Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/aRpMoNfVoHHCetMuiNTi6dPgaOM.roa
File: aRpMoNfVoHHCetMuiNTi6dPgaOM.roa (raw, json)
Hash identifier: ZJutzzFMePFpj0k4bv2vt/i1sHOpOa8UVKP/+MvFsIA=
Subject key identifier: 69:1A:4C:A0:D7:D5:A0:71:C2:7A:D3:2E:88:D4:E2:E9:D3:E0:68:E3
Certificate issuer: /CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Certificate serial: 01A07FF0C3C22D9A7972EB61132BA18E73CE
Authority key identifier: C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/aRpMoNfVoHHCetMuiNTi6dPgaOM.roa
Signing time: Tue 08 Sep 2026 07:34:40 +0000
ROA not before: Tue 08 Sep 2026 07:34:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202208
IP address blocks: 45.154.224.0/22 maxlen: 22
45.154.224.0/23 maxlen: 23
45.154.226.0/23 maxlen: 23
185.42.252.0/22 maxlen: 22
185.42.252.0/24 maxlen: 24
185.42.254.0/23 maxlen: 23
193.111.168.0/24 maxlen: 24
193.111.174.0/24 maxlen: 24
193.111.226.0/24 maxlen: 24
193.111.229.0/24 maxlen: 24
2a01:66a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:f0:c3:c2:2d:9a:79:72:eb:61:13:2b:a1:8e:73:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Validity
Not Before: Sep 8 07:34:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=691a4ca0d7d5a071c27ad32e88d4e2e9d3e068e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:e3:31:89:e6:33:e9:c0:4b:19:13:7d:96:
66:5b:b3:dd:eb:22:f4:fa:f8:6a:ed:da:82:42:d0:
97:b3:84:e1:8a:92:2e:bc:40:e2:04:47:5a:72:ae:
c0:4d:05:91:b8:1b:67:8b:c5:51:dd:22:da:96:0a:
2e:ab:80:e2:46:9c:70:4c:20:ce:c6:57:80:4f:f3:
fc:79:de:01:fa:44:61:54:ea:30:34:4c:84:ef:71:
02:5b:91:dd:b6:cd:56:4b:1e:63:4b:a2:b4:df:a7:
39:98:4b:94:96:ff:ad:bf:8a:f2:8c:83:f4:a8:41:
5f:75:7a:a5:22:86:86:60:8b:b5:f4:f6:f2:86:e8:
eb:3c:20:4d:ee:07:eb:fd:62:1d:fd:61:18:47:72:
47:60:67:0a:c3:a6:8a:71:20:62:95:1b:94:c3:d2:
a8:cf:fd:ec:d2:55:41:02:3a:f2:2a:f4:c4:47:8e:
1a:aa:44:77:4c:63:bc:e0:fb:9e:77:22:32:a4:1f:
77:23:e1:63:dd:72:a6:32:e3:52:81:0d:c2:61:41:
7d:d7:cc:5f:e1:e1:db:41:0a:3c:1d:1f:ff:0e:95:
69:4d:1c:b2:12:55:00:9e:a9:6d:be:02:f0:09:3a:
f8:f5:de:82:c3:d2:b7:e7:83:73:2c:96:a5:bb:38:
38:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1A:4C:A0:D7:D5:A0:71:C2:7A:D3:2E:88:D4:E2:E9:D3:E0:68:E3
X509v3 Authority Key Identifier:
keyid:C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/aRpMoNfVoHHCetMuiNTi6dPgaOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.224.0/22
185.42.252.0/22
193.111.168.0/24
193.111.174.0/24
193.111.226.0/24
193.111.229.0/24
IPv6:
2a01:66a0::/32
Signature Algorithm: sha256WithRSAEncryption
af:fe:ab:f0:ac:f6:fb:f7:61:82:ac:bd:1a:13:60:97:6b:50:
54:9d:83:db:19:1b:86:60:68:10:0c:ed:bf:e3:08:17:a5:c8:
fc:1f:2f:85:75:c6:5f:9e:87:6f:26:2c:d4:c1:45:d6:22:6d:
e7:c0:76:1e:00:be:c0:20:cd:8e:37:55:27:c8:07:49:bc:93:
09:27:08:cc:dc:48:30:04:9e:3f:2a:2a:76:43:1d:a6:99:7d:
71:dc:1c:c3:75:ca:9a:ec:6b:0e:31:19:ef:a3:08:b9:96:6d:
a9:b3:c4:ae:81:42:31:70:25:fc:5e:3b:0a:f9:a4:0a:c7:0e:
36:56:de:54:b6:e5:d4:96:a8:79:a5:d6:ee:a4:98:70:7c:d1:
c8:d7:39:f4:69:a8:4b:2d:ca:61:8e:5a:4e:e9:f0:f9:1e:01:
18:52:c4:a1:6c:15:06:ce:71:92:99:68:f2:23:8c:f8:25:6c:
98:6d:b9:42:fd:7a:9e:3d:a4:77:e4:3c:b2:4e:ae:4d:7f:4d:
27:b4:35:40:8e:ef:61:28:b0:58:11:85:1b:0d:ec:bc:19:c6:
da:0e:be:33:f1:b0:3c:8e:de:a0:cf:c9:a8:71:27:1a:b7:f7:
1e:29:b1:23:05:38:28:70:82:91:d4:0e:ad:74:7b:be:3a:e0:
1c:4b:3d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:13:10 2026 by rpki-client