Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/urz4_AKUeHVYjJAJbjRXtg7l6R0.roa
File: urz4_AKUeHVYjJAJbjRXtg7l6R0.roa (raw, json)
Hash identifier: Lc5cV4YVr/KMErRPjabqXug9W3uT5uCRR+WjWueC5dU=
Subject key identifier: BA:BC:F8:FC:02:94:78:75:58:8C:90:09:6E:34:57:B6:0E:E5:E9:1D
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019FACCC8DB4FF7455A7856BF49A11A1DBBD
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/urz4_AKUeHVYjJAJbjRXtg7l6R0.roa
Signing time: Wed 29 Jul 2026 07:35:14 +0000
ROA not before: Wed 29 Jul 2026 07:35:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 77.111.117.0/24 maxlen: 24
77.111.123.0/24 maxlen: 24
92.61.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:cc:8d:b4:ff:74:55:a7:85:6b:f4:9a:11:a1:db:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jul 29 07:35:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=babcf8fc02947875588c90096e3457b60ee5e91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:93:50:fe:5b:f7:e4:5c:5b:57:85:e4:93:
30:43:c0:bc:2c:24:74:01:85:4c:4b:9a:82:d6:35:
f6:b8:53:72:03:9b:17:94:cb:7c:05:65:f3:06:b7:
72:43:0b:5c:af:f2:55:64:50:20:9a:23:68:b6:64:
cd:b9:b3:df:1d:fe:a7:9f:77:69:f3:89:48:33:29:
c2:db:55:2e:0b:96:05:0f:05:5e:40:3d:a9:88:c9:
c0:41:b6:29:ec:08:a6:5d:54:15:68:b4:dc:d4:9b:
05:98:94:2d:e7:39:7e:6c:be:bd:fe:4d:7b:9d:72:
3f:a3:93:6b:a5:ce:2b:aa:b3:51:7d:92:fa:2a:63:
46:cf:e3:14:98:c6:5d:13:51:36:15:37:7c:17:00:
49:6d:44:7d:95:f5:90:c6:76:14:60:96:21:51:c6:
16:7f:99:d8:ca:e3:62:45:c1:b6:fa:91:cc:66:4c:
35:79:ff:8e:84:03:ea:a0:00:ba:a1:94:c1:d1:f8:
8f:90:3d:7c:35:38:2b:4a:34:08:64:c7:53:7c:d0:
a9:79:51:f7:a4:64:48:d0:23:70:06:03:c2:31:37:
23:47:58:d7:ee:ae:63:c2:88:61:7d:34:9c:eb:c4:
92:03:b3:16:c9:a9:13:2d:f2:27:27:1e:bf:2d:df:
9c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BC:F8:FC:02:94:78:75:58:8C:90:09:6E:34:57:B6:0E:E5:E9:1D
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/urz4_AKUeHVYjJAJbjRXtg7l6R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.117.0/24
77.111.123.0/24
92.61.109.0/24
Signature Algorithm: sha256WithRSAEncryption
63:3f:e4:1a:b6:86:ca:cb:0c:d3:af:3c:65:b0:2b:d0:eb:50:
7e:af:b0:57:2a:d3:fa:29:17:5c:1f:e4:3f:ad:82:f4:96:3e:
f9:0f:95:5a:f0:bb:ad:ab:d8:dd:1c:55:f1:cf:31:b7:d3:07:
33:2f:e7:61:35:be:72:4e:25:71:84:e1:dc:ec:22:9d:d9:23:
3a:57:80:07:07:47:f9:4f:22:ec:87:f2:12:f5:28:68:a4:99:
29:a7:f3:34:72:49:f3:5b:ce:5c:40:d2:13:eb:71:28:fc:49:
39:19:96:47:a2:cc:34:f2:a3:6c:97:31:68:57:22:e3:6d:5f:
88:58:ea:70:3c:03:1a:56:31:7a:64:78:63:89:74:9e:9e:17:
90:f4:7c:2f:3b:fb:26:5f:4c:95:e2:8c:52:d2:a3:29:f1:12:
54:b8:f8:5a:15:82:30:47:78:4d:64:60:58:84:61:bd:f6:bd:
3f:ca:e9:0c:99:8a:fc:8e:7b:3a:de:17:25:4b:ea:ac:3f:86:
4e:26:ed:29:1f:ed:bc:b6:f3:27:95:e4:c7:c0:49:d6:74:f3:
3b:f7:9e:82:f0:dc:f2:2c:89:29:53:58:03:f9:bb:5e:19:91:
72:0d:ff:84:ad:c8:f3:5f:88:31:52:5f:c5:1e:d6:ed:29:ed:
a2:a8:ec:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:41:33 2026 by rpki-client