Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/D7Ftq2g9-nuBkPDLtnTN4UT9JWs.roa
File: D7Ftq2g9-nuBkPDLtnTN4UT9JWs.roa (raw, json)
Hash identifier: xOgE5eN7Sz3nR1yh7WbORGdrTe/pPL/oJdcf2mc0R+8=
Subject key identifier: 0F:B1:6D:AB:68:3D:FA:7B:81:90:F0:CB:B6:74:CD:E1:44:FD:25:6B
Certificate issuer: /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Certificate serial: 019EDB0D6405AC5948DDB886D4C8E31E1691
Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/D7Ftq2g9-nuBkPDLtnTN4UT9JWs.roa
Signing time: Thu 18 Jun 2026 14:05:48 +0000
ROA not before: Thu 18 Jun 2026 14:05:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34854
IP address blocks: 2.56.11.0/24 maxlen: 24
45.151.215.0/24 maxlen: 24
2a07:22c0::/48 maxlen: 48
2a0c:6500:1::/48 maxlen: 48
2a0c:6500:3::/48 maxlen: 48
2a0c:6500:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:0d:64:05:ac:59:48:dd:b8:86:d4:c8:e3:1e:16:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Validity
Not Before: Jun 18 14:05:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fb16dab683dfa7b8190f0cbb674cde144fd256b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:19:39:53:da:5b:c1:b3:72:96:1e:61:ab:d5:
eb:c0:98:3f:1f:13:ec:5b:f4:da:d3:69:b2:b9:b1:
09:6f:c6:92:f6:99:40:a4:82:81:5f:b0:da:0a:65:
92:da:b4:6b:d7:ae:a8:d7:24:c2:29:b2:c7:8d:90:
f2:71:95:c4:12:c6:11:7c:c8:5c:53:65:73:72:1f:
69:36:f9:62:e6:a9:c9:d8:7c:e7:f4:0b:86:3f:70:
f2:45:4b:41:48:cf:01:ca:af:20:93:df:05:1e:bd:
79:97:18:c9:e3:25:55:35:c7:52:e6:23:05:cc:c8:
89:c0:92:bc:b8:77:20:1c:7c:7b:43:16:58:9b:c7:
ef:cc:a4:7a:3a:29:f3:d2:fa:6e:78:5e:35:13:c5:
a9:bc:02:6a:14:91:1b:41:db:25:ba:fb:d7:54:84:
49:05:b7:aa:99:4d:bf:ff:54:20:df:cf:81:41:dc:
b7:5a:a7:b1:14:41:ee:fc:30:46:c6:03:b9:49:c4:
62:2d:3c:80:ce:2b:f2:9e:24:db:02:f4:74:f6:36:
25:63:71:62:b1:70:27:79:af:8d:e7:a8:90:f6:a9:
e8:48:7a:39:60:c3:b2:5b:a4:1d:da:3a:f1:47:e8:
f3:93:8d:c1:61:b8:e4:e0:fe:01:58:5f:08:74:5d:
fc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B1:6D:AB:68:3D:FA:7B:81:90:F0:CB:B6:74:CD:E1:44:FD:25:6B
X509v3 Authority Key Identifier:
keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/D7Ftq2g9-nuBkPDLtnTN4UT9JWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.11.0/24
45.151.215.0/24
IPv6:
2a07:22c0::/48
2a0c:6500:1::/48
2a0c:6500:3::/48
2a0c:6500:100::/40
Signature Algorithm: sha256WithRSAEncryption
37:22:98:62:1b:9a:00:c3:48:09:49:57:c0:e9:bc:73:3e:d8:
e4:1e:e7:87:22:ac:44:a5:56:d1:aa:a1:f5:d2:e9:bf:97:7a:
1c:1b:84:4d:88:79:5d:c8:70:3e:cf:f7:23:61:6d:b2:eb:a3:
7c:3a:dc:8b:9c:9d:f6:93:7f:1d:32:eb:e0:f1:36:c4:20:43:
58:1e:c3:f4:88:f0:a8:b1:04:03:93:5c:c7:e9:51:20:38:aa:
9b:ac:89:49:6d:ae:58:13:f0:d0:db:60:59:3e:31:0c:18:13:
ac:ff:e6:64:29:1c:44:cc:33:bb:72:e6:a3:92:57:6a:6d:63:
de:11:8f:0f:b0:82:8a:5e:cc:6f:6a:39:24:d6:d1:79:7a:a3:
57:0e:d9:e9:ef:16:28:c5:fd:64:c0:34:fb:0d:83:11:63:eb:
c6:c5:62:f8:e1:75:66:cd:78:ac:34:08:c4:eb:d6:f9:f8:43:
b9:11:8d:ab:54:31:e7:ee:a5:8c:4b:aa:b5:46:53:70:b2:a8:
b7:b8:d0:89:8a:f9:5b:37:dd:cd:bd:37:f3:55:28:13:3e:2c:
c3:e8:eb:8c:d8:d7:03:c2:cc:a2:02:25:d2:9a:12:ad:c7:0e:
c4:ce:1f:86:fd:e9:8e:d6:ea:36:73:ae:b0:b8:b8:10:d1:f8:
5d:6e:b4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:38 2026 by rpki-client