Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/AkELUJ1nU_46RXAj1-2bY3yDqgU.roa
File: AkELUJ1nU_46RXAj1-2bY3yDqgU.roa (raw, json)
Hash identifier: bYHtNDNRSlQx/SUIjQmICDpEV5pw2ZU635jKEfo/bKM=
Subject key identifier: 02:41:0B:50:9D:67:53:FE:3A:45:70:23:D7:ED:9B:63:7C:83:AA:05
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 01A0C2D7F1B3723C163153C46F42D62F1910
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/AkELUJ1nU_46RXAj1-2bY3yDqgU.roa
Signing time: Mon 21 Sep 2026 07:22:07 +0000
ROA not before: Mon 21 Sep 2026 07:22:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219193
IP address blocks: 178.236.34.0/24 maxlen: 24
178.236.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:d7:f1:b3:72:3c:16:31:53:c4:6f:42:d6:2f:19:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Sep 21 07:22:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02410b509d6753fe3a457023d7ed9b637c83aa05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:a8:ab:58:ce:4d:27:3f:90:ab:d2:ad:3b:
46:a7:cf:93:18:eb:ef:61:ce:44:18:d7:59:69:87:
07:d9:29:b9:a7:87:08:9e:83:d3:41:16:71:15:73:
08:32:43:7b:d0:60:22:0a:51:f3:ee:b8:ec:30:4c:
f3:a0:e8:21:6f:72:a1:b1:ec:7a:11:db:84:cc:9d:
72:2b:fe:8a:a6:23:75:3e:91:26:02:32:b8:46:21:
d6:ad:17:30:b5:e8:a2:4f:03:fe:46:b2:1d:3a:ed:
bd:7d:ba:28:56:7b:a4:89:7e:bb:c7:56:21:b8:76:
dd:e0:ae:8c:be:90:75:e9:de:34:5e:77:61:a0:cd:
8f:36:36:b4:ae:a3:81:28:02:82:84:b1:00:39:4a:
4a:ce:5b:fd:bd:0e:50:86:d6:e5:0d:5d:37:06:c3:
d0:46:ff:c2:07:11:cd:d0:a4:a1:6a:80:d1:8d:6f:
85:0b:d8:c5:97:d1:8e:2c:34:ec:4d:a3:74:23:d8:
0e:66:53:dc:3e:a5:07:53:38:44:c3:53:fa:a9:a1:
91:c3:28:18:14:46:76:50:82:80:ed:66:f8:99:3d:
1e:a1:bf:36:e5:a0:4b:4a:4d:4d:e5:70:be:87:0e:
0e:8e:99:25:57:9f:b7:74:ae:cf:95:6a:3a:73:b0:
36:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:41:0B:50:9D:67:53:FE:3A:45:70:23:D7:ED:9B:63:7C:83:AA:05
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/AkELUJ1nU_46RXAj1-2bY3yDqgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.34.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:d0:63:1f:09:b1:af:1b:ac:df:2c:97:0d:eb:59:cd:65:c4:
a2:1b:2d:16:2b:09:75:5e:85:d7:ce:92:94:3c:f9:3f:56:ff:
ed:d4:40:d7:0b:76:28:25:62:ed:1d:0d:35:fb:f9:45:1b:86:
24:9b:f2:8f:b4:ea:ed:51:9b:6b:77:69:2c:35:6e:25:77:2d:
88:13:5d:9c:4e:3b:e4:05:4c:9b:31:63:33:2a:b5:aa:18:4e:
11:56:d7:17:ad:81:62:4c:e8:d1:da:39:93:6f:68:65:7a:56:
a7:50:96:4d:4f:38:b9:d0:af:c9:3f:32:43:ef:9f:0a:d2:5c:
26:79:46:57:02:ca:87:bf:a2:5b:03:8f:28:ed:4d:09:ce:64:
51:16:0e:0e:68:5b:ac:93:b5:b7:31:b8:b5:b4:1b:66:ab:53:
b5:ba:40:9d:13:e6:b4:ba:39:6f:ed:4c:ae:7b:e2:d0:b3:e5:
ab:13:ad:50:29:3f:d0:5a:28:96:4b:09:cd:bd:4b:89:9d:cb:
df:e2:2b:14:2c:5e:19:7e:b6:2f:29:eb:e2:f4:36:87:8a:4c:
5a:80:7b:e7:5f:b8:b3:ca:a6:34:df:4d:0f:6e:6f:d9:ef:26:
12:9a:df:31:8a:c3:75:39:74:5e:ba:69:96:0f:87:c7:71:0b:
40:1f:73:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDC1/GzcjwWMVPEb0LWLxkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmQzODA0ZTAwYjllMDZhODJjZWQ5ZjA3YjM0ZmUzZmQ4
MDM5NGUwHhcNMjYwOTIxMDcyMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjQxMGI1MDlkNjc1M2ZlM2E0NTcwMjNkN2VkOWI2MzdjODNhYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzuoq1jOTSc/kKvSrTtGp8+TGOvv
Yc5EGNdZaYcH2Sm5p4cInoPTQRZxFXMIMkN70GAiClHz7rjsMEzzoOghb3Khsex6
EduEzJ1yK/6KpiN1PpEmAjK4RiHWrRcwteiiTwP+RrIdOu29fbooVnukiX67x1Yh
uHbd4K6MvpB16d40XndhoM2PNja0rqOBKAKChLEAOUpKzlv9vQ5QhtblDV03BsPQ
Rv/CBxHN0KShaoDRjW+FC9jFl9GOLDTsTaN0I9gOZlPcPqUHUzhEw1P6qaGRwygY
FEZ2UIKA7Wb4mT0eob825aBLSk1N5XC+hw4OjpklV5+3dK7PlWo6c7A2hwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAJBC1CdZ1P+OkVwI9ftm2N8g6oFMB8GA1UdIwQY
MBaAFBX9OATgC54GqCztnwezT+P9gDlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iZTNjNDAtMTIxMC00MjcyLWE1ZWEt
NzgzNWQzMjA4Mzk2LzEvQWtFTFVKMW5VXzQ2UlhBajEtMmJZM3lEcWdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9iZTNjNDAtMTIxMC00MjcyLWE1ZWEtNzgzNWQzMjA4Mzk2
LzEvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsuwiMA0G
CSqGSIb3DQEBCwUAA4IBAQAM0GMfCbGvG6zfLJcN61nNZcSiGy0WKwl1XoXXzpKU
PPk/Vv/t1EDXC3YoJWLtHQ01+/lFG4Ykm/KPtOrtUZtrd2ksNW4ldy2IE12cTjvk
BUybMWMzKrWqGE4RVtcXrYFiTOjR2jmTb2hlelanUJZNTzi50K/JPzJD758K0lwm
eUZXAsqHv6JbA48o7U0JzmRRFg4OaFusk7W3Mbi1tBtmq1O1ukCdE+a0ujlv7Uyu
e+LQs+WrE61QKT/QWiiWSwnNvUuJncvf4isULF4ZfrYvKevi9DaHikxagHvnX7iz
yqY0300Pbm/Z7yYSmt8xisN1OXReummWD4fHcQtAH3OG
-----END CERTIFICATE-----
Generated at Fri Oct 9 15:06:41 2026 by rpki-client