Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/aOrob2PsLx93BBnkpigCo5wlrnc.roa
File: aOrob2PsLx93BBnkpigCo5wlrnc.roa (raw, json)
Hash identifier: Mkbtaj2lvLgJGXEuKvbX2WcSYwR3xRj1gvj2Lxvm+/I=
Subject key identifier: 68:EA:E8:6F:63:EC:2F:1F:77:04:19:E4:A6:28:02:A3:9C:25:AE:77
Certificate issuer: /CN=136ad6a4148d9c2052f40069fe70ed3eb8bef01b
Certificate serial: 019F23688340DD77DBD5365F96716A13FC7A
Authority key identifier: 13:6A:D6:A4:14:8D:9C:20:52:F4:00:69:FE:70:ED:3E:B8:BE:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2rWpBSNnCBS9ABp_nDtPri-8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/aOrob2PsLx93BBnkpigCo5wlrnc.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205007
IP address blocks: 185.48.250.0/24 maxlen: 24
185.48.251.0/24 maxlen: 24
2a04:b540:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/E2rWpBSNnCBS9ABp_nDtPri-8Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/E2rWpBSNnCBS9ABp_nDtPri-8Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2rWpBSNnCBS9ABp_nDtPri-8Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 03:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:83:40:dd:77:db:d5:36:5f:96:71:6a:13:fc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136ad6a4148d9c2052f40069fe70ed3eb8bef01b
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68eae86f63ec2f1f770419e4a62802a39c25ae77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ce:93:29:77:e7:bf:b1:b6:b2:5b:54:14:83:
79:bc:89:49:63:14:8c:0d:a4:1e:b0:0d:f4:12:6b:
f4:61:bb:54:a1:29:5b:b0:f8:9c:1b:d8:c1:25:f9:
4f:0d:d0:5c:5d:00:e9:c4:a8:a6:8f:24:46:75:a9:
2e:e5:0b:a4:e2:87:13:18:66:0a:94:21:4d:57:ca:
2c:bf:ed:f0:94:6f:ed:a0:19:68:0c:2f:3f:97:06:
13:87:80:f5:d2:90:6d:1c:2a:51:fb:be:a8:50:05:
06:94:52:31:d2:59:f4:38:39:1c:70:50:a0:f8:f1:
bf:ab:29:2d:c6:90:c7:ba:be:7b:54:5b:02:b1:cf:
9e:7b:8a:9e:6b:dd:9c:4a:a0:a9:88:c2:c6:4c:c9:
b9:d8:27:e7:00:a5:a1:53:5f:1b:97:88:30:59:c3:
c3:d8:e3:d7:a4:11:74:a1:16:27:ea:31:07:ff:6b:
78:98:b9:aa:73:03:b5:a2:77:76:14:0d:76:bc:c3:
4e:e5:ca:de:b4:44:6f:1e:7a:91:26:58:37:d7:ce:
0a:aa:c9:4e:e6:14:5f:9c:ce:bb:16:ca:49:63:3c:
70:51:6d:e4:a0:f6:05:2a:0e:f3:f9:36:96:b2:7f:
e0:d8:3d:f0:09:1a:cf:b6:75:80:f9:0a:43:ec:4a:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EA:E8:6F:63:EC:2F:1F:77:04:19:E4:A6:28:02:A3:9C:25:AE:77
X509v3 Authority Key Identifier:
keyid:13:6A:D6:A4:14:8D:9C:20:52:F4:00:69:FE:70:ED:3E:B8:BE:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2rWpBSNnCBS9ABp_nDtPri-8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/aOrob2PsLx93BBnkpigCo5wlrnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/E2rWpBSNnCBS9ABp_nDtPri-8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.250.0/23
IPv6:
2a04:b540:3000::/36
Signature Algorithm: sha256WithRSAEncryption
30:91:ff:2c:57:8b:19:8f:71:99:b0:eb:9f:e8:09:53:a2:31:
94:4f:34:0b:59:0d:ae:bb:4a:27:4f:d0:df:c7:d4:e3:51:15:
80:26:a9:93:66:1a:80:91:49:6a:3b:b4:12:10:33:14:f0:2e:
ce:ef:7b:18:f7:dc:61:7f:ee:e3:9f:2d:7e:ce:96:9e:29:c0:
6b:a2:e4:4a:79:fc:95:f7:68:49:d2:ea:62:08:66:32:94:88:
6e:e0:67:da:f3:75:41:5f:db:c7:66:92:bc:90:0a:5f:d5:dd:
93:58:ea:8c:66:47:c5:56:f3:09:cd:5b:23:d6:cd:aa:b0:5c:
20:7d:16:54:55:03:91:a4:1f:90:55:86:50:a3:99:8b:90:24:
0d:fe:c2:3a:2d:0c:cf:06:42:e4:9a:a2:53:3d:7b:49:ac:a3:
ee:32:73:ec:cc:37:10:9c:de:4c:a1:aa:40:0b:99:b8:90:b0:
36:91:9a:ac:71:15:88:9d:bc:30:d1:db:16:35:1c:72:97:6b:
18:e7:9b:4e:d4:f0:04:1d:9d:1a:1a:a8:ce:fe:58:fb:6c:fa:
4e:5e:ea:04:18:ad:56:f1:51:61:9d:98:04:0c:68:48:f9:65:
54:65:dc:e4:62:54:73:a4:5c:2c:1f:a1:ca:fb:10:5f:bd:13:
76:76:c3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 12:32:04 2026 by rpki-client