Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/e-Ahdkl_f1LqOHtVCku7lMXsm4I.roa
File: e-Ahdkl_f1LqOHtVCku7lMXsm4I.roa (raw, json)
Hash identifier: DXfXWvpCZv2QvQDHG5fVL6iE5e15mkCvuGhAWj9+Eoo=
Subject key identifier: 7B:E0:21:76:49:7F:7F:52:EA:38:7B:55:0A:4B:BB:94:C5:EC:9B:82
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019C6617086C5B5FCB5B9BB3AB003CC1EDFF
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/e-Ahdkl_f1LqOHtVCku7lMXsm4I.roa
Signing time: Mon 16 Feb 2026 10:55:11 +0000
ROA not before: Mon 16 Feb 2026 10:55:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2278
IP address blocks: 161.105.128.0/17 maxlen: 17
161.106.0.0/16 maxlen: 16
192.144.77.0/24 maxlen: 24
2a01:cf00::/42 maxlen: 48
2a01:cf00:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:17:08:6c:5b:5f:cb:5b:9b:b3:ab:00:3c:c1:ed:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Feb 16 10:55:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7be02176497f7f52ea387b550a4bbb94c5ec9b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:e3:cf:8f:a5:cd:e3:de:97:a5:46:d9:33:
c2:8a:ee:04:30:b8:40:95:73:ca:98:09:23:41:80:
f4:e6:db:41:c4:dd:13:41:86:3c:77:ba:40:eb:35:
ab:ad:0b:74:06:e4:47:08:b6:b5:3a:63:e7:f0:c4:
7e:92:46:5f:7c:67:90:28:bb:a9:b1:f9:5b:a5:25:
54:cf:5b:e7:04:08:9c:3e:3d:4a:c5:9f:9f:fb:ac:
77:75:d0:80:07:12:5b:e5:b8:88:15:30:e5:d3:2a:
49:22:d2:13:cc:6c:7f:80:46:73:7d:20:e1:04:bf:
5e:a2:db:c3:23:76:75:74:06:d8:ff:c9:9a:41:09:
68:da:c9:5f:3a:61:a0:17:c0:dc:9f:88:6e:4b:fa:
b7:b3:ba:32:d9:81:a9:fb:a9:be:d4:99:38:58:97:
05:25:39:1a:11:50:e3:83:0e:8d:30:66:0d:5c:51:
ef:d8:f1:34:5c:25:65:81:b0:d1:5b:dd:53:50:04:
69:31:2f:29:d2:47:0d:cf:3b:40:1a:07:b4:3f:e7:
97:c5:83:9e:bb:a8:5b:d3:09:3b:af:33:82:04:4b:
55:9d:f2:b6:ff:bb:1c:4d:c4:d6:c1:28:59:ea:a2:
70:d3:d6:34:34:99:bc:4e:30:fa:8c:50:96:a8:47:
9b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E0:21:76:49:7F:7F:52:EA:38:7B:55:0A:4B:BB:94:C5:EC:9B:82
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/e-Ahdkl_f1LqOHtVCku7lMXsm4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.105.128.0-161.106.255.255
192.144.77.0/24
IPv6:
2a01:cf00::/42
Signature Algorithm: sha256WithRSAEncryption
47:e0:49:c9:9b:fe:20:8d:79:db:dc:75:0e:74:6d:14:58:67:
75:c2:f2:73:6d:ac:94:62:b3:10:23:26:a1:de:25:1b:91:a6:
1e:86:59:a9:9e:94:7f:59:ff:63:9c:3b:ef:8f:26:29:be:7d:
38:62:4d:cf:c8:fb:8e:03:9d:91:37:27:b5:d1:f6:9c:65:2e:
a5:38:13:dc:ae:2b:68:e9:ba:ad:c3:6d:e8:fc:2f:e9:a2:62:
de:6d:01:a0:10:a0:d9:b5:83:7e:ad:ff:31:28:37:44:f1:aa:
4f:31:9f:9d:cd:dd:73:0d:a5:48:ff:f3:17:68:54:8a:9b:c4:
a1:07:14:63:9c:f4:6e:90:bf:48:0c:82:4f:2a:33:88:89:cd:
2c:70:fc:ac:d5:72:2b:31:ed:ca:20:b5:48:12:f8:3e:07:f9:
5a:67:ad:74:34:db:35:be:98:86:2a:19:ac:96:05:9f:43:15:
e5:0e:91:68:c1:c4:e2:d6:e4:d1:b9:5d:10:d6:85:9b:01:23:
3d:e8:0d:6b:1e:9c:e3:53:0e:8f:e8:6e:a8:d6:c2:0d:50:34:
5b:f2:8f:99:46:6b:3b:05:ab:7c:d7:f8:f9:a7:1d:84:a8:0a:
a3:de:44:ad:51:19:a7:cb:be:df:fe:1e:b5:81:40:df:7f:ab:
32:62:a3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:34:57 2026 by rpki-client