Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/r0W53v7TD2dG_YxMhYcnyXucKdw.roa
File: r0W53v7TD2dG_YxMhYcnyXucKdw.roa (raw, json)
Hash identifier: xal/kwYje76a7cjNJpHOwkNT7rtOZX9fc9uI+3BOyrw=
Subject key identifier: AF:45:B9:DE:FE:D3:0F:67:46:FD:8C:4C:85:87:27:C9:7B:9C:29:DC
Certificate issuer: /CN=f47e526458497c25d5dc3dc2f4a8374d4e44949d
Certificate serial: 019B7835401F9FF90B0B2D6C3D861B8BD9D4
Authority key identifier: F4:7E:52:64:58:49:7C:25:D5:DC:3D:C2:F4:A8:37:4D:4E:44:94:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/r0W53v7TD2dG_YxMhYcnyXucKdw.roa
Signing time: Thu 01 Jan 2026 06:18:34 +0000
ROA not before: Thu 01 Jan 2026 06:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212554
IP address blocks: 84.252.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:40:1f:9f:f9:0b:0b:2d:6c:3d:86:1b:8b:d9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47e526458497c25d5dc3dc2f4a8374d4e44949d
Validity
Not Before: Jan 1 06:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af45b9defed30f6746fd8c4c858727c97b9c29dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:18:c9:cc:65:a8:84:95:62:f8:c5:a1:a8:a7:
07:0d:eb:99:8c:64:61:b5:4a:02:32:79:8b:e5:bd:
a1:73:de:56:66:44:fc:84:e2:b6:e4:53:af:19:77:
a5:50:54:4a:da:e8:94:28:ae:9a:43:4e:45:a5:f8:
be:6c:bb:04:d8:83:b0:42:05:34:67:6c:d1:ef:0d:
dc:8f:4d:a9:6e:e5:0f:9e:b3:db:36:3f:6d:19:b7:
c6:ad:45:e5:42:aa:7f:92:5b:dc:e4:da:0f:6d:01:
7b:48:a8:2e:37:82:0c:4a:d2:dd:e7:c6:c2:0c:6a:
c0:96:ee:b3:e4:c4:f0:f3:77:37:28:b1:2a:17:9d:
e9:35:97:68:b0:79:81:e0:d8:74:57:ff:79:69:ac:
d6:ab:36:0e:f9:66:73:6f:18:32:dd:ae:f8:2b:3e:
aa:9f:0a:6d:59:87:af:f6:e9:7c:e6:b5:e6:3a:89:
0d:ac:cc:08:3b:22:ca:4e:4e:a7:32:86:c8:ab:74:
e1:3c:9e:10:c8:aa:51:86:0e:05:77:79:b9:ed:22:
4b:e4:4a:d1:02:38:18:e7:93:34:0c:2e:68:2d:ac:
f8:d8:2e:37:46:d0:04:35:97:02:72:df:e7:73:39:
27:97:11:b8:3b:0c:8e:49:d7:d1:fb:52:f0:76:6d:
8c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:45:B9:DE:FE:D3:0F:67:46:FD:8C:4C:85:87:27:C9:7B:9C:29:DC
X509v3 Authority Key Identifier:
keyid:F4:7E:52:64:58:49:7C:25:D5:DC:3D:C2:F4:A8:37:4D:4E:44:94:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/r0W53v7TD2dG_YxMhYcnyXucKdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.88.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:9c:bb:2e:45:27:28:74:2a:70:6e:42:63:67:69:07:48:b3:
44:ee:4b:44:5b:5c:96:84:93:0d:00:e9:59:50:ce:35:ec:31:
df:67:b0:d4:78:26:c3:0a:50:0f:01:df:81:03:67:f2:15:ea:
ef:1e:9e:5e:0e:2f:c9:5a:2c:31:dc:95:5a:8a:b3:f1:9d:8a:
ba:8b:e6:a1:c4:18:94:f8:fc:05:15:38:e3:ae:9b:43:88:e8:
3e:7e:7f:65:f8:a0:5f:80:3a:42:91:35:6b:f5:56:f4:b3:92:
c7:eb:a6:31:c9:5e:b1:60:27:54:03:57:6a:75:a3:4e:b3:f0:
ec:d5:9a:bf:d2:8e:61:ad:61:6c:84:e3:28:e5:3f:81:d9:a4:
ac:b3:6c:fe:22:14:0d:2e:e0:05:ad:84:76:93:01:b7:1c:3e:
8f:89:27:cd:da:fe:55:ae:2c:a5:0a:37:1c:7c:27:f3:db:48:
b8:93:d1:b8:d8:18:df:5e:15:f6:b7:70:9c:a4:28:f2:52:d9:
0a:a9:f0:9a:31:fd:90:d5:01:af:16:31:22:d4:e3:0b:1e:e0:
fc:6a:fa:00:fc:3a:77:ad:18:0d:b4:c0:c2:a0:fe:e0:ae:50:
e2:d9:6c:25:c7:be:70:1c:e5:3c:be:ab:a0:c4:01:cf:ba:41:
74:a4:b8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:08:04 2026 by rpki-client