Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/AjcL-ijDxKZIFjyLFzzCmbm21pE.roa
File: AjcL-ijDxKZIFjyLFzzCmbm21pE.roa (raw, json)
Hash identifier: fitgQKWtoxn7zeJ/Tn0rksD7Ytz5US3zabHLrWisvHw=
Subject key identifier: 02:37:0B:FA:28:C3:C4:A6:48:16:3C:8B:17:3C:C2:99:B9:B6:D6:91
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 019D915B6890EC81A012BC0F19AA0FA7CB97
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/AjcL-ijDxKZIFjyLFzzCmbm21pE.roa
Signing time: Wed 15 Apr 2026 13:36:19 +0000
ROA not before: Wed 15 Apr 2026 13:36:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42473
IP address blocks: 159.195.0.0/24 maxlen: 24
159.195.90.0/24 maxlen: 24
159.195.142.0/24 maxlen: 24
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:5b:68:90:ec:81:a0:12:bc:0f:19:aa:0f:a7:cb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Apr 15 13:36:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02370bfa28c3c4a648163c8b173cc299b9b6d691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:99:70:c5:6b:69:e0:50:c4:d8:71:5a:7f:bb:
ff:c1:b2:50:c8:57:d2:cc:7e:72:17:2a:33:81:8c:
73:99:87:f3:f4:89:73:ed:19:b3:41:be:a5:a1:eb:
de:70:f6:4a:a4:4e:ff:f2:9d:c9:95:dc:29:47:f9:
19:00:65:4a:6b:b0:6d:a1:7f:7a:61:e4:a4:ee:ff:
65:13:0e:3a:d9:95:51:65:f1:98:6c:42:8a:e1:ce:
9a:6b:80:a3:37:e4:35:b8:f1:1b:75:48:8b:19:95:
c5:12:1a:e1:df:55:c8:e6:3c:35:d8:8f:14:d7:ea:
cf:86:81:43:ee:66:a4:aa:73:c9:a1:9d:00:d9:8b:
bd:5a:0c:c3:73:08:72:1b:55:dd:57:68:fb:60:52:
34:82:c2:6e:bc:89:91:54:d2:b1:f3:44:15:f6:e9:
59:f5:2c:aa:ba:94:a5:27:15:17:93:69:ff:42:5a:
68:3c:f4:7b:2f:fd:c1:88:3d:40:f5:33:a2:45:e8:
f5:30:01:40:8c:83:90:bf:24:20:0d:e7:12:29:27:
5a:f7:8f:5b:f3:6b:8a:3f:bb:c0:ea:d3:ef:23:b1:
d9:14:ea:54:32:32:f8:a9:a4:c9:89:c7:5c:98:9a:
9f:63:1f:c0:fa:73:67:bb:40:8c:4c:32:09:35:e5:
2b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:37:0B:FA:28:C3:C4:A6:48:16:3C:8B:17:3C:C2:99:B9:B6:D6:91
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/AjcL-ijDxKZIFjyLFzzCmbm21pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.195.0.0/24
159.195.90.0/24
159.195.142.0/24
IPv6:
2a0a:4cc0::/43
2a0a:4cc0:40::/43
2a0a:4cc0:80::/43
2a0a:4cc0:c0::/43
2a0a:4cc0:2000::/48
Signature Algorithm: sha256WithRSAEncryption
33:2b:87:4c:65:c7:0a:df:ff:58:ba:ba:2a:f1:f0:43:23:b2:
95:e2:b4:cd:df:14:a1:24:50:fe:2a:ff:72:7d:d3:b6:c4:f1:
38:da:06:cb:d7:dc:0d:8e:18:a7:f8:ba:a4:49:9c:a6:22:ef:
da:9d:92:31:04:58:a2:be:9e:c5:e2:d9:98:1a:bb:4d:a8:07:
10:7d:b3:95:59:a5:df:54:5d:c6:91:1e:79:e8:5c:e4:26:92:
4f:c1:3c:60:44:61:ad:c3:7c:50:d6:51:e4:a0:0d:5d:c4:4b:
58:7b:0c:73:2f:d4:a4:54:3f:46:5e:57:90:b3:10:9e:7d:d7:
33:42:c4:e1:a8:16:ef:26:09:28:5e:8f:eb:bb:4e:15:c6:ec:
00:ac:ba:e7:2b:90:93:7f:61:bd:66:94:e0:2d:79:8e:a3:76:
55:4f:27:f2:d0:96:81:95:6b:23:9a:cb:34:22:06:c6:f1:d5:
1c:64:5f:3a:df:d9:e0:8a:0d:8f:4c:a7:d3:f5:c7:c9:61:73:
7e:1a:f0:19:78:d4:7b:5e:4a:f6:48:82:24:38:2a:a4:39:e5:
18:64:00:66:25:2d:76:05:82:7e:d2:90:9d:a6:d7:0a:d9:b8:
09:55:e7:9d:db:a2:f7:c0:5a:79:9f:52:4f:1b:a8:ce:c2:fd:
50:89:3c:58
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgISAZ2RW2iQ7IGgErwPGaoPp8uXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MmVlYjg3OTA4NWM5NDE5NDI5N2RkOWU0Y2QyNDljZDI1
MTY1MTUwHhcNMjYwNDE1MTMzNjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjM3MGJmYTI4YzNjNGE2NDgxNjNjOGIxNzNjYzI5OWI5YjZkNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZlwxWtp4FDE2HFaf7v/wbJQyFfS
zH5yFyozgYxzmYfz9Ilz7RmzQb6loevecPZKpE7/8p3JldwpR/kZAGVKa7BtoX96
YeSk7v9lEw462ZVRZfGYbEKK4c6aa4CjN+Q1uPEbdUiLGZXFEhrh31XI5jw12I8U
1+rPhoFD7makqnPJoZ0A2Yu9WgzDcwhyG1XdV2j7YFI0gsJuvImRVNKx80QV9ulZ
9SyqupSlJxUXk2n/QlpoPPR7L/3BiD1A9TOiRej1MAFAjIOQvyQgDecSKSda949b
82uKP7vA6tPvI7HZFOpUMjL4qaTJicdcmJqfYx/A+nNnu0CMTDIJNeUraQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFAI3C/oow8SmSBY8ixc8wpm5ttaRMB8GA1UdIwQY
MBaAFPYu64eQhclBlCl92eTNJJzSUWUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzIt
NWZiZjlhMjliNmUxLzEvQWpjTC1pakR4S1pJRmp5TEZ6ekNtYm0yMXBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzItNWZiZjlhMjliNmUx
LzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzAYBAIAATASAwQAn8MAAwQA
n8NaAwQAn8OOMDMEAgACMC0DBwUqCkzAAAADBwUqCkzAAEADBwUqCkzAAIADBwUq
CkzAAMADBwAqCkzAIAAwDQYJKoZIhvcNAQELBQADggEBADMrh0xlxwrf/1i6uirx
8EMjspXitM3fFKEkUP4q/3J907bE8TjaBsvX3A2OGKf4uqRJnKYi79qdkjEEWKK+
nsXi2Zgau02oBxB9s5VZpd9UXcaRHnnoXOQmkk/BPGBEYa3DfFDWUeSgDV3ES1h7
DHMv1KRUP0ZeV5CzEJ591zNCxOGoFu8mCShej+u7ThXG7ACsuucrkJN/Yb1mlOAt
eY6jdlVPJ/LQloGVayOayzQiBsbx1RxkXzrf2eCKDY9Mp9P1x8lhc34a8Bl41Hte
SvZIgiQ4KqQ55RhkAGYlLXYFgn7SkJ2m1wrZuAlV553bovfAWnmfUk8bqM7C/VCJ
PFg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:49 2026 by rpki-client