:44:44:1a:df:d2:ff:69:75:0d:9e:a7:3e:7f:70:7a:c0:
c5:b9:a2:07:d7:2f:a8:11:c0:3f:cb:89:7f:2e:ca:aa:c8:49:
3b:62:2a:9c:bb:e7:5f:a2:81:0d:cb:5f:37:2f:11:bf:6a:e8:
ad:7e:b2:75:d7:b5:30:ee:d5:0f:1a:7c:3e:d3:54:ca:7f:4b:
82:fa:28:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:55:25 2026 by rpki-client