Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/Apg6THL6nNSCI_zX9N0HioO5_FI.roa
File: Apg6THL6nNSCI_zX9N0HioO5_FI.roa (raw, json)
Hash identifier: xOzp8DMGrF7dA8wIkMVpYr0krnXQI+toAtngHnKO/CA=
Subject key identifier: 02:98:3A:4C:72:FA:9C:D4:82:23:FC:D7:F4:DD:07:8A:83:B9:FC:52
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 019B797EDB8E6963A233376264F8B7A74BB1
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/Apg6THL6nNSCI_zX9N0HioO5_FI.roa
Signing time: Thu 01 Jan 2026 12:18:35 +0000
ROA not before: Thu 01 Jan 2026 12:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214742
IP address blocks: 193.162.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:db:8e:69:63:a2:33:37:62:64:f8:b7:a7:4b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Jan 1 12:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02983a4c72fa9cd48223fcd7f4dd078a83b9fc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:fe:37:c0:6b:69:7b:7e:ef:bb:5c:fb:c5:
ed:71:73:24:87:21:8e:78:cd:16:97:a9:df:09:b8:
05:2f:a9:e1:b2:dd:47:58:f8:7d:b8:05:4f:bc:3f:
75:3c:d9:ce:17:50:bb:a3:d6:fa:a7:aa:82:e3:ad:
43:ff:77:9d:0c:4d:aa:98:43:74:34:b7:c6:d9:e3:
df:67:8a:67:3f:cb:e1:55:f9:c3:e7:c3:d0:90:c8:
f6:f8:0e:34:e1:d2:f3:d2:1e:eb:c2:3a:a5:44:71:
bb:f5:fd:79:82:d2:a0:a1:20:f5:77:58:9f:72:30:
ab:43:18:11:66:02:59:61:ec:b9:b6:e8:12:d9:10:
7d:ff:f0:96:70:9d:d8:cd:b6:11:5f:7f:b9:f9:41:
6a:0d:1e:e5:20:d6:d2:22:03:b8:8e:cc:69:64:30:
bd:20:3e:e9:65:c8:51:e7:4a:23:3e:b1:63:38:51:
94:a3:5d:e1:87:69:e3:c9:e6:13:c5:c8:24:a6:d9:
c8:13:c8:66:26:cd:12:a6:fd:98:b6:3c:55:64:fd:
73:fb:4c:4b:4f:09:e4:a7:f0:25:f4:0b:dd:5d:b5:
a7:1e:f7:84:a0:80:bc:c5:db:d0:f9:a6:ca:d7:b0:
d4:74:13:b7:53:30:4e:2b:6d:b7:6f:c8:34:25:b9:
2b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:98:3A:4C:72:FA:9C:D4:82:23:FC:D7:F4:DD:07:8A:83:B9:FC:52
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/Apg6THL6nNSCI_zX9N0HioO5_FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.29.0/24
Signature Algorithm: sha256WithRSAEncryption
73:47:1e:8d:4a:c3:8b:e4:cb:f8:c1:92:c3:aa:cf:e0:0c:42:
93:dd:72:20:96:46:e0:62:dd:91:a9:b6:99:13:27:84:d3:a9:
6e:88:a6:10:19:17:79:74:db:81:78:fb:3f:10:69:33:f9:1d:
58:29:c5:1e:0a:77:49:48:16:12:eb:2c:b8:56:56:b8:15:58:
3a:1f:2d:f0:0e:80:66:c9:20:1d:33:74:a2:c3:50:c3:65:1a:
41:96:74:17:50:64:0a:f1:b1:3a:2b:91:2a:3c:34:e1:7b:36:
3a:68:6e:01:02:3c:61:2c:ff:7e:79:f8:63:a2:b5:91:c1:75:
b5:25:c2:2f:d3:6e:40:f4:b6:00:57:41:b4:35:94:5f:e3:2c:
16:e5:db:47:aa:2a:44:2a:5f:fd:04:cd:ba:db:5c:1b:ab:7c:
50:cb:ef:2a:d3:9c:88:2e:e9:44:7a:25:28:af:1c:4e:53:81:
bd:f8:8e:e6:6b:af:8d:89:89:4f:a5:94:2c:29:9c:61:7a:e5:
a9:82:0f:74:22:65:96:ae:7a:fc:d1:7b:dc:8f:94:b8:2c:66:
01:53:5f:c9:34:29:65:00:65:0c:a5:4f:a5:d4:c1:75:b2:6e:
c6:1f:46:65:96:34:e6:59:45:1d:66:12:68:dc:87:0b:00:89:
83:e9:df:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:40:12 2026 by rpki-client