Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/CB1RlJ-MsoW5c96mAUK_hbi7JE0.roa
File: CB1RlJ-MsoW5c96mAUK_hbi7JE0.roa (raw, json)
Hash identifier: 5fJPe+eX7sQDBwrHzP9tK4pCYoIPbZwz6vPeuUSzBZo=
Subject key identifier: 08:1D:51:94:9F:8C:B2:85:B9:73:DE:A6:01:42:BF:85:B8:BB:24:4D
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019F1CC24E527ECEB9A7206B096E2DDD197A
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/CB1RlJ-MsoW5c96mAUK_hbi7JE0.roa
Signing time: Wed 01 Jul 2026 08:18:43 +0000
ROA not before: Wed 01 Jul 2026 08:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 77.47.144.0/22 maxlen: 24
195.178.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:c2:4e:52:7e:ce:b9:a7:20:6b:09:6e:2d:dd:19:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 1 08:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=081d51949f8cb285b973dea60142bf85b8bb244d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:e9:5b:a3:4e:de:b3:a4:fc:e7:3e:07:ac:
69:62:d3:d0:62:4b:58:91:b5:41:c2:69:63:61:08:
48:d5:aa:6f:fb:3e:d5:af:ba:23:bc:c5:15:4d:33:
22:98:dd:e2:28:2c:d8:86:3b:63:fc:1e:b1:8e:42:
ff:6c:33:5e:25:4d:bb:cf:e4:64:ca:6e:86:85:c1:
d1:67:6e:6a:e9:36:03:5f:98:83:67:c8:85:79:09:
ff:8d:61:f6:dd:1d:75:83:59:0c:f4:cc:0a:7c:df:
c6:b9:8a:f0:7d:80:db:d9:2b:66:02:15:b0:a2:a8:
1e:59:09:50:5f:aa:b2:f4:f3:02:ce:b9:a3:ea:c6:
3c:0c:c0:be:4e:59:90:c9:80:94:2d:45:b3:cf:f1:
eb:70:01:2a:4f:7f:1e:d0:77:9c:fb:92:28:67:a8:
45:83:ca:a3:d2:3b:68:07:84:ac:5d:d1:0f:08:79:
b7:ec:71:35:71:ee:c0:54:62:7a:64:c3:d7:5c:1f:
4a:77:9c:32:39:8f:18:76:ad:97:6e:b7:e0:67:4d:
c4:09:f9:98:c9:e9:a1:7a:1c:e3:cd:99:05:ca:44:
6d:ac:9d:d7:e8:11:c6:93:d5:8d:eb:27:12:63:dc:
5c:55:2c:7e:95:b6:77:f2:3c:5f:a3:c0:8e:7b:a1:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1D:51:94:9F:8C:B2:85:B9:73:DE:A6:01:42:BF:85:B8:BB:24:4D
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/CB1RlJ-MsoW5c96mAUK_hbi7JE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.144.0/22
195.178.132.0/22
Signature Algorithm: sha256WithRSAEncryption
63:ab:94:7a:ad:0a:dd:82:f7:0a:43:10:18:82:ab:45:c7:b2:
0d:0c:2b:f3:3e:52:5a:99:ff:1c:8b:56:b7:1b:cb:ef:58:0d:
ca:52:4c:b9:12:3f:53:34:88:11:0e:28:9f:6c:83:33:dd:69:
93:e9:5d:7f:cb:d4:5a:7a:a5:9d:42:2b:3c:15:14:a5:04:db:
f4:a8:e9:0b:b2:33:aa:54:48:09:62:a8:ae:87:e8:71:98:22:
f1:1c:dd:08:15:ad:0d:46:74:a1:c4:9e:46:17:c3:88:14:06:
dc:f4:22:46:2b:ce:3b:f9:18:42:7a:3c:cc:39:c7:1d:4b:c8:
a6:87:6f:2d:10:1e:22:75:fc:10:14:5a:a4:a8:8f:54:ec:29:
0e:20:0e:22:8b:11:b9:c0:a2:7e:4e:64:2b:41:81:e9:2e:f9:
cd:f6:c9:06:2b:8e:7a:7b:d4:ec:a7:3b:80:27:fb:93:39:16:
50:fd:4c:36:82:0d:04:17:2a:ae:71:aa:1c:59:a8:ff:59:05:
64:c8:d4:e6:06:c4:36:ae:8e:05:fd:5f:18:66:b1:f4:0d:b4:
94:8d:41:75:9b:1f:bf:61:5c:17:90:53:2f:05:1e:56:ae:b3:
0e:20:09:00:92:b6:17:31:b2:1a:bc:8e:7c:68:e1:71:53:0c:
f2:cf:4f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 22:37:21 2026 by rpki-client