Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/akc9_wpKRVu5T4K4pQEPp8eh010.roa
File: akc9_wpKRVu5T4K4pQEPp8eh010.roa (raw, json)
Hash identifier: hk9ZC+s74u1UzDAVrpc9pATxHP34acNqulMsrlGZ+pA=
Subject key identifier: 6A:47:3D:FF:0A:4A:45:5B:B9:4F:82:B8:A5:01:0F:A7:C7:A1:D3:5D
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 019C9F0F9ECC31742AFDFD528BAA45C28EFA
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/akc9_wpKRVu5T4K4pQEPp8eh010.roa
Signing time: Fri 27 Feb 2026 12:25:26 +0000
ROA not before: Fri 27 Feb 2026 12:25:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198704
IP address blocks: 185.184.124.0/24 maxlen: 24
185.184.125.0/24 maxlen: 24
185.184.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:0f:9e:cc:31:74:2a:fd:fd:52:8b:aa:45:c2:8e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Feb 27 12:25:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a473dff0a4a455bb94f82b8a5010fa7c7a1d35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:49:44:e8:11:55:60:41:e6:09:1a:74:c9:
a3:0d:2e:20:45:e0:3c:29:f8:79:a8:f8:25:97:96:
7b:7a:0d:8f:0e:d3:55:cf:5a:c3:82:40:d5:26:6a:
e2:8b:36:cf:8a:11:52:de:c8:4d:a7:e4:25:ba:33:
55:42:c0:00:84:b1:9c:c8:a6:7a:20:20:10:65:02:
d8:f1:16:b8:1f:2a:45:7e:42:b7:20:c8:68:a5:fe:
48:ec:fc:31:dc:dd:99:3e:c7:12:40:e9:e9:a1:6c:
46:57:19:a9:ca:fa:b4:94:11:27:c9:29:ee:5b:d1:
2e:a8:82:c3:18:6f:6f:3e:4a:df:8b:63:0b:3c:c5:
86:6f:ae:de:c1:a2:ce:7a:3b:c8:6c:1a:ea:e5:1a:
5c:8e:a9:ce:3e:5c:b3:51:b1:5c:ff:43:9c:1e:80:
c6:07:d2:02:73:09:db:f1:9f:3f:60:42:03:15:07:
5a:ff:48:d3:b5:c4:c9:8d:c2:f8:5f:46:c1:f0:5b:
de:89:47:4a:d8:e3:26:84:6c:e8:70:bd:7e:5f:b0:
fb:d8:fb:d7:3e:89:ca:f2:e2:85:0f:da:24:fc:9c:
47:fd:03:f4:80:49:b4:a2:b4:07:d9:ba:1f:fa:f0:
dd:d7:8d:3f:99:eb:13:a5:7e:c9:1b:b6:a9:29:81:
e7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:47:3D:FF:0A:4A:45:5B:B9:4F:82:B8:A5:01:0F:A7:C7:A1:D3:5D
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/akc9_wpKRVu5T4K4pQEPp8eh010.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.124.0-185.184.126.255
Signature Algorithm: sha256WithRSAEncryption
1a:5d:ab:87:f2:cd:6a:76:ce:e0:cd:17:35:36:26:e3:46:c2:
f9:f5:1e:58:22:2c:cd:8d:e4:09:ee:a6:af:31:ec:fb:59:e2:
5a:51:70:c3:3a:cb:c0:1c:53:1f:c5:3e:dd:78:95:f1:e9:fe:
04:7f:53:4a:cb:05:b4:7e:c3:cb:c7:f5:bb:3b:d1:7d:07:6d:
35:f2:c4:12:07:60:a1:f5:d4:46:77:2b:2f:8e:6a:c9:64:54:
4b:15:1b:04:04:81:7b:3d:b6:55:3a:74:1e:1d:a7:72:aa:cf:
ad:50:e1:a0:f1:68:3f:bd:a3:66:90:2b:c8:b9:02:03:dd:5c:
ed:ca:a0:6a:e7:02:cf:85:56:e2:8f:06:ee:b3:e0:d4:4a:61:
a9:65:c3:bf:a9:91:f3:ce:fa:27:be:70:80:2c:d9:e8:03:15:
4e:bf:60:91:73:54:25:c6:b4:3b:de:92:e0:69:75:8a:4b:17:
cc:58:36:ec:33:e1:a1:5d:bb:a0:35:18:4c:98:e1:be:31:69:
dc:26:d1:5e:10:0c:5f:77:09:39:66:8b:72:5f:7f:9a:9b:e2:
58:6e:23:91:51:17:09:04:24:6a:2e:37:73:f7:fc:87:5b:7f:
dc:15:54:d2:65:bc:4d:d6:89:17:06:f6:10:be:91:0f:9e:f5:
62:88:39:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:09:58 2026 by rpki-client