Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/69b041-b752-482e-ba25-986dbcc7e364/1/b0eULW524rwjof0wjVz0Ni8tmeY.roa
File: b0eULW524rwjof0wjVz0Ni8tmeY.roa (raw, json)
Hash identifier: SgY9hmoB2mUvS85rDXaHAm9BmHh1T9kvU5od3UCFLzU=
Subject key identifier: 6F:47:94:2D:6E:76:E2:BC:23:A1:FD:30:8D:5C:F4:36:2F:2D:99:E6
Certificate issuer: /CN=5481f9152f860833a033f3ccd14bba163ce033d0
Certificate serial: 019D1B2C435E8F9747A3001BD9759907C862
Authority key identifier: 54:81:F9:15:2F:86:08:33:A0:33:F3:CC:D1:4B:BA:16:3C:E0:33:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIH5FS-GCDOgM_PM0Uu6FjzgM9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/69b041-b752-482e-ba25-986dbcc7e364/1/b0eULW524rwjof0wjVz0Ni8tmeY.roa
Signing time: Mon 23 Mar 2026 14:49:38 +0000
ROA not before: Mon 23 Mar 2026 14:49:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203969
IP address blocks: 185.110.152.0/22 maxlen: 22
185.110.154.0/24 maxlen: 24
185.110.155.0/24 maxlen: 24
2a06:5880:dd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/69b041-b752-482e-ba25-986dbcc7e364/1/VIH5FS-GCDOgM_PM0Uu6FjzgM9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/69b041-b752-482e-ba25-986dbcc7e364/1/VIH5FS-GCDOgM_PM0Uu6FjzgM9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIH5FS-GCDOgM_PM0Uu6FjzgM9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:2c:43:5e:8f:97:47:a3:00:1b:d9:75:99:07:c8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5481f9152f860833a033f3ccd14bba163ce033d0
Validity
Not Before: Mar 23 14:49:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f47942d6e76e2bc23a1fd308d5cf4362f2d99e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1d:18:fd:7a:f5:ec:04:fe:5f:58:be:e7:6b:
5b:61:94:61:be:0e:7b:e0:14:16:ac:16:05:de:0c:
fd:b6:06:7a:09:0d:06:18:ad:de:74:e7:97:7b:40:
1a:aa:11:19:b1:ce:b2:86:05:61:72:0c:10:d5:39:
20:7d:b8:f8:95:e5:6b:6e:01:ec:30:86:dc:15:fd:
fe:cd:56:76:73:cb:61:ac:cf:4c:84:17:64:16:9f:
80:92:01:8b:5f:2e:05:30:8b:ea:2a:50:fc:cd:d6:
2f:f8:d4:9e:5b:c7:a7:e6:87:bf:2e:ee:a3:e2:6f:
50:a7:d5:93:74:68:49:97:34:68:57:f1:5c:1f:27:
80:0d:82:6e:1a:4d:64:02:33:f4:0f:c4:26:e1:36:
3d:e4:93:72:ad:75:99:ba:d5:65:09:bb:79:c0:fd:
4b:84:c3:f2:59:f8:6a:12:3f:17:03:ec:a8:25:da:
cc:bb:1e:e5:ae:0f:36:ac:1b:fa:1b:4b:2f:0b:21:
b8:e3:47:01:e6:7d:0d:7d:57:34:75:8f:66:40:9c:
9b:9d:c5:2f:05:b4:49:fc:b2:df:70:c4:f5:46:26:
5c:3b:35:d1:48:32:cb:21:ed:15:5f:a4:c1:57:2a:
ed:04:ac:ad:09:46:e6:fe:aa:8c:2f:5f:ac:5c:44:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:47:94:2D:6E:76:E2:BC:23:A1:FD:30:8D:5C:F4:36:2F:2D:99:E6
X509v3 Authority Key Identifier:
keyid:54:81:F9:15:2F:86:08:33:A0:33:F3:CC:D1:4B:BA:16:3C:E0:33:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIH5FS-GCDOgM_PM0Uu6FjzgM9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/69b041-b752-482e-ba25-986dbcc7e364/1/b0eULW524rwjof0wjVz0Ni8tmeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/69b041-b752-482e-ba25-986dbcc7e364/1/VIH5FS-GCDOgM_PM0Uu6FjzgM9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.152.0/22
IPv6:
2a06:5880:dd::/48
Signature Algorithm: sha256WithRSAEncryption
7b:92:4d:86:36:8a:17:59:e8:6d:24:34:af:8a:a0:1d:5f:19:
de:90:e0:87:fb:f5:7c:d6:cb:61:af:e4:57:ba:c1:b3:78:27:
c3:10:43:9a:16:57:46:ba:59:03:7f:eb:61:dc:66:24:d3:c7:
82:2b:07:86:57:db:55:6e:02:e4:c8:c9:5b:48:fe:c6:bf:92:
6f:0e:64:da:50:bb:7e:46:31:0d:7f:5a:9d:6b:34:fd:4a:c7:
32:79:ef:54:5f:77:ce:46:60:4e:e4:14:7f:cb:d9:0d:d5:a7:
39:0d:62:49:fc:22:6b:ea:7c:7e:b0:d9:45:cb:da:5d:a8:28:
fb:42:4f:94:f0:cd:62:67:45:88:ac:14:d2:ba:f9:c5:b6:77:
89:bf:44:b8:ba:e7:13:56:c0:d9:f7:ba:a8:5a:a7:b5:6b:b6:
5f:ca:95:a1:de:1b:0b:03:dc:eb:ba:ae:8e:eb:1a:b2:e8:d2:
9e:71:b0:b7:3a:56:74:eb:71:c3:cc:1f:f6:17:c6:fd:cb:ee:
20:6f:c2:5e:6a:3b:5f:2c:fb:a9:2d:29:49:ef:19:33:dc:16:
97:69:10:4c:30:aa:2a:ae:8e:39:bc:2e:e6:ec:ed:4c:4a:e5:
d3:6e:4a:62:5b:56:72:92:fd:a2:a2:9d:c5:36:d6:2c:37:8e:
82:2a:4c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:25:16 2026 by rpki-client