Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/azhaK6p4TY581nFNN0YSc0NYZII.roa
File: azhaK6p4TY581nFNN0YSc0NYZII.roa (raw, json)
Hash identifier: D1i0KlyPZu/BLyg50mMb9PNPD0ML3cRf92lF5p6N+zc=
Subject key identifier: 6B:38:5A:2B:AA:78:4D:8E:7C:D6:71:4D:37:46:12:73:43:58:64:82
Certificate issuer: /CN=bf4d9015253d77b7b8ab79bbbebb3efcb742c2f1
Certificate serial: 019F23682EC86D379BADF328502CA298267F
Authority key identifier: BF:4D:90:15:25:3D:77:B7:B8:AB:79:BB:BE:BB:3E:FC:B7:42:C2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v02QFSU9d7e4q3m7vrs-_LdCwvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/azhaK6p4TY581nFNN0YSc0NYZII.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60012
IP address blocks: 185.204.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v02QFSU9d7e4q3m7vrs-_LdCwvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2e:c8:6d:37:9b:ad:f3:28:50:2c:a2:98:26:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4d9015253d77b7b8ab79bbbebb3efcb742c2f1
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b385a2baa784d8e7cd6714d3746127343586482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:d6:75:1c:fe:80:d3:af:79:6c:ce:94:b0:
46:58:4e:39:2c:0a:e4:6c:c5:a2:c1:80:1b:f3:8e:
4e:ca:75:4a:cb:f4:9a:15:2b:c5:fe:32:f4:88:27:
eb:fb:63:53:62:b2:ba:bf:41:28:9b:f1:db:28:79:
1d:7b:fd:29:ab:9d:0e:1a:d9:3d:6b:86:cd:41:1b:
db:87:d9:88:27:19:bd:0a:72:20:e8:78:72:64:c3:
43:94:24:c0:82:c6:29:05:3f:ef:b2:bd:97:d1:59:
bf:bb:3f:b2:b4:16:e0:1b:e6:c3:25:4b:75:d3:11:
3f:30:43:20:58:a8:2d:c4:b0:6e:d7:de:6c:5a:4f:
6c:02:2f:26:9b:2d:9e:2e:63:7a:fb:da:69:12:7c:
7e:dd:ac:e4:c4:28:ca:88:bc:83:83:4e:44:97:18:
77:16:d1:9f:e2:0d:5c:1d:04:8b:d6:97:ad:c2:d0:
47:4b:c6:f0:88:d6:ea:1f:89:82:5e:7e:75:1b:5b:
a8:ea:3e:10:be:80:f1:79:fa:bd:e0:9f:07:a1:cc:
a6:2b:86:a7:9d:58:9a:9a:90:ef:a9:fe:80:f3:9b:
67:f4:b1:d8:e9:55:0e:32:29:b2:da:08:ad:1a:31:
71:a1:38:bb:c5:95:c0:e4:b3:3f:9a:b2:97:4d:b9:
99:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:38:5A:2B:AA:78:4D:8E:7C:D6:71:4D:37:46:12:73:43:58:64:82
X509v3 Authority Key Identifier:
keyid:BF:4D:90:15:25:3D:77:B7:B8:AB:79:BB:BE:BB:3E:FC:B7:42:C2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v02QFSU9d7e4q3m7vrs-_LdCwvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/azhaK6p4TY581nFNN0YSc0NYZII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.44.0/22
Signature Algorithm: sha256WithRSAEncryption
84:68:0b:2c:6a:95:c7:df:2d:54:45:bf:a2:9b:6d:0a:bf:f6:
ed:e0:f7:73:13:fe:9a:c3:c8:82:f1:85:25:cd:1b:11:09:bd:
24:65:1b:6d:1b:1c:91:42:48:07:36:16:f3:b4:70:f0:67:f8:
41:90:da:6f:a8:df:36:ec:da:b8:2a:98:8e:72:fa:18:9b:2d:
4d:78:aa:85:11:6a:ca:26:75:82:2a:75:52:10:97:bc:82:67:
3c:67:35:88:0f:d3:01:de:31:a6:11:c5:d7:51:da:cc:0f:72:
28:f0:fe:7d:bc:75:48:6f:f4:03:1d:03:d8:90:2d:00:88:59:
d2:7a:b9:4f:79:93:d8:5f:7e:28:c4:28:d0:5d:1b:dd:8a:11:
ef:c6:6d:bf:d6:7b:3c:0b:c4:fc:ef:2c:7a:a9:f4:1e:57:4e:
ac:46:5e:9d:a1:52:d2:fd:79:3f:08:d3:23:ff:2c:7d:81:4b:
4f:f1:84:12:50:29:aa:39:ec:5f:8e:2c:0e:a3:7c:9b:1c:21:
75:ee:e5:11:80:1d:a3:3c:a1:62:c5:47:0c:9e:01:5e:26:b4:
88:cc:9a:3b:f3:1c:ca:22:01:28:f9:83:6b:ac:f1:5c:a4:1e:
dd:14:72:d2:b9:76:81:53:99:d9:ad:ca:ee:29:7c:be:7a:71:
5c:bf:da:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:52:26 2026 by rpki-client