Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/8B-p0w7Z7j0dOO6u8yPFRmJC2eI.roa
File: 8B-p0w7Z7j0dOO6u8yPFRmJC2eI.roa (raw, json)
Hash identifier: 6voDi7M4n7VVEn89oNd75Yj/U+JyFcJrtu+YtLFQn9I=
Subject key identifier: F0:1F:A9:D3:0E:D9:EE:3D:1D:38:EE:AE:F3:23:C5:46:62:42:D9:E2
Certificate issuer: /CN=2494f51a3b17ee8fffc2bcc5cfb236a2c06d3014
Certificate serial: 019F2368670F60172067D1BD4E1C870F5035
Authority key identifier: 24:94:F5:1A:3B:17:EE:8F:FF:C2:BC:C5:CF:B2:36:A2:C0:6D:30:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJT1GjsX7o__wrzFz7I2osBtMBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/8B-p0w7Z7j0dOO6u8yPFRmJC2eI.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21263
IP address blocks: 5.154.177.0/24 maxlen: 24
5.154.178.0/24 maxlen: 24
178.157.88.0/23 maxlen: 24
185.16.72.0/22 maxlen: 24
2a0e:1d00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/JJT1GjsX7o__wrzFz7I2osBtMBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/JJT1GjsX7o__wrzFz7I2osBtMBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJT1GjsX7o__wrzFz7I2osBtMBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:67:0f:60:17:20:67:d1:bd:4e:1c:87:0f:50:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2494f51a3b17ee8fffc2bcc5cfb236a2c06d3014
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f01fa9d30ed9ee3d1d38eeaef323c5466242d9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:d0:40:d3:0f:54:86:b8:ed:ba:91:0c:8c:
8a:8b:75:11:53:75:e7:41:0f:2c:f4:e4:8f:37:57:
9a:54:91:44:1c:23:2a:b4:ef:10:3d:a8:22:cb:b0:
5b:e6:8d:18:0b:09:b4:6d:f0:b8:90:b1:0c:b1:31:
49:33:9a:4c:f3:a4:20:b9:60:d9:e8:8e:c0:49:88:
87:19:3e:0e:03:f9:45:dd:5c:a4:75:91:bb:f5:99:
61:fe:29:a6:d7:28:09:46:84:69:73:64:5d:31:7d:
b4:56:6a:7c:e0:eb:c5:42:ec:5d:b3:c2:32:f8:29:
ca:11:07:f8:27:82:a8:2f:96:fc:f2:e6:89:b5:a6:
bb:ee:77:3d:35:76:fc:76:52:44:5b:95:a8:a3:f3:
85:7d:3e:21:0e:94:62:be:22:9c:a6:6d:5f:db:1c:
48:39:60:6e:3c:eb:98:25:9c:f3:89:5a:21:de:0b:
c6:23:65:20:6a:93:0f:b7:8d:40:50:73:76:5e:40:
15:e6:7d:55:69:99:de:ce:ee:10:19:a4:5f:95:6e:
73:8e:00:89:36:0d:0f:62:c2:6e:bf:2d:cd:48:63:
10:a1:77:f4:e1:5c:08:c0:40:fe:34:cd:68:19:df:
93:ab:cb:54:d1:98:c7:01:ff:ee:f8:24:6d:26:72:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1F:A9:D3:0E:D9:EE:3D:1D:38:EE:AE:F3:23:C5:46:62:42:D9:E2
X509v3 Authority Key Identifier:
keyid:24:94:F5:1A:3B:17:EE:8F:FF:C2:BC:C5:CF:B2:36:A2:C0:6D:30:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJT1GjsX7o__wrzFz7I2osBtMBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/8B-p0w7Z7j0dOO6u8yPFRmJC2eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/JJT1GjsX7o__wrzFz7I2osBtMBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.177.0-5.154.178.255
178.157.88.0/23
185.16.72.0/22
IPv6:
2a0e:1d00::/32
Signature Algorithm: sha256WithRSAEncryption
44:b6:3f:30:73:0a:7e:bf:52:47:32:08:fb:83:d0:00:16:61:
ce:1b:47:8d:9e:77:f2:13:04:d3:4c:04:17:b7:d4:2a:33:e3:
72:ab:f8:57:40:ef:c6:cb:ce:80:85:ce:cf:cf:73:f0:8c:83:
74:bc:18:de:67:c5:8b:f3:ad:bc:31:11:8c:93:58:b7:5f:dd:
dd:d2:4e:f2:9c:38:34:9a:f7:e2:a1:39:7d:42:6b:f3:55:41:
89:2a:67:f3:35:ba:ec:d4:48:83:7b:56:54:53:4f:c6:3f:11:
df:c4:a3:4b:7a:31:51:72:ea:ac:30:1d:59:85:58:eb:25:4e:
4c:b6:6b:22:46:b3:8f:02:e4:09:2f:f9:1a:49:8f:fb:ef:2e:
aa:b5:3f:10:01:42:bb:8f:e8:25:99:4a:1d:58:59:92:5c:2a:
4a:46:54:60:5e:e2:bb:86:aa:58:f1:d9:af:d0:ce:1f:dd:c1:
7d:13:60:bf:a0:14:96:83:46:ec:67:2b:d4:69:79:c8:31:b1:
34:22:f0:e3:28:32:f2:41:cc:cc:55:55:0f:e0:2d:a7:fa:da:
28:ee:34:48:20:86:ac:a7:5d:ac:44:75:ba:e5:b2:1c:0a:39:
d3:3d:e5:5f:f9:c3:cb:a9:77:6f:27:1d:69:95:c9:1d:b3:ca:
26:16:e4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:04 2026 by rpki-client