Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/akm-7yAJiDonZBQxnVV1OGdrWQI.roa
File: akm-7yAJiDonZBQxnVV1OGdrWQI.roa (raw, json)
Hash identifier: BSCm3cC8faCYf4qKzPFWFm0eV0aPG9+6iYZqT1LMlXw=
Subject key identifier: 6A:49:BE:EF:20:09:88:3A:27:64:14:31:9D:55:75:38:67:6B:59:02
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0198C64922D3C49960C433E576BA44710EC5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/akm-7yAJiDonZBQxnVV1OGdrWQI.roa
Signing time: Wed 20 Aug 2025 07:02:18 +0000
ROA not before: Wed 20 Aug 2025 07:02:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 188.255.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:49:22:d3:c4:99:60:c4:33:e5:76:ba:44:71:0e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 20 07:02:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a49beef2009883a276414319d557538676b5902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:b7:fa:5b:50:7e:bc:21:df:1a:1e:01:8f:
7f:32:78:3a:4d:59:f8:cd:bd:97:31:f1:d8:02:96:
da:b4:d8:b5:5f:34:08:88:35:1b:6e:59:f9:6d:ec:
bf:db:22:f0:91:fd:79:df:33:be:de:90:99:25:b3:
07:59:ff:59:f5:2c:e4:8e:c2:80:a0:ad:45:a0:51:
79:f2:b7:d1:62:dd:2a:a3:13:f2:f4:35:4b:d1:2f:
e2:2d:65:b0:a3:bb:46:f2:7b:d2:af:6f:74:d8:92:
95:e4:93:a1:d6:dd:59:49:7a:aa:de:dc:ff:ab:a3:
70:d5:be:3b:48:91:53:49:8f:8c:f7:24:7e:9a:91:
6f:10:cc:88:df:c1:fa:fa:53:a7:bb:db:e6:2a:df:
05:3e:d7:bb:ba:51:09:db:97:f1:c4:b5:df:26:36:
f7:bb:9b:93:fd:11:91:17:8d:d6:03:7c:d7:9a:37:
2c:a8:e3:3d:5b:6a:66:58:0e:53:f7:c9:73:bf:bf:
af:8b:a7:aa:fc:17:17:f4:7b:29:b3:d4:3c:d8:7b:
17:7e:13:cc:5b:a8:5f:fb:fb:10:c6:94:77:d8:54:
49:f6:c0:39:27:75:7f:3b:89:a4:3e:46:d1:47:f9:
c8:2f:ff:70:11:55:19:6f:ce:8f:cf:65:ef:84:36:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:49:BE:EF:20:09:88:3A:27:64:14:31:9D:55:75:38:67:6B:59:02
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/akm-7yAJiDonZBQxnVV1OGdrWQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.212.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ba:32:3d:6a:53:b9:5a:6d:1a:10:bd:89:5b:1f:44:e1:d2:
cc:af:d3:37:16:25:e2:61:13:75:02:aa:5a:4d:c6:ea:4d:1b:
b5:89:0d:4c:6b:ee:ac:79:85:46:6c:1b:84:0a:66:f7:92:9d:
fd:81:4c:a9:5c:53:a6:7b:60:1e:d6:da:a4:bb:35:54:12:cf:
f3:0f:8f:33:40:db:c2:18:71:a4:af:8e:42:21:db:9e:40:02:
c8:ba:4c:53:5f:e4:89:dd:f3:48:f0:ec:b5:c0:f0:b3:d4:4d:
4e:25:36:f7:10:b8:75:aa:29:66:60:3b:c2:8e:4c:a6:84:6a:
67:d0:fd:51:60:8b:21:5b:32:e5:e5:17:33:63:f8:66:8e:f5:
ee:0c:96:06:5f:50:1b:0b:9c:d9:40:c6:7e:83:58:da:10:2c:
37:ce:31:1e:6f:04:f6:f0:20:76:e1:90:e1:b9:ed:2c:e8:f4:
94:38:c2:85:78:71:69:7d:1c:be:4e:95:c4:6f:16:9f:ec:8e:
07:b5:4f:e9:38:6d:66:f6:42:f7:be:4a:16:c5:e9:12:83:89:
86:fd:67:78:af:1a:cd:03:20:e6:e8:35:5b:5f:6f:9e:32:48:
56:77:b9:cd:bd:36:a6:36:9e:9c:f9:64:e2:5b:a5:7e:55:28:
c0:d0:83:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:50:24 2025 by rpki-client