Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/akXL8mN1Lh27OIBymH99qYaUZEY.roa
File: akXL8mN1Lh27OIBymH99qYaUZEY.roa (raw, json)
Hash identifier: tdWwsgXNWmUc0PFyd84IeTdv06HG3UESKVxUgTA2lZQ=
Subject key identifier: 6A:45:CB:F2:63:75:2E:1D:BB:38:80:72:98:7F:7D:A9:86:94:64:46
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A059B1B363863704C57C6A2F561E5A61CE
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/akXL8mN1Lh27OIBymH99qYaUZEY.roa
Signing time: Mon 31 Aug 2026 21:20:13 +0000
ROA not before: Mon 31 Aug 2026 21:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 194.77.187.0/24 maxlen: 24
212.222.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 20:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:b1:b3:63:86:37:04:c5:7c:6a:2f:56:1e:5a:61:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 31 21:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a45cbf263752e1dbb388072987f7da986946446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:ac:6e:ff:9b:16:99:87:75:f6:0b:76:cb:
df:b1:02:f9:be:1f:32:1d:5e:d3:67:82:e3:e8:45:
b8:d3:59:10:c8:c7:8b:fc:6f:0f:03:59:6a:7f:b6:
4a:3b:51:01:3e:62:31:1e:e9:f4:c0:1a:c3:39:9d:
97:e4:d0:39:d5:4b:ea:2a:18:3f:51:15:24:1d:a3:
3e:13:d6:52:e6:aa:27:8a:2a:b2:3f:a7:33:47:44:
4b:9b:10:ef:57:f2:a1:3d:c9:ad:60:8d:81:41:d5:
a5:e6:8c:ed:cb:5d:14:6b:d1:a2:ad:52:5e:71:a5:
1f:57:85:d6:dd:c8:08:43:11:00:46:cc:00:d6:b0:
8e:a7:b4:e8:ae:4b:a5:0c:b4:00:29:8c:35:b0:01:
30:ce:f6:fe:59:bd:27:86:4a:84:ec:be:58:2f:f8:
64:e4:e9:45:db:55:8e:c4:20:61:4d:59:5f:76:98:
1e:06:a7:0b:33:e6:49:82:82:77:b7:cb:8a:20:3e:
9f:ea:e1:03:47:1a:57:22:fa:11:d3:c4:dc:e5:c5:
1a:c6:78:48:dc:01:0d:bc:3d:0a:ed:38:e3:13:fa:
00:35:ff:e5:65:58:4d:52:0c:cc:32:d3:0c:37:30:
11:95:0c:a0:d7:d9:95:2d:d6:c4:26:9f:f3:e2:ea:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:45:CB:F2:63:75:2E:1D:BB:38:80:72:98:7F:7D:A9:86:94:64:46
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/akXL8mN1Lh27OIBymH99qYaUZEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.187.0/24
212.222.170.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:4a:b9:98:65:8a:0c:b4:11:53:03:e6:c9:bf:00:6e:1e:10:
55:e0:89:fa:53:de:00:5e:ba:20:ba:66:53:8d:35:cc:98:e9:
fd:9f:8b:88:61:11:dd:50:cc:42:5d:c6:8a:bb:f8:c2:39:b0:
df:8a:40:5e:42:2b:f6:f5:44:04:ea:fc:3c:23:a3:58:7c:eb:
84:78:f6:66:e1:07:8d:f2:ed:df:15:3b:06:be:d3:f2:57:9b:
70:85:f0:42:bf:55:db:fb:38:07:7e:b0:3a:b2:e6:5f:40:b5:
41:2a:a9:67:ee:ec:6b:1b:37:4b:47:50:1c:b0:c4:2c:ee:da:
f0:03:0f:33:88:a2:c9:bc:3a:78:5b:bd:05:31:f3:fd:dd:36:
f7:cf:37:d7:2c:ca:dd:9f:12:ca:aa:98:8c:46:c7:bc:2e:a4:
f5:19:55:9e:44:12:c4:9e:98:2b:0f:f2:4a:90:51:c3:1d:98:
9a:9b:00:f0:6a:9f:c0:73:a0:92:c0:de:74:fd:97:a1:a3:f9:
2e:11:62:80:d5:8c:25:6e:87:46:45:41:fa:4e:56:04:f9:15:
fb:4b:72:ce:f3:d1:60:06:fe:5d:e4:bf:0d:04:9f:7f:10:0a:
eb:9a:c9:5e:db:18:c3:f2:72:ce:c0:f2:b7:d8:fb:8f:e2:08:
61:90:34:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:15:36 2026 by rpki-client