Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/63H7JwzlejgUI1rdU3iA6337K4Q.roa
File: 63H7JwzlejgUI1rdU3iA6337K4Q.roa (raw, json)
Hash identifier: nfCRaZ+fE1o09p+gifJaRINGZZzFXloyN3u1NP6wVL4=
Subject key identifier: EB:71:FB:27:0C:E5:7A:38:14:23:5A:DD:53:78:80:EB:7D:FB:2B:84
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E831FEB1E3DE8A0D1B24D5BBE1EDFC8AE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/63H7JwzlejgUI1rdU3iA6337K4Q.roa
Signing time: Mon 01 Jun 2026 12:19:27 +0000
ROA not before: Mon 01 Jun 2026 12:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60647
IP address blocks: 86.105.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:1f:eb:1e:3d:e8:a0:d1:b2:4d:5b:be:1e:df:c8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 1 12:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb71fb270ce57a3814235add537880eb7dfb2b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:84:c8:a6:cb:04:5e:6f:bb:e7:c8:a9:a0:
80:bf:b8:99:d9:2f:b8:a8:55:1e:84:ae:8f:d9:9a:
1b:97:e6:eb:5b:b9:00:e2:07:ea:ff:bb:9c:b2:ba:
3a:d3:28:16:82:f4:7a:3b:87:bf:af:1c:f0:44:db:
f0:f4:35:77:d5:da:46:63:55:fd:9c:c6:73:83:fe:
0e:c6:36:92:17:f0:d1:bc:2a:95:f3:3f:a6:14:fe:
a7:1b:b3:3f:b1:f6:67:c3:c5:83:73:4c:2e:37:84:
0c:2d:09:20:13:a0:67:8b:a0:36:70:71:a8:6b:23:
6e:de:14:13:2e:a9:a3:79:3d:70:d3:b2:13:87:a0:
97:a2:3c:c4:86:e4:88:b5:1b:ea:08:5a:64:5c:4b:
85:d3:4e:79:91:ee:29:55:e2:86:e4:c4:81:ee:23:
a9:b8:e6:ea:c1:96:11:bb:ef:2c:af:99:9f:c1:3c:
2e:66:21:07:06:93:ee:d3:0f:8c:84:aa:61:45:b7:
f2:ac:24:26:25:9a:41:5f:55:b4:09:c7:07:01:af:
5e:45:89:84:ea:ab:9a:80:db:09:a6:af:a3:d0:dc:
36:6d:1a:b1:90:d3:1c:56:58:0c:51:b4:85:b3:b1:
8d:08:2e:9a:97:17:dc:1e:5b:29:f8:c5:6c:96:62:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:71:FB:27:0C:E5:7A:38:14:23:5A:DD:53:78:80:EB:7D:FB:2B:84
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/63H7JwzlejgUI1rdU3iA6337K4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.4.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:cf:a3:08:50:9c:9a:6b:9f:50:4e:58:a6:67:48:20:66:e6:
f0:6e:5f:17:a1:8b:c7:75:dc:69:c6:51:28:0a:58:5f:42:62:
ad:32:d0:e8:21:6d:b7:33:d2:e7:ea:40:62:e1:61:20:78:bf:
51:1c:13:8b:01:c0:7d:31:4a:9b:7d:b6:a4:40:a8:5b:fe:16:
6d:ea:99:95:5f:db:6d:39:1e:d5:53:f6:7b:54:88:c2:e3:a4:
10:59:4e:ff:75:80:7b:26:13:5a:14:e8:a9:90:c2:ad:e4:c5:
e4:c2:cb:c2:73:56:8c:20:e6:c3:87:a0:9f:a4:77:54:71:e5:
36:de:a6:d9:e7:cf:ed:f0:78:9e:b1:c2:aa:f5:9e:52:e8:00:
ba:4d:f3:ef:e1:7d:9f:7f:be:0f:9c:e0:9f:22:e0:c7:27:29:
11:1b:16:9c:8b:b3:41:e7:a5:9a:d3:cb:0e:1b:3d:66:9e:e8:
48:0f:46:b5:74:86:10:39:cd:4d:2e:84:72:cf:0f:43:ee:74:
fc:d9:f8:a1:a9:92:59:c0:b4:53:f0:46:95:8b:25:0d:4a:e2:
8b:b1:9f:9c:0c:57:84:01:78:7a:32:10:59:32:ea:8c:0a:3e:
ee:ce:75:65:3c:16:c7:1e:ea:97:bf:51:02:f7:bf:91:8f:18:
85:f9:49:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 06:21:09 2026 by rpki-client