Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/bXnYhv42SK3J_ZuBABFK8IDz1yo.roa
File: bXnYhv42SK3J_ZuBABFK8IDz1yo.roa (raw, json)
Hash identifier: //woNvHZB41M+uDAGPVK2inhLGWjh8SUvLT/ycnfsRM=
Subject key identifier: 6D:79:D8:86:FE:36:48:AD:C9:FD:9B:81:00:11:4A:F0:80:F3:D7:2A
Certificate issuer: /CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Certificate serial: 019E3A364966700E0083C29C346AA57081F4
Authority key identifier: 50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/bXnYhv42SK3J_ZuBABFK8IDz1yo.roa
Signing time: Mon 18 May 2026 08:31:36 +0000
ROA not before: Mon 18 May 2026 08:31:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 153.56.140.0/24 maxlen: 24
153.56.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:36:49:66:70:0e:00:83:c2:9c:34:6a:a5:70:81:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Validity
Not Before: May 18 08:31:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d79d886fe3648adc9fd9b8100114af080f3d72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:52:6e:14:45:27:06:01:2a:5f:3a:2c:7b:
d8:79:e0:02:b0:b8:18:f6:a4:cb:55:f3:4c:6b:3c:
66:70:29:27:14:86:35:be:7d:92:87:fd:ec:75:40:
07:b8:b3:80:73:7d:c6:e9:30:42:37:73:e6:ef:61:
4f:07:4c:70:33:af:85:6a:e4:62:ad:72:cc:d1:e6:
7d:fa:d0:bd:6f:a4:0f:c1:58:f4:96:2b:b5:05:d6:
17:b7:5d:e0:f0:9a:db:9e:cc:c0:7d:d6:77:dd:f8:
d1:8b:7a:ac:09:70:7a:30:60:c5:f0:68:ff:65:f4:
61:f9:b1:16:f7:bf:62:e2:8b:bd:d6:e8:b2:1c:f1:
82:f4:df:39:66:c1:72:e7:6e:4b:93:9c:b0:b7:4a:
88:53:92:eb:32:c6:c5:36:b6:42:d3:3d:74:d6:22:
da:cf:df:68:da:47:45:0b:2c:0e:7a:ca:80:b4:59:
d1:13:79:d0:9c:e2:c8:d0:c4:a0:b0:66:7e:00:54:
63:0b:b7:91:51:53:93:95:df:80:1d:9f:84:1a:43:
cd:d9:f0:83:0c:be:36:57:8d:75:ad:1a:d1:70:38:
bc:f6:12:cb:da:1d:2e:aa:10:d2:bb:c2:af:ad:07:
b6:15:60:da:8d:41:11:46:5d:3f:b3:de:7e:54:1f:
61:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:79:D8:86:FE:36:48:AD:C9:FD:9B:81:00:11:4A:F0:80:F3:D7:2A
X509v3 Authority Key Identifier:
keyid:50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/bXnYhv42SK3J_ZuBABFK8IDz1yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.140.0/23
Signature Algorithm: sha256WithRSAEncryption
20:ce:bf:7b:52:91:f3:79:ba:8f:4f:16:13:91:d0:80:26:b9:
1a:d5:ae:fa:2a:99:e4:8d:73:25:01:9b:90:46:98:b6:6f:c2:
a8:ae:55:25:19:dd:76:c3:26:22:6c:21:ff:57:ff:12:a4:00:
3f:67:15:dd:a2:67:54:fc:0f:c6:16:b0:79:16:0e:a6:18:68:
b9:66:b6:56:f4:32:da:ed:5f:86:c6:ee:31:d4:ab:36:58:33:
0a:5b:c0:53:cf:08:93:fb:72:0f:48:01:75:8c:cf:6b:f8:c3:
55:89:ac:f0:38:65:5b:c0:30:38:34:f1:71:23:aa:8e:c8:3d:
ad:e3:5c:d2:29:a6:a6:81:8f:50:aa:c3:b5:e6:38:46:99:c9:
9b:69:6d:ae:a5:ed:cb:0f:28:80:11:0f:8d:9f:16:86:43:e2:
a8:8b:1c:28:1c:bb:a5:82:5c:76:9b:37:60:df:17:52:05:13:
d4:ff:f9:79:d2:d1:5e:52:a5:a9:3c:ef:c2:5b:3d:c1:5f:23:
d4:9d:ef:dc:ce:66:a8:2c:3a:58:04:8c:f7:0e:7b:30:d3:bc:
39:ef:72:f7:be:80:af:db:03:6b:29:50:75:43:7b:38:8c:2b:
05:78:00:9f:0c:c8:d2:95:ab:6b:b8:0d:8a:b2:e4:13:6d:2d:
5f:3a:71:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:58:56 2026 by rpki-client