Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/FdICOUOUZECuZrYTF0rlnSSQfSg.roa
File: FdICOUOUZECuZrYTF0rlnSSQfSg.roa (raw, json)
Hash identifier: UxVhHcCRrdLBmXzhpiCm6r/fpPjHyB3h0v03x9mBzNo=
Subject key identifier: 15:D2:02:39:43:94:64:40:AE:66:B6:13:17:4A:E5:9D:24:90:7D:28
Certificate issuer: /CN=8a39dd1d13eaf98c007463d95a8b2ffdea236ce3
Certificate serial: 019F2368926ECFB7FF4A5DB178E655BC5597
Authority key identifier: 8A:39:DD:1D:13:EA:F9:8C:00:74:63:D9:5A:8B:2F:FD:EA:23:6C:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/FdICOUOUZECuZrYTF0rlnSSQfSg.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 51.149.8.0/24 maxlen: 24
51.149.14.0/24 maxlen: 24
51.149.250.0/24 maxlen: 24
51.149.251.0/24 maxlen: 24
51.149.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:92:6e:cf:b7:ff:4a:5d:b1:78:e6:55:bc:55:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a39dd1d13eaf98c007463d95a8b2ffdea236ce3
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15d2023943946440ae66b613174ae59d24907d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:c7:e9:e7:1b:32:2c:35:40:fc:b5:71:7b:
76:bc:9d:39:73:6f:17:0a:78:ca:88:3f:82:86:74:
bc:94:1c:fe:93:06:0f:40:a8:76:7e:91:ea:a7:a2:
87:e8:5e:a2:99:7f:98:a4:3b:52:e8:5f:a6:bc:03:
70:b0:26:09:e3:f3:be:b0:1c:f2:7a:6f:bf:26:03:
38:fe:d7:19:bc:f3:f9:da:19:e2:ac:71:7b:46:d2:
72:e7:79:b6:19:29:b4:5f:61:98:d9:49:c5:ef:a6:
ea:d5:36:f3:2f:0b:3f:2b:9f:9f:07:86:cf:09:f0:
0f:81:f4:75:56:bd:fd:bb:3a:23:aa:99:b9:1f:0d:
4f:fb:5b:8f:bb:4e:4c:2e:2d:19:9e:26:ba:a5:b2:
6f:0a:90:f4:54:6b:45:6b:f9:e6:58:f7:d7:44:e8:
89:e3:4f:eb:83:e0:7b:b6:4d:ef:69:8e:71:ee:c4:
bf:ef:34:0d:21:4b:0f:90:b1:b7:65:16:85:0f:a3:
d9:2d:1b:8f:bf:eb:2f:45:bd:89:76:1f:27:f9:95:
66:e4:6a:f6:5d:48:ff:79:06:72:80:c8:31:7d:f7:
f0:d4:5d:ba:c6:8e:8e:a1:15:a6:e0:82:ae:28:1f:
ad:46:dc:fe:e9:98:ce:e9:84:e8:84:99:ac:02:fa:
26:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D2:02:39:43:94:64:40:AE:66:B6:13:17:4A:E5:9D:24:90:7D:28
X509v3 Authority Key Identifier:
keyid:8A:39:DD:1D:13:EA:F9:8C:00:74:63:D9:5A:8B:2F:FD:EA:23:6C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/FdICOUOUZECuZrYTF0rlnSSQfSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.149.8.0/24
51.149.14.0/24
51.149.250.0-51.149.252.255
Signature Algorithm: sha256WithRSAEncryption
7d:85:71:28:7d:e8:ff:d2:77:62:f3:d2:3b:3b:fe:13:0d:12:
e7:b1:b4:a9:7b:20:e4:95:94:28:6b:ab:2c:02:ea:9d:32:02:
0e:30:d7:73:36:ab:42:97:d8:e7:4a:1e:55:c4:c6:ba:3c:23:
7f:9e:4f:a4:9b:ea:0d:b4:7a:57:92:22:be:4d:11:99:a5:6c:
9a:b4:d7:1f:0a:fd:1e:15:f9:a3:37:37:60:6f:2e:a6:b9:c6:
d1:1a:cc:0b:3d:24:a9:02:ca:75:92:5c:e5:7e:ba:45:bd:21:
53:18:96:cb:b8:a1:71:7c:eb:fc:f9:4c:61:57:22:dd:59:3f:
cc:78:04:c2:89:65:61:7c:63:dc:ae:21:67:29:db:e2:99:5c:
6f:5c:f5:6c:37:78:20:1a:6b:70:2f:26:65:8e:0d:7f:fb:c2:
fb:5e:7a:ab:50:34:c4:71:08:74:49:41:27:3a:ec:48:0e:54:
f8:7f:33:9a:e0:e3:a2:b8:0d:d2:5d:79:e3:92:3e:8e:ac:4e:
09:5c:cf:5e:4e:36:00:87:a0:87:c0:eb:13:f9:ac:cd:8b:ef:
24:25:33:94:03:e9:d1:d5:d6:df:75:1d:cb:02:ca:7c:e8:67:
7e:c0:6b:74:01:dd:9c:97:03:2d:89:c0:eb:b3:81:6e:55:bb:
4f:65:b4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:53 2026 by rpki-client