Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/aJ9nGingvVJG2rrpEQGIL8zeAfM.roa
File: aJ9nGingvVJG2rrpEQGIL8zeAfM.roa (raw, json)
Hash identifier: TBYvSsMt/clFuSfyvBUudu0SSYbKGlrFpuon89ZE5XU=
Subject key identifier: 68:9F:67:1A:29:E0:BD:52:46:DA:BA:E9:11:01:88:2F:CC:DE:01:F3
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 01A0AA0FA64DC8C6DFADABBFFEF69FDBB066
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/aJ9nGingvVJG2rrpEQGIL8zeAfM.roa
Signing time: Wed 16 Sep 2026 11:52:27 +0000
ROA not before: Wed 16 Sep 2026 11:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 83.223.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:0f:a6:4d:c8:c6:df:ad:ab:bf:fe:f6:9f:db:b0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Sep 16 11:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=689f671a29e0bd5246dabae91101882fccde01f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:0d:cb:cc:67:24:88:ac:fb:e3:43:c3:61:
24:40:9b:17:e2:80:ce:c7:02:d5:07:e8:c9:a4:5f:
48:23:6a:4a:3a:0a:b8:8a:7e:95:c2:9a:4c:5c:9b:
dd:fc:9e:15:e2:87:9f:8f:74:64:e8:01:7b:27:41:
41:0f:95:aa:bb:38:28:19:d8:99:36:2c:0d:33:7a:
27:ca:79:81:ef:e2:66:4a:90:dc:a7:1d:7d:61:4c:
e9:b6:f0:95:95:12:0a:dd:e6:22:4e:a5:bc:0e:dc:
d4:c8:83:d7:01:d7:0a:87:c2:6f:d6:4e:61:15:f7:
b6:78:55:d0:58:42:2e:c4:ad:f6:9b:72:03:53:c3:
31:94:03:d0:c3:4c:99:56:f5:58:3e:74:85:4d:bc:
52:5b:81:a7:a0:52:e4:66:6d:2a:19:95:b9:1b:86:
e4:43:11:d4:7d:5f:6a:0a:ba:d9:cf:da:39:24:67:
db:69:cb:0a:5e:d7:94:07:63:c4:7a:78:b2:93:bd:
b3:6f:a6:91:c5:2e:9b:a3:ef:27:db:d1:51:f4:a8:
f4:6a:6a:83:d4:de:50:7d:af:26:a0:e5:67:71:d4:
7e:db:1d:03:24:f8:5c:db:13:62:93:bd:05:ad:10:
7c:c1:48:41:6e:6d:11:5d:9c:92:30:21:20:3f:3b:
48:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9F:67:1A:29:E0:BD:52:46:DA:BA:E9:11:01:88:2F:CC:DE:01:F3
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/aJ9nGingvVJG2rrpEQGIL8zeAfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.223.34.0/24
Signature Algorithm: sha256WithRSAEncryption
57:9d:ea:ca:e6:a6:24:a3:39:70:e0:36:50:6b:20:6e:e8:bb:
f3:90:9b:27:8a:9f:d4:00:34:9e:3a:2b:14:d5:d1:92:0d:d7:
2d:5c:dc:5e:5e:24:ec:2e:b2:1b:fb:75:a1:65:77:db:93:a4:
6f:be:70:59:43:2b:81:9c:8c:8c:7d:a9:78:33:a8:a9:1e:68:
b5:f7:60:b9:41:07:03:6e:e3:e6:0c:86:9e:83:30:9c:89:43:
be:90:ee:87:a8:c3:ba:0c:8c:e6:c4:88:86:f0:5c:88:13:cf:
bc:0e:e6:20:7d:57:d5:21:c5:8c:48:6a:ad:5b:b7:86:62:f2:
a6:6f:72:8b:1f:57:a6:61:4c:b9:77:4d:ef:60:20:ee:0b:fe:
8a:33:d3:17:eb:b0:4a:44:01:5b:32:8e:48:b2:84:9b:53:99:
85:ba:2a:da:41:ad:77:af:0c:c9:bb:13:92:75:95:c9:db:65:
3b:ff:d2:d6:91:59:d7:e0:f8:b6:f4:4c:58:9e:a1:3e:55:1a:
79:74:6b:59:fd:8d:6f:d8:02:1a:8f:2c:8d:15:6b:f5:27:9a:
3e:2c:cb:9f:e2:19:a5:ba:07:f8:91:98:d0:0c:bb:e5:58:c2:
9c:a7:19:88:ef:0f:24:01:f0:cc:05:fc:b0:f7:8f:86:80:3f:
09:1c:0d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:47:38 2026 by rpki-client