Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/I50Xdmc2vD7Yx16IjkscqSWGByc.roa
File: I50Xdmc2vD7Yx16IjkscqSWGByc.roa (raw, json)
Hash identifier: RDUO+YNn3phd3/QIVNJIvwDgBTmufyoyrH3ITgLGClY=
Subject key identifier: 23:9D:17:76:67:36:BC:3E:D8:C7:5E:88:8E:4B:1C:A9:25:86:07:27
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 019E4009AF0E12635CF4B5FDB23D6AE39D18
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/I50Xdmc2vD7Yx16IjkscqSWGByc.roa
Signing time: Tue 19 May 2026 11:40:36 +0000
ROA not before: Tue 19 May 2026 11:40:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6453
IP address blocks: 62.215.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:09:af:0e:12:63:5c:f4:b5:fd:b2:3d:6a:e3:9d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: May 19 11:40:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=239d17766736bc3ed8c75e888e4b1ca925860727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:e9:3f:d8:00:0a:04:1d:76:a3:53:af:6f:
82:b1:28:1e:c1:af:a1:bd:ca:f9:3c:18:13:25:8d:
60:87:aa:06:5a:d9:f1:bf:7a:70:58:a9:0e:a1:dd:
0e:19:3f:f1:5d:59:ca:bb:b1:e6:28:2a:a9:71:70:
64:30:42:50:3a:a6:25:9a:43:30:35:9c:31:9c:a0:
84:2e:cb:23:0a:fb:ef:5f:29:54:76:a7:15:de:9d:
8c:88:ee:9c:73:83:a2:ac:1a:f9:04:f3:c3:59:d6:
80:08:28:8d:0a:de:d2:de:07:1f:ea:d8:45:cc:e8:
14:ad:4b:f4:06:d6:3a:d2:15:73:25:94:7f:15:a8:
7d:24:b5:e6:d2:8e:4f:9f:84:fe:b0:44:6d:b4:71:
ff:aa:1e:2c:04:9d:d3:f6:0c:32:06:c6:81:26:28:
e9:b1:30:bd:ea:ac:2d:33:a4:89:c0:70:0d:02:5f:
01:21:b5:5e:29:54:dc:68:eb:a2:42:9c:d0:d8:ad:
fd:2d:92:d3:76:0c:b4:2e:2e:d7:58:e9:95:db:45:
d0:fa:e2:8c:da:7a:18:dc:10:a7:d2:48:d4:24:cb:
a8:c2:fb:15:2a:33:4a:6a:c1:0f:cd:da:5e:b8:0c:
92:39:a2:91:22:e8:d1:2a:5b:ac:d1:07:a3:61:c2:
a1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9D:17:76:67:36:BC:3E:D8:C7:5E:88:8E:4B:1C:A9:25:86:07:27
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/I50Xdmc2vD7Yx16IjkscqSWGByc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.215.253.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:7d:c4:b1:9a:fe:13:4c:4d:ba:a3:5d:e8:b0:e2:55:d6:12:
6f:92:ba:d4:16:3a:53:97:b5:3a:e1:b7:53:36:1b:c2:4f:26:
cb:78:5c:c1:80:61:e5:03:6b:99:61:3e:93:6e:df:d4:a3:54:
66:8c:d5:59:6f:ff:9b:66:17:a2:ad:87:c5:28:3c:a0:b6:c5:
37:e6:8d:50:4a:7f:b7:5e:eb:c5:b0:24:8e:1c:31:e2:8d:15:
ed:d3:ad:eb:77:c6:9b:29:55:f5:a0:c8:ab:14:fe:b8:69:7d:
01:ac:c7:85:39:0e:e4:70:e8:c6:6d:2d:2b:b4:49:17:8f:d6:
f9:b3:fa:25:5c:78:16:63:ed:12:11:ff:1d:c5:85:3c:16:3d:
ff:8f:57:c0:e8:30:c7:f0:0a:ab:0f:74:80:30:a4:f5:46:d5:
bb:86:d9:f0:a3:09:9d:ad:5e:9b:6a:7a:e0:78:7a:0e:78:4a:
ca:db:d4:12:b3:5d:d8:de:bf:b4:a0:ba:d4:7f:75:58:f1:ab:
4f:9d:53:ea:92:d1:b3:cd:28:e1:ee:e1:ac:55:99:aa:7e:b0:
28:5f:fa:2b:81:29:fc:a1:48:a8:5a:3e:ec:cc:2c:6a:2e:72:
c4:6d:eb:8b:36:1d:20:24:c5:5c:36:d7:89:93:d8:30:af:c8:
f2:7f:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:33:12 2026 by rpki-client