Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/7BOKK6Tl9KRbFdrQtKoSEGrM2ns.roa
File: 7BOKK6Tl9KRbFdrQtKoSEGrM2ns.roa (raw, json)
Hash identifier: 0WZmcRa658Us5LFqpepkQ3ZD0Z3AX8LDSbJ/uzthFek=
Subject key identifier: EC:13:8A:2B:A4:E5:F4:A4:5B:15:DA:D0:B4:AA:12:10:6A:CC:DA:7B
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019D94AA916493658C551C8050CB12B1E171
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/7BOKK6Tl9KRbFdrQtKoSEGrM2ns.roa
Signing time: Thu 16 Apr 2026 05:01:39 +0000
ROA not before: Thu 16 Apr 2026 05:01:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210705
IP address blocks: 5.159.54.0/24 maxlen: 24
188.212.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:94:aa:91:64:93:65:8c:55:1c:80:50:cb:12:b1:e1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Apr 16 05:01:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec138a2ba4e5f4a45b15dad0b4aa12106accda7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:2e:54:fa:60:71:16:3a:0f:70:8f:89:3d:
5b:00:67:87:fd:0c:72:3b:f3:02:c9:b0:90:df:05:
05:ef:30:86:36:a8:22:d9:9e:2b:22:ac:4b:6e:7e:
9a:ef:2b:39:0f:21:05:f0:fc:e2:bf:da:57:14:ff:
83:7e:54:96:bd:cd:ec:17:b6:94:3e:d7:4d:29:5b:
54:8f:0d:86:04:0c:09:5c:d5:7e:f9:ea:c3:5d:46:
a4:85:11:ec:35:7e:d3:2d:59:60:02:34:35:46:4a:
52:63:c7:6e:39:02:30:82:eb:fa:c3:cd:3d:10:16:
26:52:55:0a:db:34:62:1d:19:ff:f9:5c:c2:dc:ea:
80:3a:43:bc:5d:a0:2a:45:2c:33:fb:dc:31:7c:e9:
12:30:27:ca:94:73:41:5f:f8:72:e3:26:7a:e7:f7:
2c:7e:71:8c:a7:16:9f:1d:73:3c:00:90:75:56:c7:
ea:95:c3:28:bd:75:10:e2:b1:c9:f7:2f:74:d9:bc:
66:25:e9:7b:b0:26:1d:3a:b5:18:34:60:96:09:06:
e1:29:42:6d:b7:e8:99:4c:52:73:31:01:c5:ba:0d:
75:24:7d:fc:0a:1c:f6:57:a2:6c:0b:33:8e:2b:30:
3a:fa:72:48:a7:4f:73:d8:14:8c:75:b5:a2:d7:cf:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:13:8A:2B:A4:E5:F4:A4:5B:15:DA:D0:B4:AA:12:10:6A:CC:DA:7B
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/7BOKK6Tl9KRbFdrQtKoSEGrM2ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.54.0/24
188.212.97.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:0d:b5:23:83:79:96:15:78:a7:57:8a:7d:ce:5c:4e:a2:13:
7d:f9:18:89:69:9c:01:a4:d7:54:55:13:37:e8:ea:65:54:8c:
da:57:5d:bc:a7:7e:18:bb:13:0a:62:f9:70:11:9b:55:4c:96:
87:2b:af:10:4a:eb:56:cd:c2:ff:c1:7f:9f:05:e2:2b:a8:a0:
b3:55:bd:c5:a8:a7:9d:07:15:a5:60:95:ea:3d:a2:ce:ec:27:
8c:0d:3f:4a:e5:72:8d:8b:cf:f8:ff:3b:cf:d5:07:5b:92:6a:
f6:fe:1d:09:97:09:c4:d8:67:5e:f8:ce:ac:b3:a9:bf:ff:78:
20:df:9f:ad:d0:62:a3:a1:d6:ef:b2:b4:9b:cb:e2:47:b4:17:
c3:8c:56:1f:ff:a6:3c:4e:1d:d2:3a:08:74:e8:f3:e2:45:cf:
ca:6b:56:32:0d:45:b3:5d:69:a5:d8:cd:8b:7a:c2:0c:4c:82:
c2:cb:05:f7:d9:de:dc:24:e2:fc:03:cc:50:78:e7:19:a6:b5:
29:c1:5b:6a:0c:8d:cb:d7:28:40:10:e6:8c:9f:9b:a8:cd:1e:
ef:20:bb:46:af:27:b7:6b:17:2a:a6:60:83:f1:41:5c:73:c1:
d9:f9:d4:7f:20:cf:81:bd:99:a9:45:88:f5:55:0a:96:c3:f8:
40:0e:34:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:00 2026 by rpki-client