Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/_2bBQtFU643Ua_XDUBQXnI5_hL0.roa
File: _2bBQtFU643Ua_XDUBQXnI5_hL0.roa (raw, json)
Hash identifier: o1RrXnEGdNnf+Cc7zxGHA3KTxxkiPiJd3UQspAymEfg=
Subject key identifier: FF:66:C1:42:D1:54:EB:8D:D4:6B:F5:C3:50:14:17:9C:8E:7F:84:BD
Certificate issuer: /CN=8a39dd1d13eaf98c007463d95a8b2ffdea236ce3
Certificate serial: 019F236893CDA2D395434E065C83925049C1
Authority key identifier: 8A:39:DD:1D:13:EA:F9:8C:00:74:63:D9:5A:8B:2F:FD:EA:23:6C:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/_2bBQtFU643Ua_XDUBQXnI5_hL0.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43519
IP address blocks: 51.149.0.0/24 maxlen: 24
51.149.1.0/24 maxlen: 24
51.149.254.0/24 maxlen: 24
51.149.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:93:cd:a2:d3:95:43:4e:06:5c:83:92:50:49:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a39dd1d13eaf98c007463d95a8b2ffdea236ce3
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff66c142d154eb8dd46bf5c35014179c8e7f84bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:09:bd:c8:86:cc:05:fe:a4:f4:d3:3e:a1:
bf:eb:a0:18:b1:3c:52:56:c8:0e:9f:a4:14:66:d8:
67:96:d3:20:f7:c6:18:a1:19:5b:8b:7a:ef:5f:c5:
4f:59:12:d1:be:b6:b1:08:a8:bd:7b:01:e7:03:96:
bf:c8:1b:de:22:6a:e2:e1:23:ab:09:25:1b:fc:2a:
92:e6:70:8a:38:7c:53:c3:03:ad:b8:da:da:78:9f:
b1:5e:76:cc:90:5b:0f:e0:d5:0b:65:dc:d4:67:d5:
0c:0b:24:41:ba:6b:a5:5c:6e:2a:f2:95:93:ed:8c:
38:64:54:69:22:2d:dc:ca:c1:e5:69:6b:c7:8e:68:
0b:61:19:c4:27:f0:87:40:4f:39:57:e9:e1:7e:a9:
0c:a1:63:f1:91:f3:85:e1:4e:2d:f7:86:2c:75:07:
01:c7:7d:54:96:fc:43:c9:cb:96:a4:22:d1:bc:c2:
af:6b:b6:6e:5e:fd:2a:0c:39:f1:3f:13:96:ed:d7:
e0:c6:88:ac:33:ad:77:67:e3:7b:36:a7:a1:96:60:
22:f8:bd:8b:07:e2:3c:9a:6b:6d:4d:93:40:49:65:
25:2d:f5:cc:5e:28:00:f2:4e:43:3c:20:d1:f5:0c:
03:02:73:5b:cd:91:a5:f0:97:cc:7a:9a:dc:a1:8d:
79:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:66:C1:42:D1:54:EB:8D:D4:6B:F5:C3:50:14:17:9C:8E:7F:84:BD
X509v3 Authority Key Identifier:
keyid:8A:39:DD:1D:13:EA:F9:8C:00:74:63:D9:5A:8B:2F:FD:EA:23:6C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/_2bBQtFU643Ua_XDUBQXnI5_hL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.149.0.0/23
51.149.254.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:cd:c8:bd:59:68:9e:db:da:c5:82:30:4f:6a:50:c2:6a:e9:
e1:4c:05:f3:dc:bc:ca:17:18:94:c5:21:27:53:b4:96:75:4b:
d3:86:c3:a1:fa:f3:17:20:21:10:12:93:04:cf:a8:db:6c:5e:
fc:f1:43:44:82:06:cd:66:7c:f8:d4:55:5b:20:44:2c:f9:79:
e1:13:23:be:6b:c4:eb:a0:62:75:8f:b4:f8:40:dc:de:4b:e3:
db:3c:7d:c0:15:5a:f1:0d:d8:22:8d:c1:36:55:e2:c7:54:59:
8e:e3:fd:1b:7b:25:e6:2f:95:fa:68:ff:bb:dd:64:7f:b9:f3:
ff:ca:2a:1b:4c:dc:96:9d:90:bc:93:a0:78:fa:a4:91:17:f0:
d0:0d:a8:fc:e3:7c:00:06:c8:58:57:d1:45:d3:04:5d:6f:90:
90:a8:dc:8a:3e:46:d3:a6:2e:69:c2:6f:4e:88:03:0c:56:4e:
95:76:bb:a1:d3:50:bd:df:2c:7f:ae:82:bb:96:e7:1c:70:ad:
16:d8:5c:a3:02:d7:42:08:d8:9b:ca:93:77:12:b9:92:2b:36:
cd:a6:b8:cf:6b:87:8f:ae:3b:56:28:a6:46:b0:46:3d:e4:9b:
6f:eb:12:9a:a2:8c:35:34:22:0b:1d:ab:29:5a:db:bd:a8:d5:
27:77:25:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:47 2026 by rpki-client