Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/AxHAZMrFjIgIbfUGhqo5wkGni1U.roa
File: AxHAZMrFjIgIbfUGhqo5wkGni1U.roa (raw, json)
Hash identifier: LK2ApUo96K2CQCwZ7mds8cZymVzPzAFLVUrbUlc4umA=
Subject key identifier: 03:11:C0:64:CA:C5:8C:88:08:6D:F5:06:86:AA:39:C2:41:A7:8B:55
Certificate issuer: /CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
Certificate serial: 01A0A9EB068B564A4B6D0F9435507E98EF72
Authority key identifier: BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/AxHAZMrFjIgIbfUGhqo5wkGni1U.roa
Signing time: Wed 16 Sep 2026 11:12:27 +0000
ROA not before: Wed 16 Sep 2026 11:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62425
IP address blocks: 213.177.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:eb:06:8b:56:4a:4b:6d:0f:94:35:50:7e:98:ef:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
Validity
Not Before: Sep 16 11:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0311c064cac58c88086df50686aa39c241a78b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c2:5f:6c:fb:cb:87:f9:b5:de:66:8c:25:73:
67:82:4d:6d:2d:d1:33:87:51:c5:86:73:0b:55:cb:
a0:2d:7e:d1:cc:1f:d5:18:96:7d:98:8c:37:c1:2e:
aa:a6:0a:67:b2:f4:91:4a:05:67:88:df:3b:25:b2:
9c:36:d2:9a:5f:19:78:f8:04:7c:70:78:1e:41:2e:
9f:69:0a:2c:69:78:8b:85:e2:6f:43:46:ba:1b:0b:
c2:cc:0f:20:4c:6d:2e:2e:25:0c:93:70:8f:ff:b1:
da:e5:22:6a:c6:26:31:40:ac:56:d4:9c:65:3d:af:
a4:3f:af:bb:ff:1f:12:66:95:de:8b:dd:82:18:30:
02:5d:49:17:5f:97:2d:ad:d0:94:30:63:4a:c7:73:
e6:f7:93:1a:87:c3:45:fe:ff:91:f5:f0:09:f1:87:
b0:b8:6b:00:3b:01:fb:ea:fa:e9:62:ac:15:8c:a2:
45:fd:6d:e9:eb:d2:a2:2e:1e:6f:a2:52:5f:0b:69:
dc:12:bf:af:11:9f:69:d4:06:a2:64:d1:04:1f:f2:
25:1a:8a:73:0c:f6:ca:82:ad:55:b1:c0:c7:a5:69:
d1:eb:6c:ec:13:dc:77:f6:b8:9a:72:9e:20:25:d1:
89:ad:00:18:b6:b2:c0:ce:c1:9f:cf:c9:cc:09:51:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:11:C0:64:CA:C5:8C:88:08:6D:F5:06:86:AA:39:C2:41:A7:8B:55
X509v3 Authority Key Identifier:
keyid:BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/AxHAZMrFjIgIbfUGhqo5wkGni1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.177.186.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f7:3b:f1:f3:02:93:05:91:a3:74:d4:2b:d3:eb:1d:88:e6:
6f:f4:05:1b:10:9f:34:69:b8:c3:9a:2d:c0:08:79:49:f4:ac:
44:18:d9:50:5d:12:8d:18:21:7d:bc:f2:8c:5f:d4:00:19:4b:
97:ea:7a:58:e5:e6:a1:ff:e0:00:8f:10:95:67:ce:40:f9:99:
8d:4f:26:6d:92:4b:e2:ec:20:34:e6:d0:79:09:ee:9d:1b:15:
09:be:ce:a2:bc:93:1b:21:d6:a3:cd:64:a2:08:77:d4:49:ca:
f1:60:fd:9d:7d:9f:62:76:6f:93:07:59:58:80:90:bd:59:9c:
6a:01:28:10:6b:03:20:64:bd:94:de:e9:00:19:61:f0:bf:2a:
cb:d1:9a:d0:85:c9:c9:bd:a9:24:61:6d:cf:3f:81:ed:12:5b:
db:37:9e:02:ae:a8:d7:21:d0:71:26:b4:f1:dd:86:9b:af:86:
16:70:f6:89:61:d7:d9:ff:a9:b7:fa:58:37:b2:0e:f1:0a:03:
b8:b1:cd:20:2e:29:5f:3a:e9:fe:19:8e:ac:4d:3b:23:d2:c8:
83:ec:97:04:3e:28:5c:b8:1e:65:f4:fc:f4:6f:3c:31:3b:65:
88:33:70:fd:fe:00:9a:3d:0f:2d:f3:35:62:14:64:f6:a4:40:
e5:0b:ca:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:30:30 2026 by rpki-client