Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AKRC_ro1rPT71__AygZdCMMSD_M.roa
File: AKRC_ro1rPT71__AygZdCMMSD_M.roa (raw, json)
Hash identifier: 0yrZbtH/A4UJz1+LikgRNZqhOWidt5P+EEjKPZJsuM4=
Subject key identifier: 00:A4:42:FE:BA:35:AC:F4:FB:D7:FF:C0:CA:06:5D:08:C3:12:0F:F3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E1359434937FE08EB3A6A2C7FEC75AC9B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AKRC_ro1rPT71__AygZdCMMSD_M.roa
Signing time: Sun 10 May 2026 19:24:37 +0000
ROA not before: Sun 10 May 2026 19:24:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215439
IP address blocks: 89.144.16.0/24 maxlen: 24
94.103.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:13:59:43:49:37:fe:08:eb:3a:6a:2c:7f:ec:75:ac:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 10 19:24:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00a442feba35acf4fbd7ffc0ca065d08c3120ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:10:e2:4c:ac:65:73:88:6f:65:98:34:38:
9c:52:07:2f:c8:96:e1:f0:46:ba:78:30:ac:c7:e6:
1d:89:70:44:b3:ef:f4:64:ba:ad:ee:f6:98:c2:28:
38:fb:e2:a6:78:34:f7:31:bf:97:ab:1a:83:8c:04:
ec:e9:98:3f:49:26:33:10:bc:f2:de:21:82:b2:63:
6b:7c:bc:68:ed:00:44:39:60:75:4d:5a:a3:b6:14:
2e:91:b8:7e:9f:2d:d8:a4:92:ea:dd:bb:40:07:75:
69:18:d3:d2:ce:73:09:c0:43:48:d8:4f:c3:ad:db:
39:57:e2:0b:6c:f6:ab:9e:01:64:df:ac:2c:80:14:
21:6f:75:38:75:e2:fe:22:28:17:80:73:bd:7a:61:
ea:b3:3a:16:04:ff:6d:2f:2f:6a:57:de:65:6a:30:
75:5b:46:ec:b1:78:a9:47:79:bc:c5:fe:28:d1:4a:
90:da:4e:5b:6a:2e:06:f1:9a:a8:89:4a:26:0c:4f:
79:07:d5:22:70:19:a6:23:24:f5:90:48:72:f5:b0:
b9:97:ca:4b:1d:a8:38:f9:01:0f:b4:9d:a4:63:a2:
15:42:f2:7f:05:b5:07:06:aa:28:65:0e:23:47:fa:
0c:1d:76:69:f2:9e:cb:1d:01:94:9b:ac:9b:a0:a5:
fa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A4:42:FE:BA:35:AC:F4:FB:D7:FF:C0:CA:06:5D:08:C3:12:0F:F3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AKRC_ro1rPT71__AygZdCMMSD_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.16.0/24
94.103.169.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f5:ec:b7:3d:1a:2c:47:ec:c1:ef:f5:ec:09:5a:52:cf:72:
bf:7c:6b:fc:7b:db:cd:ec:05:83:22:23:d9:5a:ae:60:f7:b4:
07:cf:8e:50:06:06:28:f9:94:15:85:ea:40:f4:9f:9b:48:dc:
e5:c2:c7:48:2e:fb:84:cf:f8:a4:84:79:20:a1:fb:cd:91:a0:
9b:5e:e0:01:cf:fa:61:43:65:54:2e:1e:f7:cb:96:a6:d5:5b:
f1:23:2e:68:06:b1:75:e2:c0:5f:00:e1:ef:d5:cb:ea:08:a3:
6c:ec:43:a5:eb:46:c3:b6:0a:ab:82:f1:33:8c:f4:c3:e0:f2:
3d:8d:32:bd:49:58:32:16:2b:c5:89:f2:6b:b3:57:20:24:68:
7c:ec:e3:ad:78:bc:cc:f6:8b:21:af:cc:b2:b2:9d:7d:91:79:
37:1e:0c:4c:e4:6e:8c:dd:e2:e5:94:b3:a4:e0:35:67:01:44:
19:ad:b9:25:5a:27:39:7e:e6:41:4e:45:6c:10:98:8e:65:27:
3b:43:db:b2:aa:0c:17:4b:9d:96:4e:29:92:df:a4:40:4e:72:
df:94:45:8e:94:18:a2:de:67:43:fb:a0:a8:2f:4d:2e:78:81:
0f:cc:18:56:a2:a3:59:c0:35:d0:29:d1:a8:f4:f1:57:cb:9a:
43:b9:bf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:34 2026 by rpki-client