Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/v1AKGSFZaX4q6-Fa9eZcOMlA91I.roa
File: v1AKGSFZaX4q6-Fa9eZcOMlA91I.roa (raw, json)
Hash identifier: ybvXSrIxVSlC65MLiNm3lzU/6tox7zmXggGLLNkjg/0=
Subject key identifier: BF:50:0A:19:21:59:69:7E:2A:EB:E1:5A:F5:E6:5C:38:C9:40:F7:52
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 01A0812464143B23A4044A226AD5930689C4
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/v1AKGSFZaX4q6-Fa9eZcOMlA91I.roa
Signing time: Tue 08 Sep 2026 13:10:40 +0000
ROA not before: Tue 08 Sep 2026 13:10:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202128
IP address blocks: 185.78.208.0/22 maxlen: 22
185.122.196.0/24 maxlen: 24
185.122.197.0/24 maxlen: 24
185.122.198.0/24 maxlen: 24
185.122.199.0/24 maxlen: 24
2a05:6d40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:24:64:14:3b:23:a4:04:4a:22:6a:d5:93:06:89:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Sep 8 13:10:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf500a192159697e2aebe15af5e65c38c940f752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:68:45:80:4a:7b:ac:8e:02:2c:82:53:3a:
d3:78:21:16:23:d0:51:3f:eb:a8:6f:eb:82:16:09:
01:89:17:d2:d2:00:03:0a:8c:30:80:72:15:7d:17:
0d:d3:e6:fc:1f:de:78:85:19:4d:c7:48:28:fc:2c:
5b:ef:a7:9a:0e:80:a2:31:b7:a2:d0:a9:cc:5f:68:
2a:c6:35:cc:04:98:2f:54:77:8f:ae:53:44:7e:e2:
f3:a7:d8:e9:06:d0:4e:e4:ef:87:05:00:d2:c1:cc:
8c:7a:09:73:fb:b9:35:f1:6e:44:e5:31:04:5a:21:
d9:1e:6a:18:94:32:5c:98:c9:bf:f9:6a:1d:10:1c:
43:90:f9:55:10:b3:c4:1e:d0:f3:4e:a8:57:66:41:
48:20:b3:ad:bd:73:c7:87:95:37:9b:b2:a3:ae:1d:
cd:bd:8e:c4:da:3c:dd:8c:cf:d6:8a:5f:43:86:e8:
10:53:6d:69:ab:c1:13:ce:be:69:f7:0c:9d:82:5d:
bb:89:40:b1:b3:a7:5d:c9:37:0c:75:06:4f:d7:d2:
45:d5:a2:7a:30:6a:a2:d5:e0:6c:d3:c3:83:d4:83:
1a:f7:79:9f:6e:63:4d:dd:9e:37:4c:6a:2e:62:8b:
c6:9a:b8:96:14:a7:e6:d9:52:35:d5:24:c7:ef:1c:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:50:0A:19:21:59:69:7E:2A:EB:E1:5A:F5:E6:5C:38:C9:40:F7:52
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/v1AKGSFZaX4q6-Fa9eZcOMlA91I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.208.0/22
185.122.196.0/22
IPv6:
2a05:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
90:dc:07:c8:b5:fd:de:a9:0a:c4:44:36:5a:de:d7:6e:67:4a:
59:62:01:c7:4a:c5:5f:d1:bd:1f:16:72:81:98:a8:55:a2:2e:
e3:3d:ea:ef:3c:7a:37:ee:a8:b6:04:77:15:72:04:69:81:cc:
b1:0e:ba:fc:4c:d7:de:e0:75:6c:cb:f3:90:53:1a:87:f2:03:
35:33:61:2f:7c:45:0b:0e:3f:cd:43:48:c6:92:de:a3:b9:a0:
12:6a:cc:3b:9b:a5:4c:66:0b:16:72:49:89:3c:5f:17:fc:00:
19:99:2b:dd:10:4b:8d:aa:c0:1d:7b:70:d9:e1:6a:27:ae:16:
45:ad:76:0c:4a:49:70:33:d5:1f:67:ee:e6:b8:05:82:aa:a7:
d8:8a:c8:fa:0a:59:77:42:bf:27:32:1e:1a:72:38:b2:a3:99:
3c:ee:30:58:b3:35:ba:e0:23:de:1d:99:c2:5c:e1:f1:6c:85:
ba:40:18:71:1d:b1:ee:79:01:83:97:06:49:10:de:3f:7f:46:
56:24:da:4f:76:4e:8f:26:1b:45:73:02:29:a0:bd:32:34:17:
8c:eb:0b:c4:4f:88:5c:bf:ee:04:48:ba:6d:9e:db:2f:2a:e0:
56:c2:a0:e4:07:8e:b3:2f:4a:e8:a2:bf:bf:0f:f1:f0:8d:b3:
88:d0:dc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:21 2026 by rpki-client