Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/AvaeWG-njVdOVlLECWj-IW43uqs.roa
File: AvaeWG-njVdOVlLECWj-IW43uqs.roa (raw, json)
Hash identifier: gNzxs1dP4CTxfTmXk2sbLEZ/MxqwjiItf63NRx4XFwI=
Subject key identifier: 02:F6:9E:58:6F:A7:8D:57:4E:56:52:C4:09:68:FE:21:6E:37:BA:AB
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 01A0A439825CEB53AD0876EA63C9865676AA
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/AvaeWG-njVdOVlLECWj-IW43uqs.roa
Signing time: Tue 15 Sep 2026 08:40:27 +0000
ROA not before: Tue 15 Sep 2026 08:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57717
IP address blocks: 185.173.233.0/24 maxlen: 24
185.173.235.0/24 maxlen: 24
185.216.140.0/23 maxlen: 23
185.216.143.0/24 maxlen: 24
2a0b:b7c0::/30 maxlen: 30
2a0b:b7c4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:39:82:5c:eb:53:ad:08:76:ea:63:c9:86:56:76:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Sep 15 08:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02f69e586fa78d574e5652c40968fe216e37baab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:3e:5e:e2:cf:45:16:74:75:08:29:fa:52:
30:08:77:9b:b5:6d:0d:4e:34:e5:83:0f:9a:7e:ab:
72:e5:47:e7:68:fd:0f:b6:f8:c6:99:17:e1:58:2b:
7f:41:8b:39:53:ce:38:85:12:41:4d:78:16:7d:82:
61:02:cb:ac:19:bc:fa:9b:b6:df:bf:8c:8e:d1:50:
89:ae:39:09:69:e3:0e:6d:a3:13:fd:11:4f:49:eb:
96:ce:81:36:87:a7:16:10:84:6e:6e:c0:0b:43:da:
47:5b:4d:c3:89:ab:de:6e:94:bc:23:6e:36:5b:cd:
7a:11:91:2d:77:70:83:73:b5:c9:4f:b3:17:78:f2:
4d:f6:ed:10:53:20:c8:18:85:19:1e:6c:2e:3f:bc:
21:25:bb:df:9a:08:d9:86:53:74:1e:fb:03:64:25:
05:85:28:e7:65:62:ce:29:c3:21:8f:ce:72:a8:a1:
c9:0c:ee:71:1f:7f:07:b8:1f:71:00:c2:c9:62:f8:
8e:ae:3f:67:f5:69:6c:10:9e:87:35:8a:93:93:b7:
12:67:8a:a9:84:61:d7:19:e0:94:c3:e8:fa:f5:dc:
06:12:b5:68:94:db:dc:28:66:20:c1:ef:46:b6:ce:
fb:21:90:f9:1a:de:48:f9:0f:7e:89:be:4c:cf:7e:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F6:9E:58:6F:A7:8D:57:4E:56:52:C4:09:68:FE:21:6E:37:BA:AB
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/AvaeWG-njVdOVlLECWj-IW43uqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.233.0/24
185.173.235.0/24
185.216.140.0/23
185.216.143.0/24
IPv6:
2a0b:b7c0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:aa:b3:2c:eb:3d:c9:ef:da:5a:49:a7:ec:06:78:aa:c6:eb:
73:87:0e:6d:6f:35:23:d9:e1:0f:41:a7:ed:eb:87:d1:9a:44:
5c:fc:9c:f0:c5:96:79:5e:f6:58:10:a1:0f:92:6d:0b:e8:f3:
30:f2:0f:1e:89:2d:ac:09:29:6e:f1:6b:76:fd:13:19:05:d6:
63:13:4d:af:bc:74:88:af:4d:a2:3e:90:95:77:22:5b:3e:25:
8f:47:8a:d1:e9:b1:74:c1:c5:e0:02:9c:89:6f:c8:b9:fb:2d:
33:cb:1d:4d:0b:c7:23:05:18:80:32:ed:2d:02:b7:e9:94:c1:
37:5c:2e:f8:b6:09:03:2f:43:b0:dc:7b:2b:14:2a:ad:97:90:
f2:b8:f4:3e:df:2a:33:bc:e7:55:ff:a5:f2:05:90:58:7a:48:
9a:af:43:18:6b:6c:cf:63:93:8f:85:11:ed:40:2d:06:1d:77:
f7:65:28:d6:14:28:57:73:32:ea:c7:46:03:6d:c8:b5:05:14:
1b:5c:31:c5:f1:39:c8:2c:2d:92:48:25:67:9f:08:94:f3:00:
57:cf:99:02:4e:21:d6:ec:88:d3:49:54:f1:9d:1f:24:6a:62:
eb:83:01:00:5b:f3:bd:ff:29:66:62:b6:f2:d4:88:d7:ca:8e:
fa:3a:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:27:57 2026 by rpki-client