Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/AkoNp7KMgHGVYiPoIBw5-QnySUI.roa
File: AkoNp7KMgHGVYiPoIBw5-QnySUI.roa (raw, json)
Hash identifier: uyKZlkMV8M0PkPA0yQESHwlyfJoIcH2x8/4qjtDWr6Q=
Subject key identifier: 02:4A:0D:A7:B2:8C:80:71:95:62:23:E8:20:1C:39:F9:09:F2:49:42
Certificate issuer: /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial: 01A0E2A3B37F7468F6D70E0711FE2A7259E8
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/AkoNp7KMgHGVYiPoIBw5-QnySUI.roa
Signing time: Sun 27 Sep 2026 11:32:54 +0000
ROA not before: Sun 27 Sep 2026 11:32:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201634
IP address blocks: 109.70.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:a3:b3:7f:74:68:f6:d7:0e:07:11:fe:2a:72:59:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Validity
Not Before: Sep 27 11:32:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=024a0da7b28c8071956223e8201c39f909f24942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:02:6d:9b:a5:95:13:47:44:d4:e3:ec:4e:
c5:6c:09:05:ae:8c:99:15:e4:1d:26:34:f8:f6:4e:
3e:6c:11:cd:ef:d5:0b:9e:a3:d4:d1:98:a9:ea:49:
77:1c:b3:c3:48:0a:cc:1a:5e:36:3f:4b:4a:cb:3d:
48:34:78:3d:7c:11:1f:ce:0d:0e:ae:a4:46:a2:a3:
dc:79:be:c2:d7:31:64:ad:6d:ce:77:1b:54:ee:03:
73:cc:6e:a7:ef:13:08:95:81:ff:9f:df:c4:a1:2c:
1b:d1:e9:b0:05:b9:31:2c:f8:fc:09:1c:d4:02:9a:
c2:2a:74:a5:fa:36:05:8b:fd:ce:ae:79:40:c8:e3:
9c:12:92:bb:15:66:c2:e3:52:fe:24:4f:9c:46:bc:
e8:7b:7c:34:81:a0:1d:ca:60:fe:1f:d9:e7:eb:ba:
a3:aa:1f:ba:9f:ef:42:c8:7e:16:d8:c5:e0:5a:5f:
c5:ca:a4:e5:55:8d:5d:a2:7f:a4:05:89:8e:27:e9:
68:c3:43:12:76:7b:a6:a9:94:14:23:b6:26:92:4f:
4a:ac:ab:33:9d:2c:01:46:37:98:1d:1e:97:65:b9:
ad:10:dc:ba:a9:fb:ae:6d:92:12:8e:af:4e:be:09:
e6:01:ef:4e:ec:1d:8e:30:46:7d:70:5d:68:a5:37:
51:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4A:0D:A7:B2:8C:80:71:95:62:23:E8:20:1C:39:F9:09:F2:49:42
X509v3 Authority Key Identifier:
keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/AkoNp7KMgHGVYiPoIBw5-QnySUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.78.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:6b:e7:91:60:23:f8:01:19:4e:6d:28:55:b3:15:dd:96:5d:
22:17:fe:2b:28:7f:5b:35:16:59:1b:64:1e:6f:c9:66:f3:f1:
78:0e:97:55:98:17:c4:f8:66:91:8d:06:a4:e0:47:5d:6f:dc:
65:e6:0d:99:02:14:7c:54:b4:31:19:03:f3:a9:75:64:2f:ec:
9c:d0:cc:fa:58:0c:72:ef:c1:32:e2:d1:14:39:d1:a9:05:63:
2f:40:db:91:0a:29:19:e6:55:30:34:03:32:33:aa:7f:df:25:
15:fd:5c:b7:e5:10:e0:0b:93:45:30:9c:de:c9:84:24:5a:a1:
04:71:1c:6a:6c:08:19:e7:5b:8f:ea:eb:81:62:01:69:93:de:
74:e4:55:57:97:43:5a:4d:ac:b0:40:8a:9b:e5:68:86:31:70:
dd:2b:51:f4:65:eb:0f:39:89:54:4c:6d:0a:25:af:df:b3:86:
94:52:30:96:7e:b6:26:d6:3e:ea:0c:34:52:6c:eb:6c:e2:36:
a9:92:34:0e:12:77:54:0a:78:b9:28:a7:b0:48:8e:2f:55:16:
71:35:30:16:77:55:1c:e5:e6:30:6e:6e:c8:5e:bc:1a:d9:71:
1a:23:54:8f:7b:1f:d2:6a:bf:f5:69:cd:94:c1:fe:91:30:c7:
d3:31:be:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:31:16 2026 by rpki-client