Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/Ak46-asOg6f893apfz-5UnXkLOQ.roa
File: Ak46-asOg6f893apfz-5UnXkLOQ.roa (raw, json)
Hash identifier: Ih6ExCGo6FYRtpTqMJWDMLQgQI7OlDnwThJk2xsctFQ=
Subject key identifier: 02:4E:3A:F9:AB:0E:83:A7:FC:F7:76:A9:7F:3F:B9:52:75:E4:2C:E4
Certificate issuer: /CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Certificate serial: 019F2369375C6AC4FAFA6C7B11BAAA72CE8A
Authority key identifier: 1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/Ak46-asOg6f893apfz-5UnXkLOQ.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198949
IP address blocks: 128.139.0.0/17 maxlen: 17
128.139.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:37:5c:6a:c4:fa:fa:6c:7b:11:ba:aa:72:ce:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=024e3af9ab0e83a7fcf776a97f3fb95275e42ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b2:07:60:71:3a:75:9c:43:94:c1:f7:2a:b3:
d8:77:ca:e8:3a:1a:e8:df:8f:36:87:0d:d7:43:d1:
d6:49:7c:27:87:7b:82:ff:9f:9e:31:b0:8a:24:47:
6e:9f:dd:2f:72:72:92:35:3c:bd:65:2a:45:21:cf:
24:32:f3:79:fd:cb:ca:22:9b:07:08:7d:c6:33:b2:
83:0e:a3:d6:33:2e:19:4c:1f:e8:da:d1:05:40:a7:
25:8e:f5:11:22:55:13:a0:2b:b8:8a:e2:78:73:5c:
43:c6:9c:aa:94:67:6f:f1:d6:ff:ef:d9:40:4a:5a:
8d:36:6b:42:78:fc:bc:9e:f5:8a:11:9a:44:c5:3a:
10:d8:43:32:4e:92:91:3a:7d:ca:2f:18:78:08:af:
d9:c2:4b:75:21:d6:9b:c0:28:ff:ec:16:f4:4f:99:
6e:2d:35:90:c1:93:c5:49:5f:5d:36:87:49:33:e6:
eb:a6:25:c2:35:30:f5:46:9e:88:53:97:6c:03:b0:
56:e6:73:80:a0:db:5f:6c:32:82:56:41:2d:ab:6b:
ae:ba:8c:a6:76:18:c8:cb:80:76:c7:45:ce:d5:c1:
aa:54:53:3b:84:9a:28:91:48:d5:07:c2:3e:b8:39:
fc:6e:07:15:bb:00:9c:0a:18:91:f7:6a:23:1d:ac:
fb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4E:3A:F9:AB:0E:83:A7:FC:F7:76:A9:7F:3F:B9:52:75:E4:2C:E4
X509v3 Authority Key Identifier:
keyid:1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/Ak46-asOg6f893apfz-5UnXkLOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.139.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:ae:3b:ab:e3:cf:7e:da:85:47:20:a4:87:9b:ed:02:83:f6:
82:2d:f9:b2:63:ee:56:3f:2a:a5:f0:a3:4e:7d:fb:d1:2a:57:
ae:f3:51:0b:78:fe:0c:e5:eb:07:ae:fa:b1:d9:af:2a:61:27:
93:e1:7b:66:b1:3f:8d:6a:b1:d7:41:30:37:94:7b:c1:b9:99:
9e:e1:e1:e4:79:c0:73:68:62:d7:35:ae:6c:68:04:0f:05:0f:
82:df:7f:4b:85:3c:af:28:3f:42:a3:46:e6:34:bf:5d:83:dd:
64:b2:a3:c4:71:c1:53:b3:08:2b:fe:41:82:d8:79:73:fe:f2:
57:9d:51:5d:dc:d1:f8:c6:22:47:a5:d1:40:69:76:c8:44:e5:
60:b9:cb:b4:a8:db:76:ca:30:c1:96:96:30:cc:5c:40:7e:e5:
49:65:f9:e2:4f:07:1b:e5:bc:2b:48:af:5e:74:74:bc:d7:bc:
64:16:2a:66:50:a8:2e:5b:0e:e7:b9:86:d6:65:25:88:b7:0d:
9e:74:78:ae:9a:33:bb:a3:9f:af:46:0b:01:87:6c:d7:25:2a:
b0:80:a7:19:0f:5a:21:f5:51:26:d8:8b:fd:b8:7e:66:75:ce:
74:f9:54:9d:f2:c6:78:19:bb:50:7f:2f:db:10:38:35:7a:57:
a2:39:b4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:39 2026 by rpki-client