Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/51pmhH6W4AK3WWsnVVnIrOwxdRQ.roa
File: 51pmhH6W4AK3WWsnVVnIrOwxdRQ.roa (raw, json)
Hash identifier: gyQzGLPGiPYb0c+BL3lvQWYvsv/NVK56hFx0AgBgsYY=
Subject key identifier: E7:5A:66:84:7E:96:E0:02:B7:59:6B:27:55:59:C8:AC:EC:31:75:14
Certificate issuer: /CN=0417713963d797cab19c2a972a37556abae3775d
Certificate serial: 019C634B1CF5BB18178A7B26CBEC560EF85D
Authority key identifier: 04:17:71:39:63:D7:97:CA:B1:9C:2A:97:2A:37:55:6A:BA:E3:77:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBdxOWPXl8qxnCqXKjdVarrjd10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/51pmhH6W4AK3WWsnVVnIrOwxdRQ.roa
Signing time: Sun 15 Feb 2026 21:53:12 +0000
ROA not before: Sun 15 Feb 2026 21:53:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204951
IP address blocks: 185.225.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBdxOWPXl8qxnCqXKjdVarrjd10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:63:4b:1c:f5:bb:18:17:8a:7b:26:cb:ec:56:0e:f8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0417713963d797cab19c2a972a37556abae3775d
Validity
Not Before: Feb 15 21:53:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e75a66847e96e002b7596b275559c8acec317514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:7d:df:5a:9a:6c:04:f4:ae:8b:33:38:e9:
c6:2a:8b:50:5e:5a:0c:fd:a7:68:c0:81:f6:28:5e:
f6:36:55:bc:fb:76:f0:6f:e0:9e:15:10:1e:7b:a4:
af:4b:91:24:2b:40:32:3a:96:7a:f1:fb:dd:9b:92:
aa:36:3c:26:f0:f6:ea:0a:7d:b5:6d:2d:31:ed:41:
77:7f:fb:64:a4:65:f2:de:6a:92:86:d3:2d:cd:59:
42:62:dc:f3:e7:a1:05:96:9c:ab:b1:5d:45:03:9e:
1d:15:ed:c7:d1:71:2b:55:68:75:11:f0:14:06:48:
24:38:14:8e:58:eb:32:08:83:89:3e:ad:f0:cd:02:
c9:90:81:0e:87:58:fd:03:4b:27:b4:95:ec:8e:e3:
34:11:80:6b:b7:17:b7:e6:77:d2:f7:f6:b0:c1:77:
25:ec:c4:e3:01:93:c5:30:e1:a0:88:0f:7f:53:93:
1e:15:35:ef:9a:eb:a0:21:f9:d7:bb:16:70:30:09:
a4:9a:1a:5d:6f:9e:88:0c:78:b2:27:e7:dc:24:59:
b4:d3:10:33:7e:2e:36:78:73:38:7d:18:7e:7c:63:
a7:87:c6:3e:4b:08:ac:76:12:ef:e4:0b:32:f3:eb:
8e:72:de:8a:d5:bc:f3:1f:76:04:d4:1c:7e:33:07:
5f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5A:66:84:7E:96:E0:02:B7:59:6B:27:55:59:C8:AC:EC:31:75:14
X509v3 Authority Key Identifier:
keyid:04:17:71:39:63:D7:97:CA:B1:9C:2A:97:2A:37:55:6A:BA:E3:77:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBdxOWPXl8qxnCqXKjdVarrjd10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/51pmhH6W4AK3WWsnVVnIrOwxdRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dd69cb-7628-4ae5-b422-84df94665c92/1/BBdxOWPXl8qxnCqXKjdVarrjd10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.160.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:13:1d:19:ea:2a:89:df:28:da:d6:88:f8:3c:fa:ad:63:47:
7f:e8:cb:93:ea:7a:55:9c:df:0c:83:ba:53:7b:e4:a0:81:68:
00:5a:48:ea:da:6a:ba:d8:be:e0:de:97:6a:fb:e5:ff:10:f3:
fa:4a:3b:6d:c2:61:64:db:ab:45:41:25:81:67:84:eb:be:52:
e6:4e:c1:a9:f7:1c:b9:04:e4:be:39:d7:65:ef:25:8a:a0:e5:
4f:8b:aa:ce:68:38:5e:fe:10:36:56:8e:4d:ec:dd:69:fb:d4:
e6:5d:d0:47:0f:cc:57:36:65:59:7b:3c:ad:c0:a5:0b:15:7b:
e3:d0:03:56:ae:9a:a6:c8:d2:8c:56:62:20:a2:67:55:23:ab:
21:ee:55:e5:88:f4:57:3d:83:f3:13:d8:98:f2:f4:6b:f2:a6:
e0:4a:72:2b:fd:a0:d9:ae:09:dd:82:fe:57:30:40:be:68:29:
41:b7:c6:b5:5a:02:4a:5f:8c:4a:1e:8a:a2:04:d5:fc:16:25:
80:29:ef:90:9c:21:86:5d:1c:58:9b:b5:95:86:f1:68:74:dc:
16:1c:80:fd:2f:68:17:fc:88:3a:c3:99:7d:0f:66:20:83:c2:
83:80:ba:c3:ea:81:aa:f6:2f:e5:a9:d9:cf:6c:60:99:b4:cf:
79:03:04:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:26:03 2026 by rpki-client