Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/i61LyeKdbmoRgL-RvPjpdGwV-9g.roa
File: i61LyeKdbmoRgL-RvPjpdGwV-9g.roa (raw, json)
Hash identifier: B5NPDprZMkEcpLUbAE8cZs/EInKMhkrmRQomVQshal0=
Subject key identifier: 8B:AD:4B:C9:E2:9D:6E:6A:11:80:BF:91:BC:F8:E9:74:6C:15:FB:D8
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019E46599A0B96C48E368544FB9D5952EE87
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/i61LyeKdbmoRgL-RvPjpdGwV-9g.roa
Signing time: Wed 20 May 2026 17:05:37 +0000
ROA not before: Wed 20 May 2026 17:05:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215290
IP address blocks: 2a11:b4c1::/32 maxlen: 32
2a11:e2c1::/32 maxlen: 32
2a11:e2c6::/32 maxlen: 32
2a12:2805::/32 maxlen: 32
2a12:8786::/32 maxlen: 32
2a12:a502::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:46:59:9a:0b:96:c4:8e:36:85:44:fb:9d:59:52:ee:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 20 17:05:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bad4bc9e29d6e6a1180bf91bcf8e9746c15fbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:f7:cc:64:93:76:9b:e0:52:4d:24:16:29:
3e:a9:de:aa:b1:99:f1:ac:41:10:c6:f9:59:a8:46:
08:46:c4:1f:52:9c:72:31:8a:5d:03:79:2f:f6:e3:
43:0c:65:f3:c0:0c:75:e1:72:c0:00:3f:35:8f:0f:
be:d1:35:1c:4f:99:f7:27:4b:90:ac:31:f4:ae:fc:
fb:ed:78:63:f7:e7:b6:ce:d1:6b:b1:3e:5d:0d:fb:
f4:05:75:ee:06:97:0f:7a:72:6f:d8:b4:ce:26:17:
69:37:b3:ce:d4:f2:7e:99:64:c7:aa:e0:b6:80:17:
47:f7:b9:b7:be:fb:4d:64:70:b5:d5:fd:ff:f0:5f:
ea:75:e2:0a:bd:43:54:03:49:29:60:55:da:e5:eb:
f0:df:77:af:9e:2f:be:d3:1b:dd:f2:17:ed:ef:70:
ce:20:a1:5d:e1:81:0d:7e:00:d9:a3:1e:5f:18:8b:
9d:6a:0d:51:24:5b:72:16:84:bd:a1:3b:89:c7:e9:
33:d9:48:db:15:c1:79:eb:d9:05:b4:39:2d:23:ed:
a9:42:a9:5c:b8:be:ea:91:f1:6b:84:d9:d1:b8:4b:
78:57:5d:05:bb:bd:d8:19:b5:97:15:7f:2b:f3:23:
48:56:36:f4:32:ce:9a:58:ba:6f:f4:9b:2d:b7:41:
f1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AD:4B:C9:E2:9D:6E:6A:11:80:BF:91:BC:F8:E9:74:6C:15:FB:D8
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/i61LyeKdbmoRgL-RvPjpdGwV-9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:b4c1::/32
2a11:e2c1::/32
2a11:e2c6::/32
2a12:2805::/32
2a12:8786::/32
2a12:a502::/32
Signature Algorithm: sha256WithRSAEncryption
22:ef:28:70:40:a7:09:39:63:e8:f6:31:3f:00:84:36:ca:ee:
b8:02:25:c3:63:3c:37:ff:04:0a:58:b8:6c:ff:5d:10:ce:cc:
59:1e:99:c4:84:1e:8d:ae:2f:30:ef:15:b4:2f:49:99:74:00:
e8:99:b9:4f:20:2c:20:03:ca:57:40:87:cc:6c:0a:fb:f4:92:
f6:07:e9:a0:c8:73:62:29:11:d7:81:6d:e1:8e:59:b3:f0:3d:
81:3a:bf:4b:d7:5a:a8:3d:3b:ef:66:7a:13:91:72:db:8f:d3:
11:ae:6c:e9:17:b8:5a:be:d6:c6:71:a6:18:59:79:8c:49:33:
8c:78:c3:77:aa:4e:5a:86:50:21:6b:9c:44:93:6f:66:50:fe:
93:d8:de:73:19:fb:33:f8:bd:e4:03:55:76:10:a6:5f:37:e9:
db:c1:fb:38:fd:8f:4a:b6:3e:4a:b4:41:5e:6c:71:d0:f7:67:
da:c7:0b:72:55:cf:27:59:ef:03:af:11:b1:ed:f6:da:7a:a6:
aa:4e:ff:da:36:39:e3:4f:ad:5c:c3:8a:2b:ae:1e:b2:41:82:
4e:eb:12:15:b1:32:f8:bf:68:b1:78:05:d0:9e:8a:57:9e:a6:
be:8a:db:77:bf:93:93:06:94:7c:8d:ec:c7:80:70:82:46:04:
5e:70:c6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:31 2026 by rpki-client