Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/A2OoFVjt4hM-sMjMfHiUnzrNv-M.roa
File: A2OoFVjt4hM-sMjMfHiUnzrNv-M.roa (raw, json)
Hash identifier: 6nA7grwYfCC8F9QlWfwY7V2uHRishBzwFCKkdr7sz1A=
Subject key identifier: 03:63:A8:15:58:ED:E2:13:3E:B0:C8:CC:7C:78:94:9F:3A:CD:BF:E3
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 019ED5CC79F8BE70088AD960E3F9BA2C47E0
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/A2OoFVjt4hM-sMjMfHiUnzrNv-M.roa
Signing time: Wed 17 Jun 2026 13:36:48 +0000
ROA not before: Wed 17 Jun 2026 13:36:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48847
IP address blocks: 185.104.68.0/22 maxlen: 22
185.104.68.0/24 maxlen: 24
185.104.68.0/26 maxlen: 26
185.104.68.64/26 maxlen: 26
185.104.68.144/28 maxlen: 28
185.104.68.240/29 maxlen: 29
185.104.70.0/24 maxlen: 24
185.104.70.0/28 maxlen: 28
185.104.70.32/30 maxlen: 30
185.104.70.220/30 maxlen: 30
185.104.71.0/24 maxlen: 24
185.104.71.0/28 maxlen: 28
185.104.71.16/30 maxlen: 30
185.104.71.20/30 maxlen: 30
185.104.71.24/30 maxlen: 30
185.104.71.28/30 maxlen: 30
185.104.71.32/28 maxlen: 28
185.104.71.64/27 maxlen: 27
185.104.71.128/28 maxlen: 28
185.104.71.160/29 maxlen: 29
185.104.71.176/29 maxlen: 29
185.104.71.200/29 maxlen: 29
185.104.71.208/28 maxlen: 28
185.104.71.224/28 maxlen: 28
2a06:3480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:cc:79:f8:be:70:08:8a:d9:60:e3:f9:ba:2c:47:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Jun 17 13:36:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0363a81558ede2133eb0c8cc7c78949f3acdbfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:f2:0f:d9:b4:87:9d:38:16:34:f2:6f:49:
bb:e7:92:5c:36:5d:f0:42:34:13:7e:aa:3d:6c:41:
1e:d7:0b:08:6d:d8:bb:32:a7:1b:7c:81:06:8e:20:
89:51:18:e5:9b:ac:cd:bf:1b:2d:e2:60:7a:6f:a9:
fa:aa:78:8a:62:6c:f9:40:b1:dd:d9:e3:54:ee:d0:
12:dd:fb:43:73:92:4b:a9:32:35:3a:6f:c5:f9:79:
6c:c8:d8:25:ef:97:e5:ba:c1:a5:72:37:7e:d4:44:
93:e9:c4:5b:85:aa:c3:67:b5:ca:f3:1c:0c:81:8e:
46:9f:10:51:99:c7:b7:98:83:73:4e:b8:04:17:6b:
f9:36:42:59:94:c0:67:49:ef:7e:01:38:8b:48:f7:
4d:87:61:ce:a9:40:d2:6a:a4:e5:5a:33:0e:0c:1d:
d7:bc:7e:2c:76:74:3c:a4:d1:4f:53:4a:c5:66:71:
70:84:8a:87:f6:b8:10:d5:72:20:1e:a1:73:39:de:
3b:c6:6d:03:f4:73:70:89:ce:73:74:e6:ba:25:af:
44:1d:10:c2:2b:05:7d:8b:71:c5:5b:d6:1a:b2:01:
d9:7f:a7:29:e2:58:c3:05:b3:1f:30:3b:79:db:24:
40:37:48:4b:7b:c0:22:24:e6:eb:a1:91:9e:ff:41:
64:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:63:A8:15:58:ED:E2:13:3E:B0:C8:CC:7C:78:94:9F:3A:CD:BF:E3
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/A2OoFVjt4hM-sMjMfHiUnzrNv-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.68.0/22
IPv6:
2a06:3480::/29
Signature Algorithm: sha256WithRSAEncryption
4f:46:f9:e5:99:ca:e2:87:dc:69:6b:3b:07:87:f2:0e:66:8e:
2b:8b:2f:81:56:e9:7e:26:65:56:4a:31:e7:19:54:63:2e:b3:
0a:53:0a:64:ce:0f:58:46:31:80:75:a3:4a:ff:ee:f8:70:93:
3b:25:72:f0:a7:a8:44:db:34:79:0d:8d:e5:0b:8d:a8:85:9e:
84:12:14:9c:30:e6:fc:85:61:ed:f2:ea:a9:3e:5d:a5:66:60:
88:a9:20:24:d6:19:a5:45:8b:96:f8:a0:ac:ea:76:55:b2:6c:
9a:89:a1:58:d4:08:a1:be:45:82:01:5d:de:e5:66:1c:e4:70:
1e:0f:4d:0a:a2:ad:3e:e0:6c:bd:36:6d:48:37:ce:30:8f:d8:
de:80:d0:78:7e:1f:eb:1f:dd:04:44:5b:76:d0:8c:e4:18:37:
a3:42:71:e4:66:ab:e7:f2:c9:a6:20:06:2c:ad:45:d4:1e:56:
6f:97:f7:30:8e:04:1e:b2:26:7b:39:89:5a:78:7a:0b:38:15:
10:3d:34:59:ed:00:c0:c1:42:e6:80:03:61:f8:c8:bf:b7:48:
8c:8e:f4:47:ec:e9:39:0c:48:8f:c3:32:c6:b0:1f:69:1e:5e:
4a:56:11:b4:5b:10:9f:90:7f:b8:88:ad:93:19:54:94:ac:77:
2c:c4:1c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:48 2026 by rpki-client