Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/aAGH3c5d-SS93iO_2vBFF7AdOMI.roa
File: aAGH3c5d-SS93iO_2vBFF7AdOMI.roa (raw, json)
Hash identifier: fzSdMQ8FstVLPteNZoGphENEvG1WHDFrvaRy2ydbExo=
Subject key identifier: 68:01:87:DD:CE:5D:F9:24:BD:DE:23:BF:DA:F0:45:17:B0:1D:38:C2
Certificate issuer: /CN=e1257eaabbf604d4570055c2cd8ac249bb29c106
Certificate serial: 019D2D3A7128E1103B14D063B7068E243081
Authority key identifier: E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/aAGH3c5d-SS93iO_2vBFF7AdOMI.roa
Signing time: Fri 27 Mar 2026 02:58:17 +0000
ROA not before: Fri 27 Mar 2026 02:58:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 193.22.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:3a:71:28:e1:10:3b:14:d0:63:b7:06:8e:24:30:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1257eaabbf604d4570055c2cd8ac249bb29c106
Validity
Not Before: Mar 27 02:58:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=680187ddce5df924bdde23bfdaf04517b01d38c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:fd:2b:26:33:cd:fe:86:b2:0f:da:9b:51:
8e:2c:ad:43:eb:4c:c4:66:ab:ad:2b:58:4d:6f:5e:
2c:f5:ba:4c:85:60:3f:c0:72:5b:21:37:34:99:c8:
09:21:f5:f4:f6:42:92:e9:ce:e7:34:e2:f0:f5:a9:
60:a4:6d:52:ba:48:52:5e:13:e8:29:f8:b5:30:8b:
f8:52:40:f4:54:1a:a3:1c:b3:ad:56:0c:85:cf:98:
ff:19:7c:6b:c8:ea:ee:10:10:02:ca:cb:6a:c0:6a:
0a:92:0c:e7:d4:d2:96:b5:1e:c7:93:88:e6:f1:58:
c6:37:15:3b:7e:0e:16:cc:b3:11:95:15:f2:c8:69:
43:99:07:4e:68:f7:4e:85:ef:01:85:b2:21:fe:2c:
4a:87:1a:c8:d2:ac:b6:b3:91:9a:0d:ef:49:ca:89:
4e:59:a2:56:c5:7b:31:aa:07:ef:f5:cc:65:4a:5a:
67:8a:31:0a:44:ec:5e:4d:cb:94:c5:66:20:70:86:
e3:4f:ce:91:aa:91:db:d3:66:91:94:83:61:21:15:
ec:64:77:d9:21:0b:14:23:30:ed:82:20:e9:d0:f6:
50:c4:fc:86:1a:f7:4d:ae:12:bf:ba:d6:58:ff:2b:
e9:16:7b:3d:c2:8b:81:a3:99:fc:b0:f0:1b:d1:a4:
e9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:01:87:DD:CE:5D:F9:24:BD:DE:23:BF:DA:F0:45:17:B0:1D:38:C2
X509v3 Authority Key Identifier:
keyid:E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/aAGH3c5d-SS93iO_2vBFF7AdOMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.162.0/24
Signature Algorithm: sha256WithRSAEncryption
83:94:6a:bf:de:79:7d:12:a9:be:a2:bb:35:96:55:fe:df:35:
c6:1f:64:fd:d7:8f:63:c8:54:40:35:95:b6:cd:8e:e9:d5:ae:
fe:ae:71:40:4c:e2:5e:c9:ea:2e:2d:e5:a3:9c:e5:8b:2f:c8:
ab:9e:88:c2:e0:56:76:14:a4:51:d6:d8:24:5b:58:47:ae:c9:
a3:b5:0d:71:5a:61:55:fd:33:fe:4d:e5:4e:d2:22:b6:bb:c2:
0e:ec:f8:81:29:9f:c8:20:27:a9:a4:f6:39:4b:8f:d4:06:e6:
93:a9:23:6b:dc:48:82:39:7d:62:7d:65:fa:bb:48:df:e0:ff:
2a:bd:5e:58:42:18:54:49:1f:b6:c0:c6:94:b5:46:fe:9b:1a:
74:83:02:5f:62:a6:fe:d6:0e:36:b0:13:41:03:b1:9f:4c:b4:
37:12:9c:ba:ca:89:95:2b:8e:6e:d4:c3:1f:09:12:a2:7b:8d:
d2:a5:d4:c2:ae:5d:33:c3:97:40:f1:66:42:05:b6:bc:a4:fa:
ce:c5:03:fa:3c:c1:c2:04:da:c8:c2:77:f5:c1:fa:d5:b3:5a:
e5:4c:83:59:b3:bb:3a:c1:1f:be:c9:84:01:57:f9:02:43:23:
4d:99:5c:ff:f6:4a:e1:21:37:06:d2:f3:8b:9a:29:ce:aa:98:
3a:1b:81:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:03:11 2026 by rpki-client