Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/AKV2B4r98HVHoMWAkrsMQTPZfXY.roa
File: AKV2B4r98HVHoMWAkrsMQTPZfXY.roa (raw, json)
Hash identifier: QiwFX76RYryFh4wLKSf/37I2mv7vLeCrNrbq8r4zWTE=
Subject key identifier: 00:A5:76:07:8A:FD:F0:75:47:A0:C5:80:92:BB:0C:41:33:D9:7D:76
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A03DB243A6FB9E32C81B9B4DF3D263981C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/AKV2B4r98HVHoMWAkrsMQTPZfXY.roa
Signing time: Wed 26 Aug 2026 10:51:27 +0000
ROA not before: Wed 26 Aug 2026 10:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33842
IP address blocks: 78.17.98.0/24 maxlen: 24
78.17.181.0/24 maxlen: 24
89.125.121.0/24 maxlen: 24
89.125.214.0/24 maxlen: 24
104.143.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:b2:43:a6:fb:9e:32:c8:1b:9b:4d:f3:d2:63:98:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 26 10:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00a576078afdf07547a0c58092bb0c4133d97d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:06:d2:78:0c:c2:3b:79:87:69:36:24:65:
3e:03:f6:99:21:0e:b2:78:44:79:df:c8:2a:62:de:
e1:e9:e0:9a:ad:8e:53:f6:b5:4e:aa:3c:93:ae:50:
61:d0:e7:e9:ed:b1:5d:ce:ae:4a:c8:a8:85:2b:d1:
37:8a:20:27:79:61:bf:c7:fe:c3:19:07:fb:ac:06:
b8:30:3e:9d:50:8d:8b:63:49:c2:cf:b1:6d:d3:ea:
d0:cf:27:a5:e6:8e:cd:83:4a:a4:ae:0d:b5:fb:83:
91:20:25:33:08:7f:02:ce:e7:d9:9c:8b:88:f4:3a:
b9:e7:28:82:3c:10:a9:99:cc:d7:08:c7:fb:11:3d:
82:65:ff:76:ae:d7:1b:b4:eb:6a:2b:59:13:b5:fc:
1c:45:da:ce:40:db:2b:4c:05:1d:f8:25:9f:6d:99:
54:f5:40:88:ff:84:2d:04:3f:9e:43:91:3e:a7:61:
80:1d:57:43:8b:f3:64:39:eb:3d:3c:02:8c:e2:d2:
e7:84:93:4b:9a:24:0f:09:53:3a:df:ad:6d:cd:7c:
6b:0e:4d:cf:92:63:25:ff:0b:33:7f:be:84:56:8e:
87:5c:4f:06:39:ad:20:e3:09:ca:64:7f:77:d2:4a:
0c:7e:f0:29:86:e7:cb:9d:8c:81:ad:65:0e:fa:c0:
27:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A5:76:07:8A:FD:F0:75:47:A0:C5:80:92:BB:0C:41:33:D9:7D:76
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/AKV2B4r98HVHoMWAkrsMQTPZfXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.98.0/24
78.17.181.0/24
89.125.121.0/24
89.125.214.0/24
104.143.201.0/24
Signature Algorithm: sha256WithRSAEncryption
57:96:87:dc:0e:64:c1:6c:20:b5:bb:b1:d8:6c:76:da:c9:26:
68:c4:98:57:bb:6c:3a:eb:a2:9d:a6:14:10:b3:03:ea:a4:2d:
63:33:8a:c7:1d:24:0c:a9:09:16:26:27:ee:a4:89:65:42:c3:
12:b6:de:5a:b5:c9:2c:ac:14:dd:d5:9a:d3:3f:02:44:9f:2f:
e7:c1:fb:3a:73:e0:f1:1f:b9:ec:f6:f7:bc:c6:61:3a:5f:cb:
65:dc:3c:41:d5:c1:64:ff:df:14:76:1c:a2:18:91:85:45:d3:
5b:08:7e:61:ba:a6:3c:0a:64:ee:cf:dd:78:7a:84:1e:f2:9a:
5c:ac:5e:4d:43:67:93:d9:19:e1:0a:52:c1:e9:8f:5f:d2:e8:
13:d1:64:1e:52:eb:80:f8:ac:a6:94:c7:37:f6:c1:9f:64:a8:
d7:8d:67:45:8d:1f:9c:16:9b:4f:bb:18:1f:45:d3:2f:fc:c6:
4d:0a:8b:21:67:09:06:d5:1f:9e:34:50:0f:90:c7:36:ba:59:
1f:7e:1e:da:40:f0:30:f8:e4:55:45:4c:36:a5:11:77:b6:9f:
8b:05:2f:68:7a:7d:ec:95:2e:47:bb:69:a4:ed:b7:05:c4:cf:
f7:1e:3e:8a:bb:0c:e7:72:f7:06:75:07:59:4e:31:19:98:66:
b9:81:a1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:39 2026 by rpki-client