Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/AK4y5Yo9ayCfpMH_MDJ76y33uGo.roa
File: AK4y5Yo9ayCfpMH_MDJ76y33uGo.roa (raw, json)
Hash identifier: fHKlhzEm7Am6zseRdyfLR7iKSnBY8Ngvrjg8FNEEqok=
Subject key identifier: 00:AE:32:E5:8A:3D:6B:20:9F:A4:C1:FF:30:32:7B:EB:2D:F7:B8:6A
Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial: 019F17E8902284263705F237D0C93E0557F0
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/AK4y5Yo9ayCfpMH_MDJ76y33uGo.roa
Signing time: Tue 30 Jun 2026 09:42:24 +0000
ROA not before: Tue 30 Jun 2026 09:42:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209510
IP address blocks: 152.89.172.0/23 maxlen: 23
152.89.174.0/23 maxlen: 23
2a09:35c0:100::/40 maxlen: 40
2a09:35c0:200::/40 maxlen: 40
2a09:35c0:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:e8:90:22:84:26:37:05:f2:37:d0:c9:3e:05:57:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Validity
Not Before: Jun 30 09:42:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00ae32e58a3d6b209fa4c1ff30327beb2df7b86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ac:f8:d2:b1:b3:41:f2:0a:28:aa:4a:4d:33:
28:49:ee:9b:ce:21:dc:d5:63:a2:1e:fb:e0:61:98:
3e:5e:63:75:68:22:49:52:c3:5b:c1:9f:78:f5:86:
4f:c8:9d:da:13:94:00:73:54:64:df:19:22:b5:f3:
35:55:26:df:95:ae:c7:26:2b:2a:90:24:a3:a0:30:
6e:57:29:c5:22:f9:8d:ff:9c:ce:41:9f:cf:34:1d:
34:18:67:d8:e7:7b:af:29:df:16:49:e6:22:43:99:
d7:7b:60:29:87:79:05:2a:7a:89:00:4c:2c:2b:1d:
31:c2:d8:46:7d:61:4f:14:0d:d7:ef:3b:b3:75:19:
1d:c1:aa:66:91:fb:81:a1:c4:ec:5c:72:51:d1:a7:
df:91:b0:93:40:73:1d:0e:48:ab:8d:e1:c8:f8:4b:
0e:d3:43:0f:ad:e1:4c:75:23:9a:97:2a:39:93:11:
fd:67:9e:b2:dd:72:cd:ef:a1:b5:d3:11:c7:0b:72:
8d:82:00:4d:b6:3b:3f:43:09:ce:28:a7:24:cd:16:
a3:4f:cb:63:c1:35:e7:cb:65:7b:f8:83:09:d1:84:
98:b5:ce:34:07:dc:ed:1d:5c:75:4c:bd:2b:ef:f2:
fb:0b:58:a7:7a:e6:37:a8:24:b9:af:7d:81:42:5b:
ee:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AE:32:E5:8A:3D:6B:20:9F:A4:C1:FF:30:32:7B:EB:2D:F7:B8:6A
X509v3 Authority Key Identifier:
keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/AK4y5Yo9ayCfpMH_MDJ76y33uGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.172.0/22
IPv6:
2a09:35c0:100::-2a09:35c0:2ff:ffff:ffff:ffff:ffff:ffff
2a09:35c0:400::/40
Signature Algorithm: sha256WithRSAEncryption
25:08:da:82:fe:8e:b0:c5:33:77:74:74:f9:68:a3:27:ff:fd:
2a:a3:55:20:73:3f:f8:ef:29:df:be:62:7b:99:26:22:70:e9:
f0:88:38:db:ff:8d:0f:13:7d:66:e2:2a:59:37:ff:79:a2:c4:
7d:fb:b9:a3:52:01:0d:1f:55:91:b3:a1:21:a6:60:c3:c3:25:
ae:32:65:36:91:82:c8:3f:23:49:ed:ca:72:6b:76:f2:4f:81:
07:4f:eb:a6:b8:a8:57:ad:35:90:27:a9:fd:95:a1:6c:29:20:
e6:29:71:d6:67:ca:7d:3c:8a:ac:af:6e:3e:4b:d4:f0:76:b0:
28:83:ea:33:c5:79:66:01:f2:a8:5c:95:90:3b:ac:f0:73:1a:
43:a1:32:f1:51:3f:f5:f2:7b:f9:e7:34:df:81:c1:8b:69:2e:
8a:1c:ad:02:2f:a7:c7:86:21:35:80:25:78:e0:69:99:07:90:
a5:f1:5c:54:f4:c9:4d:a0:8d:5e:1f:c8:b9:8d:72:a5:13:86:
c6:2e:66:59:4e:97:d1:99:9a:3a:ce:01:e8:3e:a9:de:20:07:
48:e1:62:9b:96:47:3e:e3:b1:bf:d0:9f:49:3d:ba:32:b2:15:
51:e5:ca:ee:05:e7:aa:a8:ae:b2:5a:bc:8e:b5:0e:e6:dc:d1:
05:f4:77:be
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZ8X6JAihCY3BfI30Mk+BVfwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMDUxYjBlMmNlOWE0YzllNjEyMWU5ODNkMTY1ZmVhYjg3
ZWMzNTQwHhcNMjYwNjMwMDk0MjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGFlMzJlNThhM2Q2YjIwOWZhNGMxZmYzMDMyN2JlYjJkZjdiODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqz40rGzQfIKKKpKTTMoSe6bziHc
1WOiHvvgYZg+XmN1aCJJUsNbwZ949YZPyJ3aE5QAc1Rk3xkitfM1VSbfla7HJisq
kCSjoDBuVynFIvmN/5zOQZ/PNB00GGfY53uvKd8WSeYiQ5nXe2Aph3kFKnqJAEws
Kx0xwthGfWFPFA3X7zuzdRkdwapmkfuBocTsXHJR0affkbCTQHMdDkirjeHI+EsO
00MPreFMdSOalyo5kxH9Z56y3XLN76G10xHHC3KNggBNtjs/QwnOKKckzRajT8tj
wTXny2V7+IMJ0YSYtc40B9ztHVx1TL0r7/L7C1ineuY3qCS5r32BQlvuMwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFACuMuWKPWsgn6TB/zAye+st97hqMB8GA1UdIwQY
MBaAFHEFGw4s6aTJ5hIemD0WX+q4fsNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAt
NzM2YWI4MzQ5NGFjLzEvQUs0eTVZbzlheUNmcE1IX01ESjc2eTMzdUdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAtNzM2YWI4MzQ5NGFj
LzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAMBAIAATAGAwQCmFmsMCAE
AgACMBowEAMGACoJNcABAwYAKgk1wAIDBgAqCTXABDANBgkqhkiG9w0BAQsFAAOC
AQEAJQjagv6OsMUzd3R0+WijJ//9KqNVIHM/+O8p375ie5kmInDp8Ig42/+NDxN9
ZuIqWTf/eaLEffu5o1IBDR9VkbOhIaZgw8MlrjJlNpGCyD8jSe3Kcmt28k+BB0/r
prioV601kCep/ZWhbCkg5ilx1mfKfTyKrK9uPkvU8HawKIPqM8V5ZgHyqFyVkDus
8HMaQ6Ey8VE/9fJ7+ec034HBi2kuihytAi+nx4YhNYAleOBpmQeQpfFcVPTJTaCN
Xh/IuY1ypROGxi5mWU6X0ZmaOs4B6D6p3iAHSOFim5ZHPuOxv9CfST26MrIVUeXK
7gXnqqiuslq8jrUO5tzRBfR3vg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:41 2026 by rpki-client