Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/SKlhQV9DBZq5SQGBj4LQRBa4pDY.roa
File: SKlhQV9DBZq5SQGBj4LQRBa4pDY.roa (raw, json)
Hash identifier: iZdqEuhLKPZUUK2YbA/Np/er8XGu26nbBYz75XXIsXY=
Subject key identifier: 48:A9:61:41:5F:43:05:9A:B9:49:01:81:8F:82:D0:44:16:B8:A4:36
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01A04261F072438CCC5FA9C784B87DB6C86D
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/SKlhQV9DBZq5SQGBj4LQRBa4pDY.roa
Signing time: Thu 27 Aug 2026 08:41:49 +0000
ROA not before: Thu 27 Aug 2026 08:41:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205009
IP address blocks: 77.47.250.0/24 maxlen: 24
77.47.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:61:f0:72:43:8c:cc:5f:a9:c7:84:b8:7d:b6:c8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 27 08:41:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48a961415f43059ab94901818f82d04416b8a436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e3:4a:8c:e8:1a:fe:83:d0:a5:9e:89:34:e2:
92:af:94:e6:72:fc:e9:6a:1c:a8:0d:8d:7d:89:4b:
cf:2d:f8:56:c1:ea:e2:7c:ba:31:75:e2:7c:a7:5a:
bc:a0:4d:04:ef:92:5c:12:4b:5e:ae:1e:81:a4:36:
a9:98:6c:e9:50:1f:0b:43:44:c8:09:c9:35:c8:10:
2c:25:ef:48:4f:b9:be:11:d9:17:ea:9b:65:e1:1a:
61:15:63:d7:a5:ef:f5:f2:46:07:eb:a2:b1:d6:f6:
a9:ef:40:9c:3f:a1:00:4b:04:13:6e:35:ed:1d:03:
62:87:38:33:fc:3e:cb:31:e8:69:ad:c0:c6:ff:c4:
ab:98:bb:4d:b0:89:3b:5e:84:8f:53:a6:ca:8d:e1:
84:8d:c6:d7:43:b5:a7:3f:58:08:b5:ef:1f:bb:b1:
ee:67:da:60:b9:41:9d:86:67:6a:7e:65:9c:d5:6c:
d5:77:47:23:e4:0b:5a:fb:31:56:23:c7:b4:28:ac:
6d:f8:d9:ff:76:8a:7d:56:86:a8:8d:67:e8:30:22:
a8:8d:a5:91:7c:0d:94:58:0f:8b:0d:3d:06:09:86:
3a:98:07:a1:96:88:c4:81:24:7b:59:ed:fd:3e:a1:
de:42:85:59:c7:d6:78:5a:f9:c2:ee:c3:7c:0d:a0:
cc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A9:61:41:5F:43:05:9A:B9:49:01:81:8F:82:D0:44:16:B8:A4:36
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/SKlhQV9DBZq5SQGBj4LQRBa4pDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.250.0/23
Signature Algorithm: sha256WithRSAEncryption
23:be:4c:bc:a3:a6:36:b8:db:4a:59:c7:e4:e8:c4:6a:6e:e0:
0d:1a:e1:3e:9b:aa:04:20:c2:a4:aa:23:29:8d:ce:65:dd:1d:
14:57:04:ac:e9:ad:1b:30:3d:64:d6:6c:1c:74:ad:01:db:27:
f2:29:82:5b:e8:9e:09:70:c1:85:f0:27:98:22:ae:2c:c4:c6:
1e:ef:3a:cd:bd:06:69:cc:2f:a5:b5:7d:f2:87:31:83:b9:67:
59:0d:85:25:16:8b:63:84:89:cf:fe:53:e2:47:05:58:a3:17:
e0:85:7e:e7:11:ff:68:08:0c:1a:79:43:3c:05:a5:91:cc:62:
47:4c:54:02:0b:d4:38:6b:48:42:89:ef:2f:66:00:c5:49:69:
db:70:37:a6:6c:b2:7d:2b:8e:e3:74:0e:43:da:a1:09:69:94:
03:21:85:57:18:d3:9d:31:95:a7:25:82:44:8a:4d:fa:db:77:
1f:0a:f4:80:86:13:a4:5f:e6:0e:c9:3a:a1:8c:5d:0c:75:dd:
ee:66:ac:7e:75:b5:40:6c:cd:5c:b3:14:85:b1:fb:63:70:3f:
6c:10:6d:1d:2c:e9:d6:fa:95:dd:2a:3e:01:74:79:3b:f1:99:
3a:d7:23:e0:e4:0a:b4:bf:50:35:ba:f0:5f:48:d7:3b:5f:53:
02:e2:aa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:20:29 2026 by rpki-client