Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-HMehk4Z5593y_16dRGWIQyy-Ng.roa
File: 1-HMehk4Z5593y_16dRGWIQyy-Ng.roa (raw, json)
Hash identifier: EurbSdpdbDWY2LP7kxCHMWSabQW2ttzuwZ+l6NbR48o=
Subject key identifier: F8:73:1E:86:4E:19:E7:9F:77:CB:FD:7A:75:11:96:21:0C:B2:F8:D8
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019E50DE27E3DEB3DD7374C6232914519DDD
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-HMehk4Z5593y_16dRGWIQyy-Ng.roa
Signing time: Fri 22 May 2026 18:06:36 +0000
ROA not before: Fri 22 May 2026 18:06:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215496
IP address blocks: 109.122.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:50:de:27:e3:de:b3:dd:73:74:c6:23:29:14:51:9d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: May 22 18:06:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8731e864e19e79f77cbfd7a751196210cb2f8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:56:60:b1:9b:87:49:f4:90:9f:5d:bc:d7:
cb:ca:52:bb:75:6f:6f:8b:bc:5a:ac:18:cd:03:6b:
81:03:08:2e:76:70:d0:d3:54:9e:c4:73:1f:a3:7a:
b6:92:85:26:92:ec:7c:65:94:84:f3:62:d7:c1:86:
0a:e8:50:4f:d5:bb:17:14:a8:e3:d5:66:a9:08:dc:
b6:64:67:5e:f2:06:26:a2:b2:6e:06:1e:9d:c9:99:
1b:02:9a:b9:96:49:2e:43:0f:98:a1:b7:fd:b7:90:
11:59:6f:89:11:b7:d8:57:90:26:3e:9b:02:be:dc:
04:12:4d:7e:86:f1:d5:df:4d:6d:33:79:97:a7:7b:
6a:ba:71:8e:de:95:ae:f3:fd:c7:69:35:c1:45:71:
e5:32:3a:c7:3b:4f:fc:99:e7:fb:8a:d1:8d:87:2c:
72:8a:04:46:86:ac:c6:95:bf:c8:25:3d:cb:ec:7c:
e2:1c:65:f7:4d:6f:69:66:6d:5c:b2:d8:22:1c:c5:
91:ea:06:4e:a7:79:e1:e0:7f:c3:51:73:6c:23:3c:
a2:36:1c:04:8f:4e:64:06:fa:2b:cb:a9:e3:5c:9c:
21:47:e7:9b:02:ec:76:4f:e1:98:2e:13:21:b8:5c:
40:91:dc:6d:0f:26:f8:0b:87:05:45:d0:33:f7:de:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:73:1E:86:4E:19:E7:9F:77:CB:FD:7A:75:11:96:21:0C:B2:F8:D8
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-HMehk4Z5593y_16dRGWIQyy-Ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.250.0/24
Signature Algorithm: sha256WithRSAEncryption
64:85:b4:30:f0:ac:6e:8b:48:af:64:01:9a:3e:d0:b7:bf:53:
3f:dc:e9:dc:93:c7:53:71:30:c9:ae:fd:08:4b:94:b6:78:e6:
b3:3a:6b:63:c0:e7:83:1f:47:06:69:04:c3:32:cf:bd:8e:bd:
f4:c0:40:db:71:91:f0:e1:b9:00:ee:3a:9e:d5:18:77:a4:19:
a3:53:4b:25:c0:bf:42:f6:b4:21:a2:3c:d4:dd:02:cd:d7:1a:
82:43:e5:36:8f:a7:f2:20:00:41:ab:ca:75:6c:a9:48:73:54:
d7:dd:ae:fe:10:63:e2:c6:92:d4:7d:5c:f1:61:c6:5e:cc:eb:
d1:62:02:9a:84:d2:1b:2a:18:74:0c:27:45:5e:5a:fb:55:8a:
ff:c2:bd:e0:d5:6f:ab:e7:b2:e3:c8:5c:6d:80:57:cd:1e:c0:
7d:0b:c2:68:f9:2a:b7:9d:b2:01:fd:f5:fd:2d:0c:f1:c1:0e:
ae:7a:b0:d8:36:b1:18:47:61:2b:5d:40:08:cf:6e:17:96:b3:
5d:53:02:63:90:a1:7d:46:2e:16:f4:55:8d:05:e8:2b:17:21:
65:1d:20:3b:a1:95:d0:04:3d:49:01:08:83:5a:5d:96:81:57:
c3:39:8d:8c:19:35:13:d8:52:fe:b5:0e:d5:7a:91:a7:90:33:
df:b5:e0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:41 2026 by rpki-client