Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/Ay_YI9anXmgYU-Bf82UDcySzed0.roa
File: Ay_YI9anXmgYU-Bf82UDcySzed0.roa (raw, json)
Hash identifier: 2lJ024qiGcU1ExFkhV6sOdHXGCcnKVJHXNg3IEia838=
Subject key identifier: 03:2F:D8:23:D6:A7:5E:68:18:53:E0:5F:F3:65:03:73:24:B3:79:DD
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 01A0902B3ADC8C1F08548B5D7E7E0E5F2B78
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/Ay_YI9anXmgYU-Bf82UDcySzed0.roa
Signing time: Fri 11 Sep 2026 11:12:27 +0000
ROA not before: Fri 11 Sep 2026 11:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57630
IP address blocks: 2.152.76.0/24 maxlen: 24
5.152.152.0/23 maxlen: 23
31.12.80.0/22 maxlen: 22
46.33.16.0/23 maxlen: 23
117.55.200.0/23 maxlen: 23
134.65.164.0/22 maxlen: 22
194.179.134.0/23 maxlen: 23
217.11.175.0/24 maxlen: 24
217.177.8.0/23 maxlen: 23
2a02:7e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:2b:3a:dc:8c:1f:08:54:8b:5d:7e:7e:0e:5f:2b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: Sep 11 11:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=032fd823d6a75e681853e05ff365037324b379dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:89:fe:dd:59:92:b1:d9:e2:56:60:89:8c:
eb:0a:85:0e:ed:d1:71:c9:ce:c3:0d:f2:88:35:84:
db:8c:1a:a2:1d:f1:4e:17:4f:28:a2:e7:0d:3a:37:
cc:ef:dc:3c:8b:01:84:2c:ec:ee:5a:23:e6:ac:90:
e7:19:ce:d1:75:2f:b2:22:a3:71:20:93:5c:c1:1c:
21:a9:ce:6d:5e:ac:ef:ec:8f:0d:97:0e:b6:dd:38:
34:73:95:59:0b:0e:a6:3e:24:86:a4:d4:65:4d:e6:
bd:a4:1b:a1:d1:bc:4c:d2:cb:1b:8c:26:e7:7c:91:
b7:04:d7:f9:17:6b:23:77:5d:e9:ca:8b:56:85:6a:
9d:0b:b5:59:3e:4c:c8:e6:16:b3:f6:63:7e:94:dd:
03:d8:91:e7:7f:93:be:0f:db:7f:98:88:a7:11:51:
89:86:8b:90:7f:cd:0a:1a:b3:f2:7e:c8:22:ea:7b:
9e:c2:24:a4:ad:7a:f4:88:75:87:ab:61:61:94:b1:
02:be:74:09:c4:78:af:0a:72:14:45:a0:56:2a:f7:
6b:1c:dd:1d:f6:86:8c:d1:0e:de:b2:5e:90:ec:19:
96:27:61:e5:86:b9:db:2f:9b:fc:26:d0:67:99:19:
c7:69:00:5d:ad:a0:f2:1e:18:6d:76:57:2d:71:a8:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2F:D8:23:D6:A7:5E:68:18:53:E0:5F:F3:65:03:73:24:B3:79:DD
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/Ay_YI9anXmgYU-Bf82UDcySzed0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.152.76.0/24
5.152.152.0/23
31.12.80.0/22
46.33.16.0/23
117.55.200.0/23
134.65.164.0/22
194.179.134.0/23
217.11.175.0/24
217.177.8.0/23
IPv6:
2a02:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
c0:9e:41:bc:a2:79:d6:f7:ef:8d:97:76:d2:a4:24:38:a8:9f:
73:b4:f1:c2:51:68:9d:40:61:3d:c6:f6:8c:a1:03:23:e2:e2:
ee:78:35:8d:e0:d8:72:38:c6:68:51:79:ea:16:1c:a9:ce:2e:
3a:3a:a3:c6:78:69:23:8a:65:89:2e:27:00:aa:1c:cb:75:f3:
43:f7:ae:d2:cc:e8:51:dc:5f:9a:a8:0f:91:13:f9:b4:1c:61:
a6:56:59:b4:3f:2e:48:90:ee:ee:44:12:7b:2c:de:ca:7d:19:
1f:08:4f:9a:25:c9:fa:7d:1b:05:c2:ea:fa:7c:eb:5d:83:fa:
7b:ad:bb:75:40:00:f6:8b:fb:67:c2:65:db:79:2d:ff:e1:b9:
14:bd:7f:e1:d2:d8:b1:d2:ff:7d:da:20:9c:98:5f:d0:6b:a3:
d0:15:ff:b0:c4:92:9e:be:b0:8c:14:4d:7f:e5:4f:25:54:94:
3f:b0:3b:fb:dc:f0:0b:a6:56:c1:c3:f1:55:ef:15:81:e0:9a:
58:e1:2b:c6:6c:9a:f5:36:16:92:a2:3c:4e:bf:d0:db:ae:bf:
0d:2b:9b:8b:ef:9e:88:09:50:c9:cb:ce:64:07:08:c1:89:ec:
c5:f2:1f:fa:51:25:f5:db:a1:4b:a6:f6:b3:08:26:e2:d2:0e:
c7:a4:aa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:36:01 2026 by rpki-client