Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/bN6ylQRLxmW9CyjozJtpWcA_9Lg.roa
File: bN6ylQRLxmW9CyjozJtpWcA_9Lg.roa (raw, json)
Hash identifier: GRb8/lqaJwYps3IwwYwNxf25UvK0sooLNCxRjpIKcfk=
Subject key identifier: 6C:DE:B2:95:04:4B:C6:65:BD:0B:28:E8:CC:9B:69:59:C0:3F:F4:B8
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A045AFE53AD4A06DD6E3B0BC270908F87F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/bN6ylQRLxmW9CyjozJtpWcA_9Lg.roa
Signing time: Fri 28 Aug 2026 00:05:50 +0000
ROA not before: Fri 28 Aug 2026 00:05:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149978
IP address blocks: 195.162.249.0/24 maxlen: 24
195.162.250.0/24 maxlen: 24
195.162.251.0/24 maxlen: 24
195.162.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:45:af:e5:3a:d4:a0:6d:d6:e3:b0:bc:27:09:08:f8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 28 00:05:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cdeb295044bc665bd0b28e8cc9b6959c03ff4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:fa:cf:47:b6:84:02:ba:7d:d8:6e:0f:e8:
1d:ac:63:97:16:4e:ac:49:ad:cd:2e:0a:f7:4e:ed:
82:3a:87:f3:d0:9f:95:88:40:d3:c9:c1:af:cb:22:
7b:bd:5e:72:2e:3e:4c:81:a3:f6:ed:74:26:38:8f:
41:ea:59:d5:1a:e5:38:ae:cb:65:cf:dc:64:54:c9:
1e:71:d3:85:f1:37:ae:7a:7f:4f:12:9d:02:27:2e:
ae:d8:da:12:33:db:d2:f7:08:b3:44:44:6b:a7:96:
b9:d6:79:f5:2e:ce:94:23:a9:2e:67:a8:db:8a:a4:
45:fe:c3:9c:84:4f:4e:69:90:11:34:e6:26:01:63:
f7:10:bb:b5:03:7f:b6:49:1c:f3:17:0e:3b:79:2f:
36:88:53:63:9c:f4:bb:74:89:f1:da:1e:91:2c:31:
f2:aa:02:10:dc:0f:ba:db:80:39:f6:27:e7:8c:d5:
56:0c:11:53:39:0e:f5:31:3d:81:82:21:b5:75:14:
24:60:89:22:ff:e4:16:fe:4c:f3:1e:55:dd:77:32:
af:e5:78:2a:36:de:e3:6d:34:b9:29:3c:5e:cf:18:
14:77:d9:4b:63:cc:9d:f4:6d:6a:b5:cf:13:4b:8e:
5c:8d:59:2f:d3:65:05:e1:37:fd:7d:67:b6:63:ff:
e5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DE:B2:95:04:4B:C6:65:BD:0B:28:E8:CC:9B:69:59:C0:3F:F4:B8
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/bN6ylQRLxmW9CyjozJtpWcA_9Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.249.0-195.162.252.255
Signature Algorithm: sha256WithRSAEncryption
55:13:61:6d:93:e3:d7:08:84:d8:e4:79:b4:c1:0b:b1:7a:1b:
01:39:8b:27:19:2c:fc:bd:59:c8:4c:65:00:c5:a2:20:9c:30:
40:4c:90:f7:07:e5:16:cf:a1:56:f4:8f:1b:cc:63:16:82:78:
42:c7:53:b6:8d:51:90:d6:23:1e:31:d6:72:36:9b:33:01:8b:
4f:8c:e5:7e:69:5a:d8:60:60:3d:2d:2f:06:af:bd:19:fb:e6:
47:71:6e:15:bc:34:45:8c:d6:30:c4:5b:38:73:aa:8e:6d:09:
d0:8b:b2:ed:32:cc:03:03:20:aa:38:27:00:31:6f:e4:4e:a0:
55:0b:62:c4:c2:a4:62:88:f8:c8:fa:88:be:15:bb:9b:5d:b5:
ab:2c:be:9a:58:34:49:54:4c:d9:d6:a6:c8:31:ab:db:ba:cb:
d4:06:2c:e3:4a:74:2a:74:40:a5:50:9d:13:ed:22:8a:37:44:
89:1f:f7:81:91:68:92:50:4b:ad:da:f2:3f:69:bc:03:99:54:
75:14:48:01:f1:e6:b7:84:17:7e:c9:37:59:35:50:1e:6c:a4:
32:7a:e6:32:67:b8:01:6f:7d:7b:b1:d3:ef:26:ba:09:82:84:
6a:e5:a3:92:ff:db:42:9d:79:83:2a:14:bd:3b:69:5e:69:74:
bb:2d:62:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:17:30 2026 by rpki-client