Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/v0mNpbcbj7PjoyxWiWPtV76PVIw.roa
File: v0mNpbcbj7PjoyxWiWPtV76PVIw.roa (raw, json)
Hash identifier: KSt6gZR31xbwnBxfk2quHntFt2V417a+6qM1Jg/Dr6c=
Subject key identifier: BF:49:8D:A5:B7:1B:8F:B3:E3:A3:2C:56:89:63:ED:57:BE:8F:54:8C
Certificate issuer: /CN=a63b07ebd3747e600f8c264d9792de344f8aa7ad
Certificate serial: 019F1D0D603C7C3DE90BDCD1E8D7B9E4FBBF
Authority key identifier: A6:3B:07:EB:D3:74:7E:60:0F:8C:26:4D:97:92:DE:34:4F:8A:A7:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/v0mNpbcbj7PjoyxWiWPtV76PVIw.roa
Signing time: Wed 01 Jul 2026 09:40:43 +0000
ROA not before: Wed 01 Jul 2026 09:40:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201043
IP address blocks: 2.152.69.0/24 maxlen: 24
2.152.70.0/23 maxlen: 23
2a10:7987:8100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:0d:60:3c:7c:3d:e9:0b:dc:d1:e8:d7:b9:e4:fb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63b07ebd3747e600f8c264d9792de344f8aa7ad
Validity
Not Before: Jul 1 09:40:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf498da5b71b8fb3e3a32c568963ed57be8f548c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:d2:25:ae:1b:a9:25:59:4f:0f:01:51:c4:
81:59:dc:33:ca:7a:5d:75:e6:ff:98:fd:9a:4b:fa:
e9:94:5c:26:1c:5c:dd:f8:6d:83:ba:a5:48:22:5c:
86:31:48:15:c4:74:d6:ae:fc:7c:22:db:06:e7:e9:
b8:7c:d3:9b:50:8b:68:8d:b5:73:d1:3b:09:a7:6e:
b0:3b:6e:8a:7e:e3:87:83:9e:99:74:0a:80:4d:83:
65:89:61:40:59:cf:0c:59:38:d4:49:f2:be:17:93:
34:af:61:1c:14:4b:ff:72:96:9f:ab:36:e3:85:13:
6d:de:42:c0:a4:96:6a:29:28:07:17:cb:34:30:ed:
13:5e:f7:9d:12:98:fd:45:85:a5:56:68:cd:65:b0:
28:42:8c:ef:df:b8:87:1a:e0:52:fe:95:3d:6e:13:
49:a9:c2:9b:08:ca:5f:80:1d:20:4b:0c:77:92:43:
dd:64:06:33:d6:38:80:bd:f1:e3:fc:cc:54:f6:dd:
95:51:55:64:4f:48:46:01:48:8d:8f:66:03:3d:11:
4e:34:67:b2:ba:2d:9f:23:08:a0:04:c8:fc:5d:3c:
76:1e:05:41:15:7b:7f:79:4b:0e:f5:a9:aa:69:0f:
aa:53:24:da:20:91:77:23:5e:8c:98:4b:49:3e:c1:
7e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:49:8D:A5:B7:1B:8F:B3:E3:A3:2C:56:89:63:ED:57:BE:8F:54:8C
X509v3 Authority Key Identifier:
keyid:A6:3B:07:EB:D3:74:7E:60:0F:8C:26:4D:97:92:DE:34:4F:8A:A7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/v0mNpbcbj7PjoyxWiWPtV76PVIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.152.69.0-2.152.71.255
IPv6:
2a10:7987:8100::/40
Signature Algorithm: sha256WithRSAEncryption
92:6d:b7:7b:f7:0a:f9:fa:73:70:14:77:dd:fb:95:0e:22:66:
ff:1b:46:7b:71:5d:8d:ef:79:d6:6b:91:db:19:79:c0:93:a9:
41:7c:c2:f8:b0:32:66:2b:e0:a2:5c:b2:95:06:05:a7:fc:a4:
bf:f8:62:8c:bf:72:50:12:70:00:c4:ff:29:60:3c:20:ca:98:
91:1a:70:07:e6:aa:a9:23:ee:d6:f3:a3:09:5e:c2:43:12:71:
56:d3:85:7e:43:fb:cd:24:52:dc:62:7d:92:9d:99:84:8d:69:
1c:9c:2a:47:79:2f:0d:ae:31:23:17:4d:00:f7:a8:57:72:7d:
87:2a:4c:38:11:71:e4:88:ac:66:ce:7a:ab:ca:c8:81:42:49:
5d:a2:ff:21:b9:7b:4a:fd:38:d6:5b:1e:96:df:96:fb:41:49:
1f:ac:d9:2f:dc:09:0e:d9:7c:43:1e:f0:44:46:c3:b8:1c:f0:
6b:6e:c1:98:06:41:f0:8f:09:e3:8c:f8:0f:57:ad:27:c9:dd:
67:6e:8c:e4:23:61:70:2d:51:b8:e6:e7:83:ce:89:aa:ad:00:
68:eb:74:78:e3:59:77:48:68:18:54:af:fd:4a:99:fe:7c:65:
93:24:1f:82:15:1d:3b:b1:57:c3:7a:f1:ce:f7:92:4b:88:c4:
87:38:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:34 2026 by rpki-client