Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/AyYxenah6of29UHTJ48SijSe-hI.roa
File: AyYxenah6of29UHTJ48SijSe-hI.roa (raw, json)
Hash identifier: 4MprZDmQSeP47aIrTjCRaQubSfF/+BGfJgTJAR3t1VQ=
Subject key identifier: 03:26:31:7A:76:A1:EA:87:F6:F5:41:D3:27:8F:12:8A:34:9E:FA:12
Certificate issuer: /CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Certificate serial: 019A4AEEEB8E6AF6C20D29E1F91AC36DCB26
Authority key identifier: 8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/AyYxenah6of29UHTJ48SijSe-hI.roa
Signing time: Mon 03 Nov 2025 18:16:03 +0000
ROA not before: Mon 03 Nov 2025 18:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397373
IP address blocks: 194.150.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:ee:eb:8e:6a:f6:c2:0d:29:e1:f9:1a:c3:6d:cb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Validity
Not Before: Nov 3 18:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0326317a76a1ea87f6f541d3278f128a349efa12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:96:c9:4f:d4:e0:1c:cd:e7:7d:6f:cf:d3:
07:52:82:4d:35:be:af:e4:99:94:6d:14:6e:93:4d:
77:67:93:cb:fa:32:80:6f:08:00:c1:17:75:57:23:
39:96:3b:3d:a1:54:28:25:47:83:bb:11:1c:a4:ef:
17:6a:45:a8:bb:80:cc:b9:69:4c:a0:e0:83:fe:32:
c9:aa:9b:21:1b:e2:b1:03:33:98:28:af:6f:17:e0:
73:7e:27:b8:04:73:99:c2:d0:b7:4a:b7:56:95:47:
60:e6:4e:34:ad:7a:32:b4:85:67:ef:78:76:f8:3a:
21:9d:97:59:1e:46:37:c5:01:6d:1d:f1:69:4c:f1:
ab:ee:c5:f4:f3:5e:69:8a:ed:25:24:d6:65:ac:43:
13:85:5c:31:72:d2:87:b8:5b:58:81:7d:f5:ba:91:
a6:bf:61:1c:0e:83:65:cd:52:fa:74:80:42:c7:b3:
c3:b1:c3:b3:16:96:68:3e:db:6c:9b:d4:0b:80:f2:
77:cc:5b:f2:4a:9b:88:20:c4:07:65:05:61:ae:15:
e6:73:ce:e2:8c:89:bb:2a:ea:85:b9:ad:4b:1b:d6:
cf:09:a0:3d:04:46:8e:8f:61:c5:36:c1:e4:a8:28:
46:52:2e:2b:99:86:71:a6:6f:10:36:ce:2c:c8:95:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:26:31:7A:76:A1:EA:87:F6:F5:41:D3:27:8F:12:8A:34:9E:FA:12
X509v3 Authority Key Identifier:
keyid:8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/AyYxenah6of29UHTJ48SijSe-hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.165.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:86:28:92:83:8d:79:01:b0:90:c1:d9:b9:9c:b5:b2:7e:8b:
2c:0f:1e:d1:0a:db:dc:eb:ef:12:b9:73:6c:40:66:ec:b8:64:
41:4c:f9:ca:96:2b:58:6f:a3:e0:6f:db:8f:dd:3d:b0:fc:8c:
32:e1:ff:d4:6a:f2:6d:18:f8:c2:9c:4c:80:18:a6:03:8d:c5:
37:cd:31:2d:61:df:7c:b4:c2:16:b5:5e:98:f6:fb:30:8e:cc:
e4:9d:db:2a:8b:f4:0c:c7:72:60:54:c0:30:74:57:e3:84:f5:
19:09:28:b6:90:37:fa:6a:24:b8:78:5b:93:1f:3e:f7:d7:8c:
72:62:b5:cb:19:36:ed:49:94:38:b6:91:0f:77:65:34:58:4a:
6b:c9:4d:03:b0:b4:20:2c:66:dc:83:ba:0b:3a:08:7b:8a:56:
91:0a:ef:62:36:b0:c3:79:6d:b2:57:95:a8:74:5c:45:93:e0:
4c:1e:ab:0e:77:de:6f:16:43:59:64:07:f8:51:4d:4d:6b:4f:
2a:41:1e:22:b3:80:21:f0:7f:f3:15:c5:00:60:97:13:05:07:
7a:2f:48:f3:3a:e8:0d:c3:fe:a9:98:de:7d:47:9a:aa:e2:1b:
2a:5c:3c:0a:d3:1d:28:5f:5c:36:c5:36:29:2a:a6:aa:b7:92:
76:ae:d8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:36:35 2025 by rpki-client