Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/AKoY622JmnwKjq8nfHcGvYUdZ68.roa
File: AKoY622JmnwKjq8nfHcGvYUdZ68.roa (raw, json)
Hash identifier: I1a3paZI5yF551cZ5VvbjCz2egQx07gZs4bp02j+tj8=
Subject key identifier: 00:AA:18:EB:6D:89:9A:7C:0A:8E:AF:27:7C:77:06:BD:85:1D:67:AF
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 019E01E514F44C56AEDB165CD3013B590AE8
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/AKoY622JmnwKjq8nfHcGvYUdZ68.roa
Signing time: Thu 07 May 2026 10:04:10 +0000
ROA not before: Thu 07 May 2026 10:04:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202799
IP address blocks: 109.237.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:01:e5:14:f4:4c:56:ae:db:16:5c:d3:01:3b:59:0a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: May 7 10:04:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00aa18eb6d899a7c0a8eaf277c7706bd851d67af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6f:cd:31:15:65:bd:6c:b4:d9:de:08:a3:2e:
43:28:ec:f4:95:1e:1b:62:da:58:3f:aa:71:f2:f7:
90:1a:85:7b:fa:de:78:18:ed:d9:7a:1d:37:8e:ed:
4a:93:c2:38:8d:51:4b:80:7c:d1:09:68:3e:72:e0:
be:24:0e:59:d7:dd:0e:98:30:6c:9d:a9:25:34:99:
4d:d8:0f:64:3d:21:9d:48:ce:ae:84:da:4f:97:bd:
e0:6e:c7:ac:1f:8d:d6:1b:9c:28:ba:98:5e:26:10:
1b:b2:16:6e:b1:e4:1a:0b:35:1f:6e:30:89:83:7f:
18:28:70:d6:dc:71:76:43:e1:d7:67:8e:30:19:d6:
2c:f1:40:52:e9:25:d3:68:90:45:4b:85:f0:29:3b:
a9:20:8b:42:5d:be:c6:7a:71:b0:70:fe:29:e2:ff:
14:6e:da:1f:ed:b7:10:c3:60:37:b7:05:9e:b6:e0:
7f:f3:b6:ae:6b:8c:ef:e9:4f:58:30:33:ec:3d:61:
2b:05:4e:62:d7:ff:59:fa:64:af:a7:2e:fc:e2:ed:
6b:6a:44:1e:f6:22:e1:9a:c2:ed:8c:b5:cc:0c:b8:
68:02:c7:65:f3:34:d6:76:b6:c5:36:46:3d:5b:38:
29:da:8d:53:f5:1c:6f:06:a3:bd:e8:90:8a:65:6c:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AA:18:EB:6D:89:9A:7C:0A:8E:AF:27:7C:77:06:BD:85:1D:67:AF
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/AKoY622JmnwKjq8nfHcGvYUdZ68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.98.0/23
Signature Algorithm: sha256WithRSAEncryption
82:45:09:eb:68:f3:4e:02:32:b2:88:22:f7:ba:18:4d:1d:29:
f0:30:3c:8d:9e:2d:2a:e4:ff:1c:8a:f5:af:ac:fd:2e:e5:39:
49:b9:ba:73:bd:7e:90:08:f3:39:eb:bf:2c:85:60:93:4c:86:
c0:6e:35:0f:c4:1a:d8:60:4f:0c:26:ee:24:86:e7:99:c4:2e:
6f:06:da:7e:b1:5f:5a:25:fe:cc:76:a3:2f:85:b0:be:82:70:
51:3d:e1:89:12:49:9c:82:ed:26:48:4a:0a:2d:ba:14:fb:26:
55:ff:11:ab:ef:6b:3c:71:d1:38:e8:42:11:22:e5:3c:cf:7a:
61:96:1b:ba:35:c9:0d:3a:33:09:79:71:a5:5a:d3:71:58:cf:
56:fa:7d:2c:e4:af:f7:a7:dd:c1:be:ee:ad:bc:df:4f:1b:71:
f5:32:93:8c:37:00:5d:83:23:ac:a6:d5:77:04:2d:4b:7d:ce:
d5:7a:f1:c2:b2:86:44:4b:a4:00:76:e3:b4:cb:c4:76:bf:03:
27:5d:9e:3e:dc:2e:6c:78:d6:e1:ed:79:64:99:93:03:4b:c8:
56:26:b9:3d:ac:c6:73:77:89:17:2e:76:f2:56:d2:e8:20:ee:
d3:1f:06:90:37:d7:ac:57:38:20:20:f6:01:86:6f:8f:c4:9a:
dc:ef:98:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:11 2026 by rpki-client