Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/b_b8FgUBWx7o4mrGSWETF1x68gQ.roa
File: b_b8FgUBWx7o4mrGSWETF1x68gQ.roa (raw, json)
Hash identifier: YqVNmCVOzW8nbc96cPhMeB/DqemnZKobEb9c09pjCAo=
Subject key identifier: 6F:F6:FC:16:05:01:5B:1E:E8:E2:6A:C6:49:61:13:17:5C:7A:F2:04
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 019DC135F93E4ED07D098E150D505534E66C
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/b_b8FgUBWx7o4mrGSWETF1x68gQ.roa
Signing time: Fri 24 Apr 2026 20:37:13 +0000
ROA not before: Fri 24 Apr 2026 20:37:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41960
IP address blocks: 150.251.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c1:35:f9:3e:4e:d0:7d:09:8e:15:0d:50:55:34:e6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Apr 24 20:37:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ff6fc1605015b1ee8e26ac6496113175c7af204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:93:30:ee:19:3a:c9:16:6c:fe:82:b1:65:75:
a5:44:ff:d2:bb:a1:a5:a4:71:01:10:5e:73:76:72:
68:de:d1:d3:89:ec:1c:e8:bc:33:37:82:ad:dd:29:
73:9d:6d:1c:ef:6a:70:80:ea:c9:6c:ec:fa:f5:02:
19:5c:a2:2b:aa:7d:81:17:b5:1f:35:b9:25:9a:30:
a7:d6:55:12:72:73:99:b9:23:34:c0:81:55:4e:0e:
1f:ff:78:01:82:91:db:27:0d:71:14:8b:bd:3d:a9:
d2:17:51:ce:92:09:cb:2b:31:e9:18:93:d4:6c:c0:
05:96:6b:56:e8:ce:ce:33:d4:69:76:02:4d:30:1f:
6e:6d:7f:0d:55:cd:7e:a2:56:1e:be:05:11:1a:61:
9c:df:47:30:e5:90:1a:88:c3:87:96:19:51:19:41:
d1:7c:9b:9d:90:78:26:d8:53:0f:0d:09:65:e6:bc:
4f:2a:63:0a:41:5d:af:ef:3b:60:25:81:bb:e7:03:
d0:6a:8a:8b:8a:3e:62:f1:37:11:7b:77:52:5d:48:
91:22:5e:a5:ee:16:9b:f0:e1:ed:dc:f2:0c:2b:64:
3c:95:eb:ce:fc:b3:df:5b:cf:99:92:cc:2f:a4:c8:
fd:dd:c7:f8:3b:a6:f9:46:a8:ad:72:bd:7b:c7:22:
75:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F6:FC:16:05:01:5B:1E:E8:E2:6A:C6:49:61:13:17:5C:7A:F2:04
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/b_b8FgUBWx7o4mrGSWETF1x68gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.240.0/22
Signature Algorithm: sha256WithRSAEncryption
06:9e:e3:e6:c5:fc:21:d3:a5:c0:73:ec:04:4d:05:02:f6:3c:
cb:5e:fe:42:3b:07:10:e9:73:ff:b4:1c:fe:0d:df:ff:92:7b:
ad:51:95:5f:a4:2f:19:f9:b5:e6:7d:95:4b:8e:e1:4a:bf:14:
71:5c:38:dc:78:9e:ab:0d:83:df:22:4b:3b:08:d6:26:7a:07:
1b:5d:61:a8:25:d5:15:6d:50:4c:a3:ec:5a:39:01:7d:da:a0:
28:4b:43:7a:22:05:ba:3b:44:5b:ff:2b:b6:44:52:3f:df:19:
c4:b7:55:b9:63:b3:26:d1:12:0c:b1:27:00:1f:35:9e:c1:37:
7a:16:84:59:e7:19:a4:62:fc:47:d8:0b:6f:84:53:18:ac:ec:
ad:d8:08:56:09:ee:bb:f2:53:78:51:44:78:29:13:6c:67:fe:
f4:3f:31:98:c3:a8:ec:8e:7b:ce:cb:56:f4:52:41:03:05:3f:
2a:e9:99:de:b7:24:20:4f:3c:b7:54:2c:ab:bd:93:a1:93:93:
03:ee:75:ed:2a:e8:ac:e6:72:b7:95:31:98:57:ba:d6:f2:21:
88:4a:0d:e5:4a:0f:b7:fc:32:f4:2b:95:b4:a9:ee:be:98:88:
a7:9f:d0:a3:d5:4c:fc:a8:59:80:77:79:99:a2:9d:26:e2:5a:
e5:23:8d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:54:42 2026 by rpki-client