Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/aKo42iR0E4Bp0mn2cnSbB53lFx4.roa
File: aKo42iR0E4Bp0mn2cnSbB53lFx4.roa (raw, json)
Hash identifier: RxHbo+E5fNepEvK4VqWbGeFNmTXqJ1bN9JdZT6cf/ms=
Subject key identifier: 68:AA:38:DA:24:74:13:80:69:D2:69:F6:72:74:9B:07:9D:E5:17:1E
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A123DA8FFEB9594EFEBD6671154564D3CC
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/aKo42iR0E4Bp0mn2cnSbB53lFx4.roa
Signing time: Sat 10 Oct 2026 03:28:08 +0000
ROA not before: Sat 10 Oct 2026 03:28:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152726
IP address blocks: 77.67.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:da:8f:fe:b9:59:4e:fe:bd:66:71:15:45:64:d3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 10 03:28:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68aa38da2474138069d269f672749b079de5171e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:16:dd:bf:9e:83:06:09:0e:b0:14:5a:da:
e9:9a:02:bc:6f:d0:c3:30:29:bb:b2:29:c2:e9:a5:
ce:6d:1c:08:da:90:b0:08:14:e5:b4:d4:5b:97:d9:
b8:20:b4:68:02:0a:a7:41:bd:7d:2a:e6:3f:ef:16:
23:c6:7c:18:22:53:cc:f6:f9:4f:1f:a6:d1:07:30:
fd:0a:7e:16:e8:93:de:49:b2:50:c6:6c:85:c7:7b:
9e:91:b6:87:bc:7f:d9:8a:a0:45:6a:94:3e:a9:67:
1d:b1:db:2e:7f:b6:99:69:90:32:53:f8:ea:d7:9b:
f2:42:7f:68:c6:34:70:0b:a2:7e:00:65:25:ca:bf:
fe:ca:d4:ff:ac:43:38:63:cf:bf:c1:95:3d:eb:5a:
7f:bc:d1:61:9c:7f:46:77:c4:c3:fc:9d:ce:e3:c4:
43:a3:58:ac:f9:a1:19:6f:c9:1c:b6:14:ea:22:13:
d4:4e:1d:04:a6:1f:c9:fd:89:e0:ac:e0:20:3e:08:
55:9b:2a:9e:43:2a:74:71:d3:69:91:0e:77:b6:d3:
fd:81:f0:1a:34:da:9d:0d:8b:01:c7:6e:33:76:69:
c5:8d:1c:28:7e:72:20:ae:39:3c:43:10:22:e8:91:
7d:35:88:da:4b:e6:d1:37:1a:cb:7d:aa:3e:8c:a1:
85:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AA:38:DA:24:74:13:80:69:D2:69:F6:72:74:9B:07:9D:E5:17:1E
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/aKo42iR0E4Bp0mn2cnSbB53lFx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.125.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:86:d2:8f:8e:25:a2:ac:fc:3f:db:52:1a:20:db:73:c5:bc:
5e:27:09:95:ca:56:bf:12:b1:2e:4a:de:91:88:80:25:87:66:
c1:2b:4a:c3:bb:1e:fd:97:0c:af:1f:0c:12:e9:90:c3:63:79:
6c:af:b0:f8:8c:9f:e7:53:8c:f9:23:52:ac:90:c8:e4:74:c2:
f1:73:74:78:58:2b:2b:0a:cf:23:1c:9c:8a:92:ff:df:e7:10:
5d:67:30:ac:fa:99:87:72:e6:21:dc:33:4b:29:86:5d:9d:2e:
14:e6:c5:87:6c:d1:34:e9:19:2d:30:be:15:5b:a6:e0:14:d0:
cd:e3:50:7b:68:49:ae:94:b5:ea:30:3b:f5:ca:db:c6:0e:e0:
6e:f3:f5:0a:6c:10:c6:5a:c2:6e:81:0e:16:14:99:07:61:7e:
17:25:60:e1:5c:aa:10:76:ef:8d:84:7b:d2:4f:26:c3:fd:c9:
98:76:90:d7:f5:f7:14:ab:2e:02:60:19:51:1c:97:c3:eb:23:
fe:35:b4:06:b2:a3:2d:30:c8:b9:29:3c:dd:a1:8f:03:d6:a9:
eb:23:4b:66:9f:29:85:1d:d0:5a:32:96:88:75:8a:e4:15:8c:
42:a4:59:00:c4:b4:65:d7:6b:56:ec:b7:2a:76:65:01:6f:08:
26:3b:fd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:30:50 2026 by rpki-client