Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/aaE0S3Um5Vi6BhDQqr6tOzK4JaE.roa
File: aaE0S3Um5Vi6BhDQqr6tOzK4JaE.roa (raw, json)
Hash identifier: I/6hh1gjRcNeCWSUlY12OXaqWDkdOdsjtuMQtrQZ6bs=
Subject key identifier: 69:A1:34:4B:75:26:E5:58:BA:06:10:D0:AA:BE:AD:3B:32:B8:25:A1
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 019D68E4CA717852C36C0C31C97FAFD5BF6B
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/aaE0S3Um5Vi6BhDQqr6tOzK4JaE.roa
Signing time: Tue 07 Apr 2026 17:01:57 +0000
ROA not before: Tue 07 Apr 2026 17:01:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.243.154.0/23 maxlen: 24
185.243.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:e4:ca:71:78:52:c3:6c:0c:31:c9:7f:af:d5:bf:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Apr 7 17:01:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69a1344b7526e558ba0610d0aabead3b32b825a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ff:35:b8:b4:92:42:65:b0:2b:2b:c2:6b:c6:
53:6d:49:38:da:a6:ca:ec:7a:ac:06:17:5f:c7:89:
00:d1:22:d0:8c:3e:b4:da:95:e3:c8:b4:56:8c:31:
30:e7:c5:f5:10:7c:d1:48:07:33:7f:0b:28:ab:4c:
36:fc:1f:04:86:86:09:a4:60:4c:83:ee:a7:34:2e:
5e:dd:bd:e6:c2:c9:54:4c:9d:38:f4:51:27:4c:4e:
47:b6:60:6f:47:ad:66:cf:e4:7f:45:4c:32:b3:d2:
27:43:1e:b4:61:62:e8:0a:30:99:8b:2b:3b:90:fc:
59:b8:15:11:88:7f:9f:4e:33:98:fe:ff:5c:15:d9:
8b:dd:6f:9f:f7:26:27:07:8a:ab:36:d3:cf:2a:94:
92:2f:7a:06:c7:9c:ad:ac:19:31:d7:44:23:e2:03:
33:8a:9d:91:7b:e3:05:2f:11:28:aa:87:2d:26:64:
09:7a:a9:9e:8c:1a:35:51:4c:96:b1:bc:9c:79:75:
6f:8b:50:52:9a:ad:eb:1b:c0:f8:6d:38:fd:16:83:
2b:43:88:e1:7f:97:d6:88:bc:84:92:0f:53:69:0a:
ba:15:60:74:56:4e:ce:5a:e2:71:46:b7:c6:c2:6f:
b7:95:d4:be:32:ea:cb:d6:68:55:f9:33:05:95:30:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A1:34:4B:75:26:E5:58:BA:06:10:D0:AA:BE:AD:3B:32:B8:25:A1
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/aaE0S3Um5Vi6BhDQqr6tOzK4JaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.154.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:25:68:05:98:80:b5:bf:f0:ab:9c:d5:e1:75:7f:1b:e1:2d:
81:aa:b9:65:41:7e:ce:cf:db:d2:49:96:55:7a:36:8e:cc:77:
fd:ec:92:23:36:fe:c2:e8:0f:ac:98:46:64:ce:d2:2f:67:1a:
7e:a5:bf:a7:81:6b:20:9a:0d:d8:95:f0:f2:44:bd:f2:33:85:
f5:a3:80:f0:04:a0:0d:7a:3a:0f:c6:5b:c0:63:15:0d:47:1c:
09:99:25:9b:eb:cf:b0:94:f8:a0:c6:07:6a:0a:8e:f9:be:6a:
59:fd:52:53:3a:ab:a8:a1:8b:56:1e:34:ea:70:6d:0d:46:9e:
b5:a7:68:d7:72:1a:ef:1d:6b:74:03:39:a2:7e:be:ae:c1:46:
ba:5f:8b:33:2f:7a:fb:ba:52:87:6d:47:d8:2b:52:bc:07:1a:
12:a8:19:c6:33:9b:b1:f0:84:57:39:b9:76:2f:1c:cf:38:61:
23:35:60:19:76:8a:72:e4:5d:d0:0d:f5:a6:8e:84:1b:c2:e6:
6e:bb:2d:04:e4:21:e5:32:16:77:ec:2d:88:39:d4:14:ad:ca:
34:81:75:5d:37:a8:0b:74:66:63:d1:84:8e:9a:44:15:c6:01:
73:d2:f8:72:64:b2:30:7f:48:85:a4:8f:0e:14:56:af:fd:17:
7e:9a:a1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:20:16 2026 by rpki-client