Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_8yHY_ykJ4w_0HrcdiBPE1wG4yo.roa
File: _8yHY_ykJ4w_0HrcdiBPE1wG4yo.roa (raw, json)
Hash identifier: Rbwo5AYXXXUwk7/pm70G9ptXqfweoWL8AVGgITsiuIQ=
Subject key identifier: FF:CC:87:63:FC:A4:27:8C:3F:D0:7A:DC:76:20:4F:13:5C:06:E3:2A
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019DFE6449218B0DE1AA29105F9C66F28044
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_8yHY_ykJ4w_0HrcdiBPE1wG4yo.roa
Signing time: Wed 06 May 2026 17:44:38 +0000
ROA not before: Wed 06 May 2026 17:44:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213791
IP address blocks: 109.122.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fe:64:49:21:8b:0d:e1:aa:29:10:5f:9c:66:f2:80:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: May 6 17:44:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffcc8763fca4278c3fd07adc76204f135c06e32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:76:44:0d:be:6c:81:98:32:cd:a6:82:b0:6b:
96:59:42:64:46:1a:de:c9:41:f1:3a:ca:5d:88:8a:
19:d9:1f:49:cc:80:d8:71:65:c4:78:2a:c1:4f:9d:
83:bc:d4:a7:d6:01:39:5b:17:ed:3f:da:57:c3:11:
a4:c3:dc:fd:55:e9:31:58:e2:16:f5:41:96:ff:09:
ae:0a:e0:9f:b5:44:0a:9f:e8:c7:8a:13:fa:d4:f0:
0e:55:0b:b4:55:b9:14:a2:f7:de:e5:78:5c:52:3f:
1a:1e:3d:ce:ce:bf:fb:f5:11:7e:15:13:36:6e:04:
83:3e:4f:c0:51:ce:47:b1:10:79:66:9f:d4:d2:21:
23:06:fc:35:07:5a:44:c5:88:bc:e7:3a:b0:62:83:
e4:5b:6d:34:83:bc:ae:86:7f:59:84:ea:9f:3e:44:
ff:f4:3c:d4:c0:eb:39:90:08:b0:06:f5:94:11:4f:
a9:71:85:ad:91:32:42:10:6d:47:3d:de:f5:25:10:
d5:2b:15:4b:65:33:a5:8a:db:e4:61:cb:f3:6f:e0:
20:23:53:0e:f5:c5:28:48:c0:67:a6:b5:57:7d:32:
37:5c:03:d3:0a:4f:53:ed:b2:aa:79:7f:86:39:d6:
78:14:fe:51:b1:b4:ba:09:25:37:3b:46:3c:48:b4:
35:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CC:87:63:FC:A4:27:8C:3F:D0:7A:DC:76:20:4F:13:5C:06:E3:2A
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_8yHY_ykJ4w_0HrcdiBPE1wG4yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.27.0/24
Signature Algorithm: sha256WithRSAEncryption
99:74:1e:49:25:40:57:f6:d6:30:85:5f:46:e2:69:69:41:9c:
8e:a5:5e:fb:a1:c5:5b:c0:18:f3:e7:d0:76:c5:c0:ed:43:96:
03:79:a3:8f:71:41:88:33:c4:5b:b8:98:24:27:a5:7b:0a:9c:
5a:43:1e:17:37:8e:ae:5c:a9:f7:91:cb:d5:12:65:38:b5:92:
a6:39:fe:ad:e3:39:84:1f:ca:92:39:f6:af:88:0b:4c:a5:a7:
a6:68:fd:b4:69:b6:a7:66:fe:33:df:b5:38:0e:5f:c6:52:dd:
1c:d4:d4:3b:4a:17:2b:b3:8d:bd:52:b6:8d:41:dc:90:35:a2:
f4:b8:be:9c:2a:68:f6:69:89:74:26:58:e7:ae:dc:a5:59:53:
95:a9:e0:5a:1e:fc:61:81:2a:c1:b6:92:6d:46:91:4b:3b:38:
1e:8c:57:f2:aa:a0:8c:ea:d9:e0:9f:e5:5c:62:97:4c:4f:5f:
b2:a1:18:62:63:7a:85:64:ce:f8:7f:ff:0b:9d:ea:c0:01:84:
54:05:bf:57:9d:c7:8c:d3:1e:a1:e3:40:ba:a7:8f:96:27:6e:
f2:7c:7a:a9:fb:d5:6b:6d:27:11:73:6a:55:1a:90:16:d6:39:
b2:37:44:ea:c6:38:26:8d:d9:15:db:58:48:65:c1:0e:de:35:
4d:95:a2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:26 2026 by rpki-client