Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/bJoUcVZjNVPjCjUlI2KaBxy6p6k.roa
File: bJoUcVZjNVPjCjUlI2KaBxy6p6k.roa (raw, json)
Hash identifier: ebBDlPRlXWyLq2KbuwNyF2wojOacfcKBKPPYOJJnz0M=
Subject key identifier: 6C:9A:14:71:56:63:35:53:E3:0A:35:25:23:62:9A:07:1C:BA:A7:A9
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 019F52EA21CA7C935223AC0DE8E77EB7F855
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/bJoUcVZjNVPjCjUlI2KaBxy6p6k.roa
Signing time: Sat 11 Jul 2026 20:41:43 +0000
ROA not before: Sat 11 Jul 2026 20:41:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 5.150.152.0/22 maxlen: 24
185.149.68.0/24 maxlen: 24
185.149.69.0/24 maxlen: 24
185.149.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:52:ea:21:ca:7c:93:52:23:ac:0d:e8:e7:7e:b7:f8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Jul 11 20:41:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c9a147156633553e30a352523629a071cbaa7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:45:0f:1f:84:6f:a0:3b:ef:f2:d6:9b:f5:23:
bb:37:d3:d1:4e:8a:6a:08:5d:ae:16:b5:25:1e:4a:
be:14:2d:3e:98:fa:6c:a6:3f:0e:c9:11:c7:75:ba:
a7:34:ce:aa:6f:da:1e:21:04:20:5e:c9:dd:81:c5:
81:1f:a0:bd:3e:27:85:89:08:67:5d:a4:92:4a:3a:
bf:66:76:7c:d6:40:2c:59:b5:8f:a8:32:8e:eb:1b:
f8:dd:06:8c:6f:7a:47:9c:47:53:4d:74:93:2a:c8:
94:12:6d:3a:ca:b5:e3:df:6d:e0:12:19:08:c6:44:
8a:2a:67:5b:37:0d:cc:41:74:87:e5:0c:da:b5:e8:
8c:6b:a4:1b:0f:a7:9b:ff:f7:3b:01:eb:4c:a7:0d:
0a:ff:59:0a:fd:67:03:e0:f2:e6:be:14:eb:d5:c9:
24:d4:08:88:11:67:ef:82:9e:cd:7b:5e:d4:bc:67:
41:f9:28:7a:71:4e:45:83:35:d8:14:e3:3e:f6:0b:
9c:5f:fb:f0:26:f2:8c:a7:e7:39:1c:31:1e:2a:ac:
26:d8:25:bb:6e:ca:5c:24:19:06:96:d8:e6:b8:77:
bf:5f:e6:74:6b:93:a8:85:4f:74:9b:8a:0f:53:c6:
b7:e7:b2:b2:58:fe:59:1a:d6:2c:87:3a:6c:05:08:
af:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9A:14:71:56:63:35:53:E3:0A:35:25:23:62:9A:07:1C:BA:A7:A9
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/bJoUcVZjNVPjCjUlI2KaBxy6p6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.152.0/22
185.149.68.0-185.149.70.255
Signature Algorithm: sha256WithRSAEncryption
7b:f5:ce:93:3a:fb:40:eb:15:4e:a6:28:1f:29:f9:74:3d:c1:
ba:36:c0:a2:4d:3e:2d:1a:8f:29:6d:85:02:87:b5:a5:f0:fb:
d6:4e:2e:88:c3:92:82:35:48:06:a6:81:ba:15:5b:0b:11:bb:
f1:df:b1:6f:55:a6:66:8b:8b:ac:2b:55:e5:0f:43:2a:ee:93:
d8:a8:d8:25:ff:f0:9b:07:86:14:ed:8e:55:63:ca:dc:b2:45:
35:63:17:80:09:ad:fc:b4:a0:4c:2f:78:6d:56:58:1b:f4:e8:
d6:37:71:00:07:4f:e1:ca:aa:96:ef:56:28:c1:ab:e1:63:3b:
d2:cc:cb:9b:9e:a8:55:a2:8a:04:13:85:a4:24:2c:6b:52:32:
9f:33:33:9f:b5:92:94:cc:c6:3a:29:4d:95:ee:90:bd:b3:16:
81:cc:39:fb:47:1d:5a:2e:8c:74:3c:ba:28:f5:41:b2:2f:57:
24:a8:56:d8:98:f0:e1:6d:21:b4:3a:e2:81:7d:59:3e:9d:bd:
8c:8b:c7:fb:f3:3f:46:f2:7a:9d:5f:fd:4a:d6:d8:c7:c3:ae:
e1:55:d6:1c:04:be:54:1f:a9:9f:cd:bc:a4:67:c2:fd:32:15:
45:18:e5:94:80:0c:0a:b6:2f:12:8c:f7:b4:cd:14:0c:94:39:
00:8a:8d:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 16 06:18:39 2026 by rpki-client