Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/8PgHUKw1IXAQ4l3fsDFXldThghI.roa
File: 8PgHUKw1IXAQ4l3fsDFXldThghI.roa (raw, json)
Hash identifier: sSYNwwgyn1Pl2JR7lAYVd/FhLqR5V1Uk9kHqlU9/lW0=
Subject key identifier: F0:F8:07:50:AC:35:21:70:10:E2:5D:DF:B0:31:57:95:D4:E1:82:12
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019ECB7AF6D68149D45A9C84BEA280A046F3
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/8PgHUKw1IXAQ4l3fsDFXldThghI.roa
Signing time: Mon 15 Jun 2026 13:31:33 +0000
ROA not before: Mon 15 Jun 2026 13:31:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206340
IP address blocks: 153.51.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:7a:f6:d6:81:49:d4:5a:9c:84:be:a2:80:a0:46:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Jun 15 13:31:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0f80750ac35217010e25ddfb0315795d4e18212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:03:db:50:b5:b9:4d:d4:9c:e1:ee:bf:8a:
f2:54:70:02:28:11:c9:8e:ac:b1:64:21:b6:3e:ee:
5e:a2:31:8c:1d:bc:3a:d6:fa:ae:82:b5:a1:56:f7:
fc:49:25:95:b7:39:31:83:2b:59:66:69:10:87:57:
fa:45:59:a0:47:d2:9a:84:43:66:d2:04:37:51:6c:
8e:cb:9c:10:46:64:a1:74:35:27:e4:f3:07:ec:5d:
fb:43:97:63:84:d3:b8:57:6e:a3:70:14:b4:90:6f:
0a:50:28:c1:98:62:c6:36:02:e2:94:19:39:f9:eb:
24:22:e9:08:1d:20:5c:49:99:e9:f7:14:a3:a9:bb:
1b:a2:25:ba:a4:cf:23:e0:21:a7:d7:e2:ea:e5:f2:
56:8e:41:ea:4d:a8:97:ac:12:8f:61:92:5a:15:45:
8c:78:85:f4:7b:05:7d:c8:e0:13:80:17:64:06:87:
34:0a:54:05:88:13:65:0e:59:9d:7a:3d:87:a0:5e:
f8:a4:a6:9c:bb:81:4b:c7:c7:b9:9f:47:38:11:65:
31:84:5f:a1:aa:13:e0:62:6c:9f:f0:a0:3e:ab:6c:
5d:0c:9b:68:af:61:02:28:17:f9:a2:c9:1e:2f:3c:
e5:8e:16:c3:b1:5b:c8:b4:e5:35:55:b4:1b:8c:33:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F8:07:50:AC:35:21:70:10:E2:5D:DF:B0:31:57:95:D4:E1:82:12
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/8PgHUKw1IXAQ4l3fsDFXldThghI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.162.0/24
Signature Algorithm: sha256WithRSAEncryption
11:45:13:17:3e:27:31:d7:b4:b8:04:15:5c:3f:31:f6:c0:af:
f2:91:76:65:41:33:ed:fa:d1:97:49:2f:26:43:d7:7b:ea:18:
4b:80:9b:71:70:88:81:4f:18:fa:6c:28:b4:82:21:e2:dc:f8:
04:92:b1:ec:70:ef:09:d9:c4:29:47:35:8f:d9:4d:2a:9f:c9:
ba:26:d3:55:ec:4c:60:05:a6:bb:d1:52:67:1d:b1:1e:73:d2:
34:6d:21:f5:4b:a7:fc:d0:83:4f:38:9d:82:0b:7a:68:5c:06:
cd:c9:04:95:d0:bc:b1:c6:80:7a:20:b7:c8:c9:32:ed:f0:4a:
cb:84:ca:42:6d:8a:ba:06:2f:b2:32:6d:a4:f6:92:ed:ab:24:
dd:60:fd:9e:0f:d2:6a:18:b5:4b:a3:bd:69:a9:97:03:f0:03:
32:55:90:f5:97:d6:f0:c1:b6:cd:e3:fe:e2:ae:63:87:bc:65:
36:98:42:ba:c8:79:c6:03:38:e6:5d:2c:d1:d1:ac:fa:ff:7d:
3c:a6:c0:58:39:3b:72:8b:bc:4c:7e:de:1b:8b:f2:67:ca:a8:
13:d5:b7:83:9e:af:fd:a0:e1:ba:76:80:de:8b:73:18:53:0c:
7b:cc:b3:d6:32:6e:cd:a0:e5:1d:76:6c:cd:cb:50:06:ce:01:
34:fd:cf:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:11:36 2026 by rpki-client