Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/FLjvYn5Mu6OSQ1vmJsficIZ3oAg.roa
File: FLjvYn5Mu6OSQ1vmJsficIZ3oAg.roa (raw, json)
Hash identifier: WAKAnnjMgQbJs7Wfu2NA1DQe3FG0M4jG7s2jCVV8t08=
Subject key identifier: 14:B8:EF:62:7E:4C:BB:A3:92:43:5B:E6:26:C7:E2:70:86:77:A0:08
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019EA156F0FFE216A469A8C9988FF92191FC
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/FLjvYn5Mu6OSQ1vmJsficIZ3oAg.roa
Signing time: Sun 07 Jun 2026 09:08:10 +0000
ROA not before: Sun 07 Jun 2026 09:08:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48281
IP address blocks: 185.126.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a1:56:f0:ff:e2:16:a4:69:a8:c9:98:8f:f9:21:91:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jun 7 09:08:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14b8ef627e4cbba392435be626c7e2708677a008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:7a:61:a7:fe:10:2a:50:b1:99:2f:7d:63:
aa:6d:b3:fb:19:d4:c1:86:12:58:89:a8:e8:0f:4f:
48:27:aa:a8:2a:8b:9b:ee:2b:36:1b:60:6a:73:9c:
70:f6:87:57:eb:53:1f:8a:35:b0:f5:74:be:fb:1d:
f8:2b:8c:d3:38:65:95:c2:6d:a9:2a:69:37:8a:da:
8b:3b:34:72:96:78:59:68:75:ec:c6:67:35:b5:9a:
64:6a:0f:f2:7a:bb:63:b9:53:47:48:bd:2b:eb:c3:
8c:3e:71:bb:ad:62:96:43:a0:4f:1e:08:90:b9:fc:
db:17:c3:90:32:71:79:d9:b4:1a:7a:5f:43:cc:eb:
e1:01:e6:67:f3:0f:1d:26:c1:89:ac:0d:46:2c:98:
62:72:c3:79:4e:27:dc:2a:7c:c5:a2:a5:19:f8:11:
85:e8:d4:be:37:71:c2:a6:38:18:ab:3c:bc:3d:73:
e0:45:5e:ba:91:24:53:d2:b7:a0:51:64:64:54:76:
f7:9b:94:f4:cf:7f:63:ed:77:c5:8b:56:f2:7f:f4:
b9:8b:02:64:d9:48:6f:7f:eb:63:43:fb:3a:a4:e2:
f7:9d:9c:d2:e3:5e:69:32:1b:2c:27:b0:a5:d1:18:
7c:3c:f0:13:80:da:11:5f:cc:39:f0:64:21:49:cc:
69:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B8:EF:62:7E:4C:BB:A3:92:43:5B:E6:26:C7:E2:70:86:77:A0:08
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/FLjvYn5Mu6OSQ1vmJsficIZ3oAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.132.0/23
Signature Algorithm: sha256WithRSAEncryption
60:ca:dd:d4:c2:7c:22:bf:89:32:97:f0:b4:e6:54:d4:d4:4b:
b0:ba:e6:6a:ae:36:b0:b1:8e:af:71:f2:db:00:5b:6f:74:2c:
60:71:13:ef:d3:d9:14:b4:81:c5:81:30:d0:73:92:18:25:ef:
be:1e:a3:90:eb:b1:ec:c9:57:f5:df:61:52:ea:a5:13:1a:bc:
47:0f:86:9b:a2:e9:1c:7b:06:3a:98:81:c9:bb:90:af:74:65:
af:a4:c0:22:66:8b:35:75:f0:c5:fe:d3:e4:09:15:2f:fd:57:
94:2f:4a:e9:b1:aa:9d:f8:96:6b:64:64:f1:bc:e5:38:9f:44:
ae:19:7a:ca:c0:14:29:2b:76:1b:96:a8:9b:61:5c:9a:56:52:
c7:52:c3:58:18:bb:cf:15:a8:85:36:c0:4d:43:81:01:8d:83:
e9:03:51:6c:6c:5d:b3:35:ce:0c:d2:f0:02:c6:7e:e1:c7:2d:
fd:5d:01:6b:14:81:e9:59:f8:42:f8:c6:c1:b3:fa:d7:a3:77:
13:b4:bb:a2:a2:ff:30:32:0b:7a:d6:0d:01:82:76:ad:58:02:
69:e2:24:76:e0:98:11:64:82:86:9c:14:98:b0:d2:34:4b:05:
7a:b2:d4:15:eb:d4:8f:f4:b9:73:bc:eb:f9:08:98:26:df:05:
59:08:58:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6hVvD/4hakaajJmI/5IZH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl
MmExY2EwHhcNMjYwNjA3MDkwODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGI4ZWY2MjdlNGNiYmEzOTI0MzViZTYyNmM3ZTI3MDg2NzdhMDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurJ6Yaf+ECpQsZkvfWOqbbP7GdTB
hhJYiajoD09IJ6qoKoub7is2G2Bqc5xw9odX61MfijWw9XS++x34K4zTOGWVwm2p
Kmk3itqLOzRylnhZaHXsxmc1tZpkag/yertjuVNHSL0r68OMPnG7rWKWQ6BPHgiQ
ufzbF8OQMnF52bQael9DzOvhAeZn8w8dJsGJrA1GLJhicsN5TifcKnzFoqUZ+BGF
6NS+N3HCpjgYqzy8PXPgRV66kSRT0regUWRkVHb3m5T0z39j7XfFi1byf/S5iwJk
2Uhvf+tjQ/s6pOL3nZzS415pMhssJ7Cl0Rh8PPATgNoRX8w58GQhScxpeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBS472J+TLujkkNb5ibH4nCGd6AIMB8GA1UdIwQY
MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt
YTZjYTQ1NGRiMmQ3LzEvRkxqdlluNU11Nk9TUTF2bUpzZmljSVozb0FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3
LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX6EMA0G
CSqGSIb3DQEBCwUAA4IBAQBgyt3Uwnwiv4kyl/C05lTU1EuwuuZqrjawsY6vcfLb
AFtvdCxgcRPv09kUtIHFgTDQc5IYJe++HqOQ67HsyVf132FS6qUTGrxHD4aboukc
ewY6mIHJu5CvdGWvpMAiZos1dfDF/tPkCRUv/VeUL0rpsaqd+JZrZGTxvOU4n0Su
GXrKwBQpK3YblqibYVyaVlLHUsNYGLvPFaiFNsBNQ4EBjYPpA1FsbF2zNc4M0vAC
xn7hxy39XQFrFIHpWfhC+MbBs/rXo3cTtLuiov8wMgt61g0BgnatWAJp4iR24JgR
ZIKGnBSYsNI0SwV6stQV69SP9LlzvOv5CJgm3wVZCFgy
-----END CERTIFICATE-----
Generated at Thu Jun 11 16:02:01 2026 by rpki-client