Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/AWhN6VQ2_halEL7L2KMQe9rdgso.roa
File: AWhN6VQ2_halEL7L2KMQe9rdgso.roa (raw, json)
Hash identifier: tVoPHVeJ+IKy961bJMJgWhi1Hj5IBVKGGMEWtGFabWw=
Subject key identifier: 01:68:4D:E9:54:36:FE:16:A5:10:BE:CB:D8:A3:10:7B:DA:DD:82:CA
Certificate issuer: /CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Certificate serial: 01A06DD8345DE04910D5625E4CE439D0FDD6
Authority key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/AWhN6VQ2_halEL7L2KMQe9rdgso.roa
Signing time: Fri 04 Sep 2026 19:14:40 +0000
ROA not before: Fri 04 Sep 2026 19:14:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30286
IP address blocks: 91.235.132.0/22 maxlen: 24
91.235.132.0/24 maxlen: 24
91.235.133.0/24 maxlen: 24
91.235.134.0/24 maxlen: 24
91.235.135.0/24 maxlen: 24
91.235.135.229/32 maxlen: 32
91.235.135.230/32 maxlen: 32
185.32.240.0/22 maxlen: 24
185.32.240.0/23 maxlen: 24
185.32.241.0/24 maxlen: 24
185.32.242.0/23 maxlen: 24
185.32.242.20/32 maxlen: 32
185.32.242.21/32 maxlen: 32
185.32.243.0/24 maxlen: 24
2a03:7b40::/48 maxlen: 48
2a03:7b40:1::/48 maxlen: 48
2a03:7b40:2::/48 maxlen: 48
2a03:7b40:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:d8:34:5d:e0:49:10:d5:62:5e:4c:e4:39:d0:fd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Validity
Not Before: Sep 4 19:14:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01684de95436fe16a510becbd8a3107bdadd82ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:a7:c4:d2:69:35:c9:20:db:ae:9b:c1:cf:
6d:19:f5:a2:cc:44:ef:6e:00:0f:32:0a:40:71:c8:
e8:4a:fc:33:c9:d4:b9:84:06:97:59:b4:4d:2e:ed:
f0:c8:a5:db:89:d1:48:b8:98:2c:20:94:a9:de:80:
e2:66:d8:27:89:b3:37:36:fe:ad:30:be:70:9b:6d:
3a:82:c0:bc:a5:b8:48:fd:d7:77:91:37:b1:69:33:
ff:61:11:7a:9d:72:37:55:b1:fb:02:6f:af:52:9a:
8a:e9:24:98:5d:95:73:93:96:70:be:25:08:cd:70:
9d:21:b7:b5:66:cf:54:b8:d3:ca:f4:3e:2b:d5:15:
f4:5d:b4:1b:02:99:be:d5:97:69:3a:ef:d9:e1:d0:
a0:6a:be:07:9b:01:cb:33:61:da:39:03:5a:7e:2b:
e9:15:b6:58:c4:87:ba:96:bb:14:6c:6a:51:04:8a:
69:01:5a:5d:d6:d0:6e:26:69:d0:f3:e6:f3:a2:3f:
39:9d:78:36:79:f1:a0:d7:94:33:d5:23:de:62:d7:
b2:96:39:14:f0:66:b9:a4:4c:2d:c5:87:26:db:bc:
97:35:85:0c:63:d8:d6:b5:4b:1a:e5:dc:d5:4d:5c:
7f:53:cc:b7:47:53:91:83:0d:17:25:c0:2b:f9:be:
22:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:68:4D:E9:54:36:FE:16:A5:10:BE:CB:D8:A3:10:7B:DA:DD:82:CA
X509v3 Authority Key Identifier:
keyid:92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/AWhN6VQ2_halEL7L2KMQe9rdgso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.132.0/22
185.32.240.0/22
IPv6:
2a03:7b40::/46
Signature Algorithm: sha256WithRSAEncryption
05:85:38:3d:68:61:72:9f:50:68:a0:23:0c:bf:78:97:e7:c4:
c4:9b:64:41:aa:72:77:2b:d7:b0:00:2c:db:c2:34:55:a5:ed:
49:f2:02:51:e6:71:66:95:22:12:85:f1:2a:67:fd:73:7b:fb:
79:e2:f2:8e:b6:94:cb:aa:60:86:60:63:2c:fe:ee:29:da:c2:
dc:b9:6e:ec:a2:40:5e:89:a0:87:a1:ae:b4:2e:4d:af:41:50:
cd:72:ee:d1:12:6b:e4:72:38:f8:0d:1b:db:98:22:e9:55:12:
b2:fb:2c:14:2a:23:82:8a:58:3e:c0:62:29:21:8c:63:7f:96:
9c:79:41:6f:49:20:c7:e7:89:d5:c5:53:2b:f7:1d:18:e5:6d:
53:75:3c:49:40:e2:06:e6:51:fb:36:c6:12:4e:8c:e1:0c:8f:
0c:5a:2a:b5:35:df:3c:b4:c2:9d:70:50:71:3f:e8:c0:97:3a:
63:b1:9d:63:01:aa:f8:09:a2:9d:d3:9c:99:5c:b0:fa:82:6c:
f8:aa:b0:9a:a4:57:e8:17:78:46:85:01:99:66:bb:95:89:93:
31:19:8f:92:40:b9:cb:7a:a5:6c:3a:c1:f1:79:57:02:c0:ae:
62:74:ab:4d:a1:ab:48:45:ae:fb:06:60:9f:2b:ed:72:53:f1:
2a:31:2e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:52:23 2026 by rpki-client