Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Akpbd9-vKBYgSBLEtd2w4KsvGx4.roa
File: Akpbd9-vKBYgSBLEtd2w4KsvGx4.roa (raw, json)
Hash identifier: p8sAzT87uCiO5lnenDGKFMx6AhGEdEoqJ/Myeptn3ZU=
Subject key identifier: 02:4A:5B:77:DF:AF:28:16:20:48:12:C4:B5:DD:B0:E0:AB:2F:1B:1E
Certificate issuer: /CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Certificate serial: 019F65AB33E9F2501F420B61EC3EBE8D272C
Authority key identifier: 37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Akpbd9-vKBYgSBLEtd2w4KsvGx4.roa
Signing time: Wed 15 Jul 2026 12:05:46 +0000
ROA not before: Wed 15 Jul 2026 12:05:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 178.159.68.0/23 maxlen: 23
178.159.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:ab:33:e9:f2:50:1f:42:0b:61:ec:3e:be:8d:27:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Validity
Not Before: Jul 15 12:05:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=024a5b77dfaf2816204812c4b5ddb0e0ab2f1b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:35:9a:7d:bb:b4:36:03:be:ed:6d:e3:cc:
9b:04:37:e5:49:f1:5a:89:b7:95:e9:4f:5b:d6:57:
09:9d:77:a0:9b:e7:85:18:29:e3:6f:c5:b5:80:80:
49:09:33:b4:20:0e:85:f4:88:e7:87:4c:75:e9:e6:
bb:2f:75:98:aa:d6:3d:5b:d7:8b:6b:fe:a9:1c:71:
bb:33:ef:5f:e5:3e:3b:1b:81:7e:b5:51:92:e4:75:
45:4d:96:46:a2:62:3e:47:63:2d:69:81:81:b4:f7:
03:f6:0b:d1:65:61:5a:86:1d:04:a0:d7:79:87:69:
4a:2a:c0:14:a1:b4:bf:bb:05:fd:51:1b:04:80:f6:
16:72:00:c1:fe:67:72:82:0f:1f:34:0a:b4:25:76:
5e:64:ed:b4:bd:d5:2f:d3:cc:b1:b6:3a:1f:e2:e2:
2f:9c:56:e7:da:ad:56:63:12:10:64:d4:b7:89:b5:
b3:7b:3e:04:04:43:a5:75:03:4e:2e:62:ea:26:cd:
de:c0:15:d8:75:5e:c1:59:08:ae:f6:29:fe:52:97:
41:c8:1b:81:e4:ce:f8:48:74:ef:4d:34:60:32:34:
2c:91:81:87:71:6c:fe:6f:a7:b5:90:e7:2a:5a:5c:
f6:39:5f:be:90:99:97:76:3b:0a:6b:43:f6:12:de:
8d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4A:5B:77:DF:AF:28:16:20:48:12:C4:B5:DD:B0:E0:AB:2F:1B:1E
X509v3 Authority Key Identifier:
keyid:37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Akpbd9-vKBYgSBLEtd2w4KsvGx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.68.0/23
178.159.78.0/23
Signature Algorithm: sha256WithRSAEncryption
98:53:fa:67:85:0e:38:c6:82:6d:7b:d2:e6:00:9e:df:a0:18:
48:52:89:d6:d5:ba:16:88:e0:5a:a4:cc:43:89:d3:4c:b8:94:
7c:6e:8f:80:1b:89:89:58:cd:ee:9c:b0:36:c6:5a:45:6e:8d:
45:cb:fe:09:86:6d:50:eb:9b:d4:26:55:4c:4a:04:4d:f6:3f:
d9:24:8d:b8:f3:2c:68:3e:f0:bb:ac:2d:e9:74:92:c2:d3:6d:
db:9b:d6:75:79:78:fd:fc:fd:e5:d5:0f:bb:0c:9a:a5:cf:e1:
48:d5:92:d6:1d:de:76:1d:24:6f:e7:e3:d0:55:10:4a:bf:ff:
ef:41:28:74:e7:e1:97:76:2a:98:50:8b:d4:65:9d:0b:85:e8:
f8:7a:ed:5e:9f:de:4e:1a:87:5a:39:9d:9c:0d:38:05:93:65:
72:ce:7a:1b:49:82:b6:fa:22:d0:2a:bf:36:b5:da:3f:6f:db:
ff:b7:ac:2f:3d:19:63:48:bc:97:89:b3:0f:34:e8:70:54:a3:
cc:c5:99:7f:60:3d:0b:57:23:6c:77:e6:ec:53:14:d8:37:59:
00:56:0b:db:73:af:af:4f:61:03:1a:7f:de:58:b4:cb:92:e2:
a6:71:22:06:bf:2f:50:fa:5e:41:16:4d:24:bf:ad:ba:8b:d8:
60:88:6f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:49 2026 by rpki-client