Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/MYsrDD6_ix1Rtx9ae202FMZQt2A.roa
File: MYsrDD6_ix1Rtx9ae202FMZQt2A.roa (raw, json)
Hash identifier: wCa+FoC6lGoUEm8DzIyrEb7XOMkaGI8fNWlKnMyKjIk=
Subject key identifier: 31:8B:2B:0C:3E:BF:8B:1D:51:B7:1F:5A:7B:6D:36:14:C6:50:B7:60
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 019F8ACD8B7BCA041E0E729EA5127A3CD065
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/MYsrDD6_ix1Rtx9ae202FMZQt2A.roa
Signing time: Wed 22 Jul 2026 17:09:14 +0000
ROA not before: Wed 22 Jul 2026 17:09:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.158.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:cd:8b:7b:ca:04:1e:0e:72:9e:a5:12:7a:3c:d0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Jul 22 17:09:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=318b2b0c3ebf8b1d51b71f5a7b6d3614c650b760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ac:8e:70:42:ec:2a:e8:c4:58:7c:66:67:e2:
92:58:b6:1a:b0:c1:02:8e:ad:9c:7d:37:16:3d:26:
a3:a6:22:2c:01:b3:ee:1d:42:71:a8:3b:bb:85:b2:
6a:d4:d8:83:8f:7e:eb:fa:9b:f1:54:4a:51:3c:bb:
e7:f2:f3:a4:e8:43:48:e2:1c:6b:f7:4f:0f:cd:36:
f1:d1:79:ae:bb:d8:d0:50:46:be:aa:82:31:f0:89:
29:a5:d0:e2:85:bc:a4:e1:98:01:68:ed:7a:5f:ab:
ab:bf:c8:df:d8:92:1b:8a:a0:df:84:b1:0f:7c:a7:
ab:4e:fd:55:50:53:8a:84:9a:57:9c:11:b5:57:82:
b1:0a:3c:8e:61:7d:f4:33:7c:4a:19:3a:85:3e:ff:
6a:a2:71:b1:cf:84:40:55:44:1e:1f:05:31:fd:71:
fe:40:ee:ef:8f:fb:ec:be:2b:fc:e4:04:96:8d:e7:
56:0a:b3:8b:73:e9:36:48:ab:7e:28:01:a0:88:d9:
8c:fe:9d:7e:a5:37:7e:7b:5c:78:0c:16:66:ee:18:
da:88:85:53:9a:5a:55:36:87:82:55:23:2e:da:fd:
d2:83:3f:1b:7b:86:4f:2e:74:c6:93:0a:18:bb:4e:
54:f8:75:be:ba:8b:ba:9d:23:5c:56:5b:59:76:c0:
e4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8B:2B:0C:3E:BF:8B:1D:51:B7:1F:5A:7B:6D:36:14:C6:50:B7:60
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/MYsrDD6_ix1Rtx9ae202FMZQt2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.62.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:87:d7:d2:89:1e:b4:af:00:bf:e4:a2:f9:07:9a:ee:29:06:
2e:53:b1:02:9e:1b:28:23:78:97:0e:b4:ed:b0:fc:16:f5:f7:
89:e4:ea:97:c7:8b:58:27:2c:de:d5:43:a9:77:3b:d9:44:c0:
73:64:e7:2d:34:59:e5:fe:36:48:69:f2:44:13:de:b6:1c:aa:
aa:a2:97:29:1a:36:3e:54:0c:ab:e4:80:a2:a0:41:c5:da:7a:
2c:85:da:5f:38:15:f5:54:d4:a7:d0:29:fa:2f:6d:43:f6:ee:
84:75:01:7c:7b:ce:88:e7:2f:7e:73:e3:0b:ba:c4:a5:bc:ff:
a7:38:78:7c:28:19:9b:ca:d7:40:14:85:5f:b1:e9:67:c7:a3:
22:83:23:6b:f3:e0:3e:c2:30:49:ac:22:69:61:c6:d4:93:35:
a1:af:e5:2f:2e:ef:6a:3b:f1:2f:43:ee:73:af:02:59:d3:af:
5b:1c:59:c2:1e:1c:72:5b:c4:67:82:7e:fc:7a:6e:f3:d0:0d:
1f:93:80:5e:e5:5a:fc:0c:1b:7f:88:e4:64:5e:00:8a:57:db:
a5:40:a9:ac:77:63:8f:b9:ce:72:18:3f:ca:ec:ef:ea:a9:48:
88:d2:df:77:c7:0b:00:06:69:b1:c9:ac:92:17:53:50:3a:1b:
72:c7:e4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:16:01 2026 by rpki-client