Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/1-L9_xn5XwFHg99yogQ5P-JRQJno.roa
File: 1-L9_xn5XwFHg99yogQ5P-JRQJno.roa (raw, json)
Hash identifier: saknG4EeimO2uKEX00r/busJjcraxx17Sa52KQHrOss=
Subject key identifier: F8:BF:7F:C6:7E:57:C0:51:E0:F7:DC:A8:81:0E:4F:F8:94:50:26:7A
Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Certificate serial: 019F236847FAC40F45465F42C22C9D7DE315
Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/1-L9_xn5XwFHg99yogQ5P-JRQJno.roa
Signing time: Thu 02 Jul 2026 15:17:44 +0000
ROA not before: Thu 02 Jul 2026 15:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48925
IP address blocks: 86.110.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 03:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:47:fa:c4:0f:45:46:5f:42:c2:2c:9d:7d:e3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Validity
Not Before: Jul 2 15:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8bf7fc67e57c051e0f7dca8810e4ff89450267a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2b:39:fc:66:0c:94:b9:d2:a3:40:db:2a:a2:
e1:1d:97:74:e1:6c:3f:97:7b:48:d1:d7:a5:01:6d:
c3:3f:dd:8b:0f:cf:30:3e:92:81:43:ba:07:53:a8:
29:63:fb:02:51:d2:a7:79:e4:34:bb:cb:70:c6:cf:
c3:e6:26:d3:1c:1d:c7:4f:34:83:78:be:dd:fc:01:
5c:d6:39:b8:2f:66:b8:1c:c7:84:3d:f2:d5:2c:89:
7d:c6:a8:ed:70:a6:f8:24:84:f9:02:36:5b:a0:e2:
9d:b1:d7:99:70:f7:e2:a7:e1:4a:b3:7f:55:09:bc:
86:04:bc:90:17:35:d3:0c:26:65:2f:96:48:4b:1e:
14:cc:82:1b:fb:4f:ca:1f:e2:7d:ae:7b:2a:b6:91:
b3:05:f1:e2:2f:3f:0d:dc:3c:48:5c:9c:20:20:73:
a6:24:36:10:af:63:5e:f4:e0:c0:e5:9a:97:42:ac:
bd:85:6b:21:4f:0e:df:c8:a3:c1:db:f1:d4:f0:e3:
4d:51:1e:07:de:e3:a8:33:1f:87:dc:5e:43:22:a4:
e0:a7:ce:5b:fb:73:aa:57:36:61:8c:da:da:84:d7:
0f:ad:07:15:6f:7c:65:57:f2:ac:ed:10:ce:03:bf:
4d:c6:2c:5d:53:0b:1e:12:7f:cb:ea:38:07:19:27:
70:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BF:7F:C6:7E:57:C0:51:E0:F7:DC:A8:81:0E:4F:F8:94:50:26:7A
X509v3 Authority Key Identifier:
keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/1-L9_xn5XwFHg99yogQ5P-JRQJno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.53.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ae:72:b5:f4:99:f1:6d:3a:a2:8b:02:42:fd:4b:f1:a7:04:
ce:c1:08:dd:6c:52:0f:89:60:02:00:42:5d:9c:98:0d:62:19:
e3:4d:6d:a7:48:55:86:6d:81:a2:90:97:c2:3d:2d:c5:ef:de:
1b:d7:2f:5b:43:97:a7:6f:ad:27:8a:3e:d6:73:32:42:1e:ab:
43:c1:a1:6b:11:ce:b7:f1:8e:ce:2c:f3:b6:c5:91:da:a8:15:
5e:7a:1e:36:29:78:08:60:f5:4a:e5:f1:e3:e1:8b:ed:26:22:
e2:f2:99:3e:0e:24:18:43:dd:bb:98:29:16:5a:f6:d3:6c:2e:
fe:af:84:78:c0:86:54:eb:58:bb:05:ab:5f:9b:98:d8:a0:ca:
92:c6:c2:db:24:b6:ed:6a:0d:46:6e:5e:0c:75:6d:47:91:fe:
a4:14:fb:f8:45:87:c1:ea:42:64:82:97:02:54:18:e1:b1:a7:
9f:2f:be:bf:5d:9f:24:1a:04:35:30:f3:8f:e3:f5:47:98:f9:
cb:74:83:bd:ef:ad:72:1f:a1:9e:3f:f3:75:d9:be:1d:11:ea:
fe:14:5c:79:82:88:01:33:f2:cb:de:8a:9d:e6:87:96:85:ce:
24:11:c6:c1:9c:e1:ea:b0:80:2b:02:ef:12:b9:6c:88:3f:41:
fe:a5:45:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 09:19:36 2026 by rpki-client