Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/AKvtv9hkE-8IZv2_oO_aWEF5mpU.roa
File: AKvtv9hkE-8IZv2_oO_aWEF5mpU.roa (raw, json)
Hash identifier: txVecQc80YFRZBCUlPUHWPAZzmeK8+9gcWL0SmMyuaU=
Subject key identifier: 00:AB:ED:BF:D8:64:13:EF:08:66:FD:BF:A0:EF:DA:58:41:79:9A:95
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A042BF532CDF3E66CD42DE05C160FA6CBE
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/AKvtv9hkE-8IZv2_oO_aWEF5mpU.roa
Signing time: Thu 27 Aug 2026 10:23:50 +0000
ROA not before: Thu 27 Aug 2026 10:23:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215059
IP address blocks: 195.21.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:bf:53:2c:df:3e:66:cd:42:de:05:c1:60:fa:6c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 27 10:23:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00abedbfd86413ef0866fdbfa0efda5841799a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:19:30:67:43:0b:b3:e5:b7:e2:4b:b9:4b:
c1:02:36:24:34:fd:4b:1c:c8:e0:de:a9:13:3d:4c:
9a:3c:cf:49:79:57:a4:6e:82:de:ca:6d:ee:7c:eb:
b2:c1:62:e8:fd:ea:38:2f:a7:94:6b:0f:dc:5e:3c:
47:d8:78:f1:69:1a:99:75:5d:44:f3:ec:b2:1d:74:
c2:52:31:4b:65:2d:72:9c:f2:b7:7f:be:a4:63:d3:
f8:ba:06:21:85:a4:60:e6:64:8f:1a:c8:02:ea:cb:
5c:d0:7e:bd:6c:e0:a8:3e:6c:b3:4e:db:3a:7c:92:
c9:ab:27:78:83:39:9d:0f:5f:95:44:d4:9a:a6:99:
c9:4c:f6:01:9f:4c:bc:f0:18:16:a6:69:33:5f:21:
71:29:89:8e:c6:7b:a7:d8:2b:d5:82:15:d2:29:31:
7b:f6:8b:29:e2:53:47:aa:5b:99:ca:58:b7:db:e9:
cf:57:80:4e:1c:ea:41:37:01:30:bc:08:3d:ed:84:
a3:84:92:53:72:e1:c5:13:ec:4f:4c:5a:63:31:5d:
55:d0:1f:1c:50:b6:26:f2:31:90:22:e3:85:ed:6d:
f5:90:73:23:4a:46:0c:b4:e9:5c:27:7a:8b:3b:d1:
08:69:74:54:41:85:a5:4a:c3:62:2a:60:4d:51:1f:
fd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AB:ED:BF:D8:64:13:EF:08:66:FD:BF:A0:EF:DA:58:41:79:9A:95
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/AKvtv9hkE-8IZv2_oO_aWEF5mpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.21.150.0/23
Signature Algorithm: sha256WithRSAEncryption
13:be:91:63:79:ba:9c:d8:a9:35:0d:1a:ba:a1:fe:eb:2d:20:
ea:b5:f0:51:ca:22:04:7c:75:b7:e9:4c:70:13:bf:ba:5a:a8:
41:78:c9:b4:76:60:09:84:63:77:1d:c2:fe:c0:53:ed:f8:61:
10:05:9a:c7:a0:e1:35:c9:88:c1:d8:d7:71:cb:b4:98:3b:2d:
da:93:eb:28:ef:48:29:d4:b1:d5:5a:80:5b:91:a6:2c:ca:55:
ac:d5:7f:80:4a:c5:51:ce:aa:ce:a4:a5:83:69:04:fb:64:51:
5c:04:52:5d:8e:0a:98:ad:80:2b:cf:fa:a2:74:0c:f1:5e:37:
bc:97:30:92:5d:b3:c6:22:77:ff:d0:e1:0b:d6:d5:16:3f:71:
59:58:4d:34:1c:8f:00:03:78:99:02:79:f0:dc:73:6e:fa:16:
67:17:57:de:8b:0f:be:b3:4f:4a:cc:a5:24:0e:99:03:99:46:
15:11:08:b6:6a:9d:f9:2e:88:b8:2b:79:5b:e0:2a:b5:7d:1d:
cf:bf:9e:f3:0e:20:0d:66:f2:52:9a:f2:90:a9:71:92:42:49:
f7:f1:d3:8b:ec:d7:1c:f4:b0:6b:d4:2f:06:6e:14:24:cb:dd:
9d:c6:a6:9a:5b:43:19:f2:56:bf:1d:28:41:0c:f3:31:b3:e2:
5a:ce:cd:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBCv1Ms3z5mzULeBcFg+my+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwODI3MTAyMzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGFiZWRiZmQ4NjQxM2VmMDg2NmZkYmZhMGVmZGE1ODQxNzk5YTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHQZMGdDC7Plt+JLuUvBAjYkNP1L
HMjg3qkTPUyaPM9JeVekboLeym3ufOuywWLo/eo4L6eUaw/cXjxH2HjxaRqZdV1E
8+yyHXTCUjFLZS1ynPK3f76kY9P4ugYhhaRg5mSPGsgC6stc0H69bOCoPmyzTts6
fJLJqyd4gzmdD1+VRNSappnJTPYBn0y88BgWpmkzXyFxKYmOxnun2CvVghXSKTF7
9osp4lNHqluZyli32+nPV4BOHOpBNwEwvAg97YSjhJJTcuHFE+xPTFpjMV1V0B8c
ULYm8jGQIuOF7W31kHMjSkYMtOlcJ3qLO9EIaXRUQYWlSsNiKmBNUR/9dQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFACr7b/YZBPvCGb9v6Dv2lhBeZqVMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvQUt2dHY5aGtFLThJWnYyX29PX2FXRUY1bXBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwxWWMA0G
CSqGSIb3DQEBCwUAA4IBAQATvpFjebqc2Kk1DRq6of7rLSDqtfBRyiIEfHW36Uxw
E7+6WqhBeMm0dmAJhGN3HcL+wFPt+GEQBZrHoOE1yYjB2Ndxy7SYOy3ak+so70gp
1LHVWoBbkaYsylWs1X+ASsVRzqrOpKWDaQT7ZFFcBFJdjgqYrYArz/qidAzxXje8
lzCSXbPGInf/0OEL1tUWP3FZWE00HI8AA3iZAnnw3HNu+hZnF1feiw++s09KzKUk
DpkDmUYVEQi2ap35Loi4K3lb4Cq1fR3Pv57zDiANZvJSmvKQqXGSQkn38dOL7Ncc
9LBr1C8GbhQky92dxqaaW0MZ8la/HShBDPMxs+Jazs21
-----END CERTIFICATE-----
Generated at Wed Sep 9 19:03:57 2026 by rpki-client