Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/AmBJyl5ovbssE-PJlDHRkK3u7S4.roa
File: AmBJyl5ovbssE-PJlDHRkK3u7S4.roa (raw, json)
Hash identifier: EWjZiamS52i8XO7vsRUp32gXK70wGAykXmn9WU3Qm7c=
Subject key identifier: 02:60:49:CA:5E:68:BD:BB:2C:13:E3:C9:94:31:D1:90:AD:EE:ED:2E
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 01A0640D7B900E333899B7DA2E15628D55F1
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/AmBJyl5ovbssE-PJlDHRkK3u7S4.roa
Signing time: Wed 02 Sep 2026 21:36:40 +0000
ROA not before: Wed 02 Sep 2026 21:36:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49689
IP address blocks: 185.235.147.0/24 maxlen: 24
188.240.51.0/24 maxlen: 24
195.8.46.0/24 maxlen: 24
2a10:8b40::/32 maxlen: 32
2a10:8b40:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:64:0d:7b:90:0e:33:38:99:b7:da:2e:15:62:8d:55:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Sep 2 21:36:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=026049ca5e68bdbb2c13e3c99431d190adeeed2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:5b:09:53:a9:dd:97:1a:57:13:12:c7:b4:
84:19:e8:1b:fb:fc:e8:4a:26:99:1f:36:b1:ad:a1:
1e:2c:dd:b6:f2:14:d9:3e:97:1f:82:05:52:85:5e:
9f:cf:fb:8d:16:25:ef:20:96:b8:11:51:db:75:b7:
cf:1e:24:9f:02:d1:f5:f8:6b:1f:24:79:dd:ec:f8:
2c:9a:5a:2b:9e:40:64:92:d2:0e:55:89:b1:22:b2:
2e:d9:69:c2:b6:14:f7:a6:6e:5e:e4:2e:b5:f3:f5:
9e:ad:9e:b0:5d:d3:52:e1:d5:3b:b4:ea:35:62:20:
cc:e6:bb:a2:4c:d1:d9:98:1f:a0:6f:84:d2:0c:c9:
20:c1:d0:3d:f9:d4:fc:0c:32:23:9f:22:1b:6f:39:
53:83:a2:cd:09:ce:b2:64:fa:56:50:c6:38:03:55:
5d:81:f0:ea:d8:9e:9b:df:43:86:9e:40:ef:0c:28:
49:e3:d0:a5:a6:58:ed:fe:bb:cd:a1:f5:d4:ca:28:
9b:5b:c9:cf:b2:4d:cb:e3:ce:44:1d:28:05:69:07:
b3:79:b5:f8:86:1c:8d:b1:24:16:c5:06:b8:0c:8e:
d6:0f:1e:81:53:ca:3b:f7:8c:83:ea:59:84:81:6e:
d6:33:79:98:2c:1e:c1:ae:6a:74:02:9c:88:04:cd:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:60:49:CA:5E:68:BD:BB:2C:13:E3:C9:94:31:D1:90:AD:EE:ED:2E
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/AmBJyl5ovbssE-PJlDHRkK3u7S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.147.0/24
188.240.51.0/24
195.8.46.0/24
IPv6:
2a10:8b40::/32
Signature Algorithm: sha256WithRSAEncryption
74:08:cc:29:5d:02:0e:e5:51:c0:a9:11:d9:9e:95:09:5f:dd:
5e:4d:28:96:c0:78:0e:8d:d6:d7:7e:6a:39:95:a0:04:01:0f:
56:24:d9:ae:fe:b4:d9:fa:e0:4c:4c:03:f1:46:62:04:3f:ad:
1a:57:99:11:e6:f1:08:ff:6b:d8:19:3c:ad:0d:03:f0:b7:f5:
64:19:25:cd:70:53:aa:9f:12:92:6f:23:b5:bb:05:49:0d:cd:
be:34:f7:3d:69:6c:d5:1e:32:05:37:fe:af:8b:85:98:18:c6:
39:f2:83:36:4f:49:ab:81:62:b2:f0:26:ce:2f:15:91:1a:64:
3b:88:35:bd:13:f9:26:aa:07:3d:ca:30:c4:5e:4e:48:3b:53:
20:b8:3c:15:5f:89:0d:d2:2f:c7:19:91:f1:08:63:e5:e3:2e:
d9:28:1c:88:44:6f:81:46:ee:e2:cc:8f:be:65:ac:56:8c:2b:
6d:b7:7b:3c:fc:ab:2d:5e:fc:20:03:ff:96:7b:12:ce:14:c4:
d5:0f:2f:ee:24:23:eb:94:ce:20:9f:27:a6:b4:96:9e:1b:b2:
8a:0a:50:b2:2a:e3:82:bc:6b:5f:22:8a:e0:ce:ae:cf:9c:bb:
90:76:83:a9:2f:e0:39:95:e4:fd:77:7a:d5:b0:6d:31:2b:7a:
3d:ae:55:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:52:01 2026 by rpki-client