Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/b4yJlmPUKiWLZ50MJeWk_RCynds.roa
File: b4yJlmPUKiWLZ50MJeWk_RCynds.roa (raw, json)
Hash identifier: E2jiBL7/4S8MRkjEI/HFM3p9YkaIo/oZiDj7NknkQvk=
Subject key identifier: 6F:8C:89:96:63:D4:2A:25:8B:67:9D:0C:25:E5:A4:FD:10:B2:9D:DB
Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial: 01A0A0A1688B70031BDBDB7E30EAE24B70B6
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/b4yJlmPUKiWLZ50MJeWk_RCynds.roa
Signing time: Mon 14 Sep 2026 15:55:27 +0000
ROA not before: Mon 14 Sep 2026 15:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402273
IP address blocks: 107.182.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:a1:68:8b:70:03:1b:db:db:7e:30:ea:e2:4b:70:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Validity
Not Before: Sep 14 15:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f8c899663d42a258b679d0c25e5a4fd10b29ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:48:d6:ba:5a:89:96:aa:14:57:b3:51:34:
e1:c5:2f:75:4c:2e:51:e4:3e:08:15:5e:be:ba:39:
36:3e:f8:3f:65:76:da:f4:72:16:78:e7:8b:ac:6b:
d5:a2:9d:ac:47:0e:b1:9c:4a:c6:54:dc:4e:ee:95:
15:ae:b0:f9:be:3d:5a:52:ae:c1:e6:0a:73:c1:5a:
84:fb:aa:06:1f:a6:bc:dd:c4:9d:ff:8d:75:63:92:
19:ab:02:b4:3e:79:45:14:07:66:27:fa:3e:f6:47:
92:08:c0:5b:e5:ad:0a:7b:73:4e:1e:29:d6:d4:23:
99:40:88:4c:c8:0d:03:bf:a5:31:b8:59:59:fc:c5:
d3:f4:06:1a:1e:25:b4:9d:fd:6e:11:e6:20:78:91:
a0:a1:63:74:a7:54:15:64:c2:41:05:df:54:94:89:
fe:44:9e:b0:83:6c:09:0a:d2:f1:da:8e:97:6d:95:
20:31:b2:ef:b9:31:5c:0a:c6:b3:5d:a7:92:05:17:
e4:fa:40:f5:d8:b4:4a:dd:95:b2:c1:a8:89:38:f6:
65:7d:bc:70:b5:f4:81:75:24:60:f9:25:9c:96:d2:
94:77:c6:f2:7b:85:06:c8:3f:25:fe:56:8c:10:70:
31:ad:e5:bf:57:3c:3a:09:3a:f1:d4:7d:1b:44:d2:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8C:89:96:63:D4:2A:25:8B:67:9D:0C:25:E5:A4:FD:10:B2:9D:DB
X509v3 Authority Key Identifier:
keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/b4yJlmPUKiWLZ50MJeWk_RCynds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.182.116.0/23
Signature Algorithm: sha256WithRSAEncryption
18:47:40:90:c1:06:8c:87:1d:9f:c9:c8:8e:2e:03:0b:c8:7a:
42:04:5d:49:49:64:17:11:1c:b3:62:60:6e:29:1b:bb:e7:1d:
2b:d6:d6:c6:c6:76:88:15:fb:10:7d:0d:62:ed:03:33:92:f5:
89:de:c4:dc:b0:92:e9:67:14:8b:39:74:12:99:fc:17:d4:dc:
6d:dc:10:7a:5e:e6:91:23:43:8c:34:88:52:8d:4e:0e:c9:46:
1e:72:76:83:cf:cb:e3:c1:3b:fd:26:e0:60:46:35:71:21:15:
08:40:7c:29:13:c0:54:53:b4:fb:96:7a:45:25:64:d2:e0:a4:
a2:ab:a2:ec:ba:1a:8a:43:49:8f:4a:67:56:c8:fa:f1:4e:b9:
1f:9c:0d:a5:1c:1e:50:07:92:24:d8:28:44:4e:56:ff:d5:3c:
de:f0:14:17:fb:fa:a6:e0:12:89:e6:a4:84:45:cb:d1:f3:4b:
78:cd:2c:3f:66:77:b1:00:36:42:3c:d3:67:1b:f7:a8:c9:7d:
f6:2c:04:8a:f7:d7:6d:8a:8d:a3:1d:c8:04:11:25:9c:e2:e4:
42:46:4b:5e:6e:1a:ca:23:0b:58:f9:1f:02:4d:9e:b5:9c:f4:
b1:c2:13:9d:ba:fb:19:81:ba:b6:33:41:85:62:49:db:f7:04:
43:9b:62:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:04:44 2026 by rpki-client