Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vRrbfPY6AZbxnDhcKe0VlA4hb8Y.roa
File: vRrbfPY6AZbxnDhcKe0VlA4hb8Y.roa (raw, json)
Hash identifier: ckKgEJiMsXAbBtqxsBA12uGHdatKG4KxoX5Nb2sSAts=
Subject key identifier: BD:1A:DB:7C:F6:3A:01:96:F1:9C:38:5C:29:ED:15:94:0E:21:6F:C6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FC7391BE83D283B7ABCFA4085AC8B2457
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vRrbfPY6AZbxnDhcKe0VlA4hb8Y.roa
Signing time: Mon 03 Aug 2026 10:43:56 +0000
ROA not before: Mon 03 Aug 2026 10:43:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 5.253.66.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:39:1b:e8:3d:28:3b:7a:bc:fa:40:85:ac:8b:24:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 3 10:43:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd1adb7cf63a0196f19c385c29ed15940e216fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:0c:9e:eb:36:0a:76:b9:42:25:de:53:f1:
d1:fb:52:9f:c2:5b:6a:af:e5:f4:e4:70:a9:2e:a5:
11:29:92:cf:b3:57:c1:8d:8d:47:c4:69:b1:f1:04:
bb:80:b6:f1:0e:86:36:4b:46:40:e1:88:58:c4:66:
f4:1d:2b:04:fe:75:1b:a3:c5:ea:80:ee:fe:fb:c3:
1f:0b:ee:24:33:bb:a3:57:b6:22:20:a6:ac:44:fd:
97:2b:ab:06:ab:e1:bf:c0:46:cd:33:6f:2e:6a:b8:
5a:78:cf:75:4a:5d:30:c8:9e:a4:c4:f0:c5:65:3f:
90:56:4b:1e:3f:24:cb:e6:e0:06:02:4b:2f:23:4a:
42:f9:47:3c:6f:9e:67:3d:5d:ec:7a:f6:20:02:1f:
5d:98:6b:63:7b:e2:cd:96:24:f6:65:85:29:6a:97:
9e:fd:9e:40:f6:b6:1c:81:eb:9a:d1:0e:31:be:79:
a6:1d:4d:ce:ea:8a:84:59:70:b7:3f:e5:ff:b9:dc:
c5:84:63:e6:b6:ea:b9:18:0f:de:76:f2:ad:42:56:
58:fc:ee:45:20:54:81:e8:1c:a3:d7:60:0d:9a:63:
ac:b7:ff:f8:e6:d8:7e:bf:9c:eb:bf:a1:aa:e6:fc:
06:e6:b7:c4:4b:24:35:8a:62:2b:61:cb:49:b0:55:
88:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1A:DB:7C:F6:3A:01:96:F1:9C:38:5C:29:ED:15:94:0E:21:6F:C6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vRrbfPY6AZbxnDhcKe0VlA4hb8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.66.0/24
185.216.70.0/24
Signature Algorithm: sha256WithRSAEncryption
43:e9:db:6d:b8:2e:52:0e:ec:be:e1:33:88:31:4b:31:3c:a9:
6f:c9:76:c9:2a:4a:63:4d:8b:45:29:c3:6d:6d:23:4f:12:ff:
b6:83:e4:3e:ed:18:88:80:e1:35:71:05:67:a7:dd:5b:f6:ca:
7f:19:76:c0:72:ea:76:67:f6:57:b8:5f:23:32:7e:a8:b0:a7:
a8:f8:a0:10:cd:72:fd:d5:df:32:a1:d5:b3:32:b3:10:66:5d:
f8:cb:57:9d:e5:16:41:fb:f2:79:95:98:f9:2d:97:75:cb:0b:
62:82:9f:c3:46:73:e5:f8:42:c6:25:4d:a4:dd:c8:c0:31:d6:
5a:8d:85:75:bf:cc:27:2c:ac:81:3d:53:f9:4e:a5:da:a0:04:
93:21:87:da:18:8b:ea:73:62:ab:7d:b7:58:b2:6f:b1:fb:0e:
f2:5a:00:a2:d6:4b:fb:11:e3:63:59:3b:da:9c:bb:4e:7f:8b:
e8:48:f1:ea:02:df:5b:2b:2e:08:b9:08:c1:6a:68:df:78:f1:
55:d4:36:f9:11:70:b7:cd:bf:74:42:00:61:00:a6:bb:00:d1:
43:bd:52:ad:2c:2b:3c:1d:b4:86:49:ec:64:74:3b:80:73:92:
23:32:b5:aa:18:e2:95:b8:d0:2b:d6:d7:95:1e:f6:18:46:2c:
0a:20:00:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 15:43:55 2026 by rpki-client