Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/peT8CTSpQLfO18yCwu4AtxxOTr0.roa
File: peT8CTSpQLfO18yCwu4AtxxOTr0.roa (raw, json)
Hash identifier: hsGVA7+uUNNAHVu2HVjxr7Jo3CA7cqA+tbxBjJtodL0=
Subject key identifier: A5:E4:FC:09:34:A9:40:B7:CE:D7:CC:82:C2:EE:00:B7:1C:4E:4E:BD
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 019F13ABD5DF7689B13014DE7EC7BD8ECD8A
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/peT8CTSpQLfO18yCwu4AtxxOTr0.roa
Signing time: Mon 29 Jun 2026 13:57:36 +0000
ROA not before: Mon 29 Jun 2026 13:57:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51975
IP address blocks: 46.151.208.0/22 maxlen: 24
46.151.212.0/22 maxlen: 24
185.79.248.0/23 maxlen: 24
185.79.250.0/23 maxlen: 24
2a05:78c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:ab:d5:df:76:89:b1:30:14:de:7e:c7:bd:8e:cd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: Jun 29 13:57:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5e4fc0934a940b7ced7cc82c2ee00b71c4e4ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:1d:fc:0e:81:c4:a4:51:52:1d:4e:97:a2:
c2:f8:52:f1:70:c2:41:b0:a4:25:e9:46:6d:af:ff:
b0:36:c8:53:d8:df:c0:35:81:23:c2:69:00:6b:02:
f2:21:9e:aa:34:93:ac:90:49:f3:71:90:77:7a:d3:
24:b8:14:2f:fe:0b:7b:f4:d4:7a:d6:e9:a7:f2:22:
28:f1:c4:ae:88:58:ac:b4:4b:52:66:07:de:9c:ef:
41:e3:da:2b:c1:b7:8f:24:58:c1:0d:f0:66:c8:f4:
cb:17:3b:9b:cb:e2:c5:f1:89:20:14:d1:14:5d:2e:
1d:68:7e:c2:a4:26:93:d6:98:ef:be:4a:bd:de:0f:
d9:5b:b8:dc:eb:ad:ed:4b:f2:b8:34:99:9c:40:63:
95:38:63:07:68:13:af:8e:7b:a0:86:45:b0:d0:08:
60:90:80:c6:41:8c:48:7b:5d:34:c6:4e:cd:ab:1f:
a2:98:6e:3c:d0:82:49:37:57:e9:8f:8c:44:a5:e1:
2c:05:10:2c:a5:68:55:81:43:dd:5c:8a:3f:75:97:
63:73:0b:95:e9:22:f2:de:09:5e:15:07:7b:79:ce:
99:aa:25:6f:fd:8e:e0:25:be:28:29:cb:64:82:81:
d1:65:bf:b8:dd:54:f4:c5:c5:ca:94:1d:6c:4d:12:
03:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E4:FC:09:34:A9:40:B7:CE:D7:CC:82:C2:EE:00:B7:1C:4E:4E:BD
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/peT8CTSpQLfO18yCwu4AtxxOTr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.208.0/21
185.79.248.0/22
IPv6:
2a05:78c0::/32
Signature Algorithm: sha256WithRSAEncryption
31:90:c9:88:90:db:bb:1e:00:ef:cc:9f:2b:57:1b:a0:3d:f0:
98:17:dd:7b:3a:bc:2e:38:3b:4e:c6:57:e0:d4:9a:91:d4:af:
cc:41:2f:b3:27:8b:db:4d:f5:f8:92:7f:4d:1b:50:34:97:25:
8e:43:d5:fb:fc:ce:13:73:89:43:95:12:c7:0e:4f:e8:41:d4:
1a:7e:ee:b9:6a:54:2a:37:39:e9:99:d0:ee:41:bc:03:3b:51:
2d:e1:f6:47:33:e5:e0:d5:25:bf:a0:26:1f:88:87:ad:ff:7a:
02:a1:fa:25:4a:3a:89:a3:09:88:32:4f:65:6d:e6:52:de:66:
34:b7:d3:96:f5:57:95:0e:93:41:75:10:6d:e2:a2:06:18:17:
12:68:b2:0b:4b:e6:36:5f:3e:3a:24:ec:5f:e9:50:21:6b:f6:
26:6b:2c:da:f3:79:e4:ee:2b:1c:42:a5:ab:a7:50:ee:c5:03:
d3:f3:98:ea:38:27:ac:85:ca:26:90:9f:32:a6:48:6e:c1:57:
84:50:ad:fc:ab:0a:08:f2:eb:58:78:f9:08:7d:18:41:09:ef:
2c:24:8c:52:0d:24:94:64:70:fb:4a:0c:43:2e:77:f6:80:be:
87:b4:b6:56:a0:5f:d7:f1:65:18:f5:9a:70:be:a8:31:2d:56:
41:af:92:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:56 2026 by rpki-client