Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/aW0GLfMs8RiqQkgroqb6Dpcu-TM.roa
File: aW0GLfMs8RiqQkgroqb6Dpcu-TM.roa (raw, json)
Hash identifier: UsXuprIqiJrTmGsZFEzdkex7OcaYkNomgnQMK988aG0=
Subject key identifier: 69:6D:06:2D:F3:2C:F1:18:AA:42:48:2B:A2:A6:FA:0E:97:2E:F9:33
Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial: 019C1D7989D61BC900BB20440E86E07DB53F
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/aW0GLfMs8RiqQkgroqb6Dpcu-TM.roa
Signing time: Mon 02 Feb 2026 08:30:30 +0000
ROA not before: Mon 02 Feb 2026 08:30:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30848
IP address blocks: 185.90.68.0/22 maxlen: 22
185.210.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1d:79:89:d6:1b:c9:00:bb:20:44:0e:86:e0:7d:b5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324d0f47297680535eb2799189db888b4066782
Validity
Not Before: Feb 2 08:30:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=696d062df32cf118aa42482ba2a6fa0e972ef933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:b6:f6:6c:ff:1d:44:8c:34:12:ad:06:36:
c5:e5:61:fb:0c:04:94:49:9f:d0:4c:35:0a:da:ac:
a4:6e:7d:34:98:52:f6:65:bc:57:12:2d:98:32:14:
00:9d:69:0f:30:3d:3c:08:fa:f8:be:f8:6f:5a:03:
77:1c:ec:6f:e2:6b:e6:39:9f:c1:aa:a9:5a:8d:4e:
d4:7f:6e:e7:0f:1b:04:06:20:83:fa:be:66:f3:ee:
37:26:b7:9a:ea:eb:6a:16:86:99:ea:d0:b1:83:60:
8f:88:75:43:19:c3:f6:0b:21:e3:9b:db:67:68:7b:
5d:bc:a0:4d:b0:53:6a:6e:eb:6d:34:d9:78:6c:1d:
a7:57:b4:f5:9a:ce:c7:0f:e4:68:74:5a:29:c4:f1:
32:df:07:80:f0:88:4e:40:5c:0c:e4:9c:e3:f0:fc:
71:3c:cb:8b:46:1e:f8:67:97:1f:77:1b:46:d4:23:
e7:7d:83:d3:a7:06:2f:0f:97:4b:5f:54:79:05:3c:
2b:14:22:8e:75:46:1f:70:57:30:2c:75:1b:9b:e8:
d1:e4:f4:9d:d2:c7:38:d7:a5:a9:e0:f2:60:f7:c1:
55:f0:55:d5:b7:94:c9:81:5b:58:fd:47:e5:d0:88:
be:34:b7:d9:3b:e7:a2:ad:69:6d:0a:3d:04:23:97:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6D:06:2D:F3:2C:F1:18:AA:42:48:2B:A2:A6:FA:0E:97:2E:F9:33
X509v3 Authority Key Identifier:
keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/aW0GLfMs8RiqQkgroqb6Dpcu-TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.68.0/22
185.210.248.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:eb:03:d0:59:f3:17:5e:f4:f6:04:fa:7c:30:15:1e:a4:1e:
f0:f4:8e:50:66:e3:9a:8c:31:cd:f9:b3:57:9c:bc:e5:18:dc:
da:95:0a:02:cd:66:23:39:ef:77:e8:c0:9a:c3:86:30:04:0e:
a6:52:1f:71:e5:dd:32:ba:50:b8:93:22:72:ce:dd:a9:33:fb:
4c:95:db:50:e5:e3:c4:97:2e:ba:e8:53:38:5b:95:f0:65:56:
e2:fe:91:7e:9d:70:cf:79:db:25:92:40:b7:94:fb:6f:ca:fe:
15:3b:f9:4d:c4:ce:a1:66:74:58:57:3e:e1:82:46:17:cb:1e:
b8:ab:84:17:e4:7f:a8:bc:49:7f:ad:df:d1:85:b7:e1:15:c7:
c4:12:aa:01:cd:03:96:ab:52:5d:f6:88:fc:59:4a:59:b3:e8:
9e:ed:cc:c2:13:c6:aa:af:30:c8:03:79:1d:a2:f7:66:ab:6c:
14:cd:81:28:77:6a:ae:b0:c9:16:e1:2b:27:b5:b1:36:c4:db:
1c:fb:6c:83:08:78:be:fe:07:74:d9:05:27:55:e4:98:9b:0e:
77:c1:a6:ff:c1:c0:0d:80:8e:4e:79:2c:25:ab:53:df:5a:6a:
0e:ad:c7:29:fd:b0:56:63:41:5f:39:0f:41:c9:eb:6d:57:7a:
26:70:10:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:37:42 2026 by rpki-client