Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b5nF8HbXIA7SdwtvU1wWo4mJyvg.roa
File: b5nF8HbXIA7SdwtvU1wWo4mJyvg.roa (raw, json)
Hash identifier: oDqqd7QnrudFtkUxU75KRteBAM0auvQ+VAIQfdJWS3w=
Subject key identifier: 6F:99:C5:F0:76:D7:20:0E:D2:77:0B:6F:53:5C:16:A3:89:89:CA:F8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019ECC0537964FDBD15ED19E14D725E5D360
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b5nF8HbXIA7SdwtvU1wWo4mJyvg.roa
Signing time: Mon 15 Jun 2026 16:02:34 +0000
ROA not before: Mon 15 Jun 2026 16:02:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219501
IP address blocks: 94.249.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cc:05:37:96:4f:db:d1:5e:d1:9e:14:d7:25:e5:d3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 15 16:02:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f99c5f076d7200ed2770b6f535c16a38989caf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:7a:6e:a0:cc:53:53:4a:da:6b:88:45:9f:
eb:b4:48:5c:1c:a6:c1:cc:0a:a0:c7:df:2d:22:a5:
1b:42:ed:0f:fb:c5:4e:c4:c5:82:cb:c9:d6:51:48:
1c:fd:32:95:4f:09:39:c4:19:d7:07:77:2e:07:d1:
2a:a3:a4:90:2b:1c:25:eb:3c:8b:85:ae:5d:e3:5f:
38:04:39:c2:22:c7:8e:a3:22:8a:4b:4e:13:cf:15:
64:fa:8e:8c:51:9d:cc:2c:97:47:14:aa:ff:b9:29:
78:8e:b0:44:76:5b:ce:f3:9e:7a:fb:67:72:c5:db:
b0:e2:e0:48:12:17:14:a0:0a:43:57:ba:57:81:c3:
30:b0:4a:12:c1:d9:f4:9c:6b:ec:8d:e3:6c:f6:5d:
be:74:5f:24:0c:99:2c:f2:5e:f3:58:2a:e0:f9:92:
80:51:34:dd:4e:fc:4c:4c:82:71:ae:04:f9:bd:33:
1a:23:68:c3:9d:1b:84:e2:e2:b4:aa:e3:e6:40:cd:
8d:5e:cf:20:77:09:b8:93:0b:a2:84:07:d0:58:b9:
0e:c9:a7:84:04:51:1d:a5:ac:4a:6a:28:8b:6a:2e:
fe:c1:36:91:7e:30:c3:2f:26:1f:5b:57:d0:3c:40:
22:4f:e3:d7:7f:0d:bc:8d:3f:e1:39:57:98:fc:df:
c1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:99:C5:F0:76:D7:20:0E:D2:77:0B:6F:53:5C:16:A3:89:89:CA:F8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b5nF8HbXIA7SdwtvU1wWo4mJyvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.180.0/24
Signature Algorithm: sha256WithRSAEncryption
64:00:0b:20:51:ee:13:bf:2a:57:41:24:4c:d2:d2:93:bb:0b:
d6:22:89:4b:f7:57:9e:1f:67:23:3a:01:6f:9b:f2:f8:2e:01:
4b:6e:9c:de:37:58:c8:18:cf:52:82:a7:cf:b4:73:6e:83:65:
5b:a7:31:e3:21:16:88:15:a5:07:34:f6:38:aa:30:8e:e2:f1:
2d:93:96:5d:8e:a2:08:fa:99:85:e8:45:33:94:6d:6c:05:79:
48:dd:04:49:42:0a:e0:71:df:62:3e:f5:ed:1c:0e:a4:6a:48:
9c:10:34:db:94:3b:c2:b1:c1:c9:39:61:46:7e:1a:68:76:0c:
4a:17:b9:a0:e5:0f:21:33:aa:7c:53:d3:8c:74:04:d9:c8:04:
e7:f5:ce:dd:19:87:97:54:17:fc:e2:3e:8d:bc:a4:0b:ab:0c:
9a:22:d5:d2:79:92:75:b0:e3:be:25:14:44:9e:d0:8a:90:c5:
2d:61:bd:d8:a3:f8:86:19:33:7c:77:87:5c:a0:22:c9:4e:21:
aa:ae:54:ee:26:9f:0a:60:ba:07:81:f4:16:2b:d1:b6:3c:6e:
2f:1f:01:d7:d5:d2:b4:f8:e8:1e:60:52:ab:af:5d:b4:39:f9:
4b:bb:c7:6e:43:a7:c0:99:57:56:ff:60:d6:5b:ed:b4:95:9f:
89:f0:d6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:55:29 2026 by rpki-client