Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/AqAC2ah-Z0NmRzRIk6oEA6UZRn0.roa
File: AqAC2ah-Z0NmRzRIk6oEA6UZRn0.roa (raw, json)
Hash identifier: ucnwawYljZAXKNd0s9/3Np1rI70whuoCcLY80XD7ssI=
Subject key identifier: 02:A0:02:D9:A8:7E:67:43:66:47:34:48:93:AA:04:03:A5:19:46:7D
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019A30DBCF5DF768269FF3A189BEF9528434
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/AqAC2ah-Z0NmRzRIk6oEA6UZRn0.roa
Signing time: Wed 29 Oct 2025 16:45:03 +0000
ROA not before: Wed 29 Oct 2025 16:45:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200202
IP address blocks: 195.216.171.0/24 maxlen: 24
195.216.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:db:cf:5d:f7:68:26:9f:f3:a1:89:be:f9:52:84:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Oct 29 16:45:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02a002d9a87e67436647344893aa0403a519467d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:9e:98:8f:0b:19:78:15:b1:c4:a9:de:81:
ec:95:f9:4f:5d:fe:aa:45:9e:5a:6b:fa:52:9e:d3:
15:8a:cc:4b:89:a4:ee:02:17:18:a3:a4:26:2d:1f:
43:e5:4f:19:19:be:30:93:74:b3:40:6b:1c:f0:62:
cb:c8:06:cc:0a:1a:22:29:f0:44:1b:bd:38:08:bd:
54:0e:d8:c4:19:84:e0:66:a1:04:c5:cc:ea:82:74:
a8:d6:9b:85:3a:61:12:df:d6:a7:2a:0d:b5:cf:cd:
57:1f:a0:86:95:20:82:04:31:03:5e:c1:3e:9c:a3:
e5:5b:86:80:fa:f6:7a:bb:37:c0:84:1a:e1:dc:c5:
c2:24:34:9e:80:50:37:de:6c:8e:85:90:63:28:85:
c1:d9:90:e8:67:41:52:f8:d1:9b:0f:64:de:6c:42:
3b:77:9a:8b:0c:43:52:6d:16:6f:dc:f6:50:8f:52:
e1:53:c7:da:70:3c:36:21:81:ee:9e:84:ff:48:aa:
0b:58:64:41:e5:a2:ea:2a:23:a6:5d:15:54:51:6f:
71:b3:b2:35:f6:8c:60:82:7f:4c:50:86:97:1d:99:
e6:03:58:20:08:09:1d:56:b1:19:14:d0:dc:e9:7e:
d1:09:b1:a4:c6:40:3d:d8:14:00:5a:04:d2:92:d4:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A0:02:D9:A8:7E:67:43:66:47:34:48:93:AA:04:03:A5:19:46:7D
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/AqAC2ah-Z0NmRzRIk6oEA6UZRn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.171.0/24
195.216.190.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a6:80:a3:69:1c:f9:a7:22:e7:f7:0d:cf:20:18:5a:40:d0:
ce:a1:f6:c4:2a:91:17:e5:0e:27:4f:f2:a7:cd:8c:67:8f:19:
74:26:3b:70:37:91:a8:fe:1c:4d:e9:21:ae:b8:04:df:8e:fc:
5f:f3:a9:c9:4b:55:82:f3:d0:2a:a7:46:72:87:72:fc:e9:aa:
dc:1e:c7:96:7c:e1:6d:0e:f1:c2:cd:d2:f3:0f:bf:0d:2c:b0:
b2:16:88:77:af:b0:e9:87:71:c2:a0:df:54:19:ed:db:9c:52:
63:98:bc:c8:1e:31:ef:55:23:93:30:70:cc:eb:2a:2d:48:f7:
3c:39:f1:46:3c:66:e4:58:5a:c4:62:cf:66:f3:3f:44:98:19:
9f:15:ba:58:60:82:a7:7e:ef:cf:6a:13:52:44:e9:5b:ea:27:
27:ba:65:7c:79:c9:ee:0e:f0:09:02:d4:e9:a1:73:b4:14:86:
05:72:83:33:d3:c4:15:88:a2:98:a6:4f:d3:91:73:aa:4b:09:
17:69:58:92:d1:21:9c:72:a2:69:4d:6a:e7:c9:3f:79:71:b4:
63:b1:f5:62:74:1d:3d:41:1a:36:64:72:7a:2a:97:c3:e7:23:
db:de:4f:28:ef:36:1f:64:d5:3f:fa:68:48:fa:34:e5:c6:06:
42:1c:ef:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:24:37 2025 by rpki-client