Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/Agdkr7pow-AzSTl7UhxIjtbuif8.roa
File: Agdkr7pow-AzSTl7UhxIjtbuif8.roa (raw, json)
Hash identifier: XwEU2q/BPbK/EoWe/rSsRkIbMCNqHp48BI3sTIZFcTs=
Subject key identifier: 02:07:64:AF:BA:68:C3:E0:33:49:39:7B:52:1C:48:8E:D6:EE:89:FF
Certificate issuer: /CN=a88da70ce28a88927326db8b622a66c29fac523c
Certificate serial: 019E22212011D319C8DA026E0A50E6324539
Authority key identifier: A8:8D:A7:0C:E2:8A:88:92:73:26:DB:8B:62:2A:66:C2:9F:AC:52:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qI2nDOKKiJJzJtuLYipmwp-sUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/Agdkr7pow-AzSTl7UhxIjtbuif8.roa
Signing time: Wed 13 May 2026 16:17:36 +0000
ROA not before: Wed 13 May 2026 16:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 85.137.176.0/22 maxlen: 22
85.137.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qI2nDOKKiJJzJtuLYipmwp-sUjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:21:20:11:d3:19:c8:da:02:6e:0a:50:e6:32:45:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88da70ce28a88927326db8b622a66c29fac523c
Validity
Not Before: May 13 16:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=020764afba68c3e03349397b521c488ed6ee89ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8c:6c:7d:bc:d6:e5:6f:01:95:8a:ee:51:d4:
38:17:ea:36:85:63:e2:31:16:cd:55:12:15:e0:5a:
86:62:6f:c5:e4:34:6f:13:c3:44:df:20:d3:55:d3:
0f:53:40:26:05:92:7f:b9:51:c2:5e:69:50:43:60:
b2:ed:db:dd:ad:14:ba:63:c9:03:56:ec:78:4d:0b:
fa:8f:21:d1:9e:84:da:86:c6:ec:f4:ea:72:a7:d5:
18:35:ca:1b:07:1f:27:ce:4f:73:d0:ea:5b:04:de:
09:c2:39:1e:8c:00:13:3e:b7:d9:1a:90:43:2b:02:
a0:aa:ce:61:9b:f7:b9:2f:95:b0:61:dd:d9:c8:29:
ae:83:9a:4e:7b:92:c5:49:99:b2:60:1d:ca:1c:a6:
db:21:9b:df:67:fb:af:0e:4b:b3:4f:74:bb:00:a1:
cc:da:28:9b:a7:34:ff:83:63:e4:e8:6a:25:6c:d6:
84:eb:f6:92:bf:c8:cf:41:46:6e:34:d1:02:09:69:
6f:bb:8c:1c:8d:7d:78:d2:d6:15:dc:22:5d:74:5f:
7f:eb:49:f7:35:09:73:e0:56:23:35:1c:81:9d:b9:
5b:fd:5e:89:5c:a6:cc:52:28:16:94:fa:21:83:ba:
cb:eb:78:0a:38:e0:76:cf:ec:2f:61:8d:a1:60:66:
7e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:07:64:AF:BA:68:C3:E0:33:49:39:7B:52:1C:48:8E:D6:EE:89:FF
X509v3 Authority Key Identifier:
keyid:A8:8D:A7:0C:E2:8A:88:92:73:26:DB:8B:62:2A:66:C2:9F:AC:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qI2nDOKKiJJzJtuLYipmwp-sUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/Agdkr7pow-AzSTl7UhxIjtbuif8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.176.0/22
85.137.208.0/22
Signature Algorithm: sha256WithRSAEncryption
e4:53:35:58:ad:cf:4c:13:38:ac:77:a2:d5:fd:50:8f:8d:01:
20:fd:a4:8a:13:e1:5d:b8:f1:b1:10:dc:c8:ba:d6:61:23:9e:
9b:18:9a:5b:14:e3:11:a2:d6:19:9b:6a:11:1d:78:82:14:35:
f8:5f:db:c7:7d:ad:0f:48:83:a0:09:7b:41:09:b1:63:5a:9c:
27:f5:e8:c9:d5:86:93:f4:61:a8:be:a3:b4:ec:da:a8:94:ea:
95:be:6f:b5:84:5f:38:57:42:06:c4:09:40:07:6e:88:a2:c9:
b1:7b:a8:dc:9b:07:0b:7a:6f:ba:f5:14:78:ba:78:77:62:2a:
e3:e2:2e:87:62:6f:35:5b:01:0a:fe:f7:65:e5:68:ba:31:5c:
6b:74:58:73:24:fc:cc:2d:d2:88:fa:5a:d6:bc:9c:1c:7d:cd:
1d:0a:17:6a:04:89:3f:5a:50:52:58:ce:3e:3c:69:d8:78:e2:
45:a5:9d:96:e7:38:a4:5d:fc:2d:05:75:48:c2:e7:ac:3e:e5:
cb:6b:6b:06:c4:2d:6b:5a:eb:4b:2e:e9:2d:cd:7e:19:f7:1d:
70:38:ee:8a:34:65:8c:6f:b1:7d:88:3f:3a:ac:21:10:2b:2d:
5f:41:b4:33:74:fa:b4:4d:f3:8a:10:73:f7:ef:11:68:0a:7b:
97:bc:9f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:33 2026 by rpki-client