Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/0EdfvneTgXTeC9ui4ACTcXNv5xw.roa
File: 0EdfvneTgXTeC9ui4ACTcXNv5xw.roa (raw, json)
Hash identifier: 346lVyjjfGJCuufzJCNpR1OPqgB0eeN8UYdxkGnYLEs=
Subject key identifier: D0:47:5F:BE:77:93:81:74:DE:0B:DB:A2:E0:00:93:71:73:6F:E7:1C
Certificate issuer: /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial: 019E421D99F07750BAC919DC21B9686A9730
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/0EdfvneTgXTeC9ui4ACTcXNv5xw.roa
Signing time: Tue 19 May 2026 21:21:36 +0000
ROA not before: Tue 19 May 2026 21:21:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216394
IP address blocks: 158.94.216.0/24 maxlen: 24
2a01:f905::/32 maxlen: 32
2a01:f905:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:42:1d:99:f0:77:50:ba:c9:19:dc:21:b9:68:6a:97:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Validity
Not Before: May 19 21:21:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0475fbe77938174de0bdba2e0009371736fe71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:fe:2e:a9:a1:79:88:7c:3c:34:ea:c7:f7:
bd:b8:69:8c:8b:e0:35:be:39:d0:af:c1:e6:ee:93:
64:e6:cf:a6:38:19:8f:db:f8:a4:13:f3:51:f2:92:
de:77:6f:71:3a:52:44:80:81:9e:75:7c:39:7d:9e:
a0:77:d6:28:66:04:a7:3d:4d:7b:9e:86:95:3b:2e:
6c:44:a2:d1:3a:86:54:e6:00:22:33:c9:01:9e:c0:
4b:cf:a6:57:22:0a:48:9a:14:02:43:c1:56:65:20:
45:17:94:5f:3f:a2:67:9b:d6:50:18:af:8a:49:71:
7f:01:e2:2d:25:e9:5d:e1:fa:b8:c1:46:18:f3:97:
b6:16:b8:9d:17:d5:36:da:a9:4f:47:63:3f:41:3f:
77:e6:e1:57:0d:3b:6a:97:ee:4b:e6:ec:0d:5a:c2:
f2:96:16:ac:dc:0d:0e:98:ab:f5:ef:fd:0f:7d:37:
35:8a:59:60:f1:57:44:c9:37:0f:b5:25:1d:73:4f:
25:42:35:5c:26:a6:25:b8:a2:79:96:56:ae:9c:8e:
dc:7a:f8:6b:c3:59:02:b3:12:95:ff:92:82:e6:0a:
b0:98:e2:00:a9:59:2a:08:a6:1a:90:65:e1:df:e3:
67:39:5d:6e:60:dc:7f:51:ba:6a:21:48:f9:63:84:
02:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:47:5F:BE:77:93:81:74:DE:0B:DB:A2:E0:00:93:71:73:6F:E7:1C
X509v3 Authority Key Identifier:
keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/0EdfvneTgXTeC9ui4ACTcXNv5xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.216.0/24
IPv6:
2a01:f905::/32
Signature Algorithm: sha256WithRSAEncryption
b1:9c:e1:ad:89:2f:7d:c7:4b:cf:0a:e6:66:42:9a:9b:3e:2f:
3f:5e:08:47:77:03:f7:01:31:19:03:fe:bd:3e:5f:e6:8b:ea:
1f:5d:fe:34:56:fa:96:58:14:a4:13:38:97:6c:99:5d:01:03:
e8:47:34:54:bf:08:99:18:ee:34:c9:47:f7:f7:58:75:9c:78:
d0:d7:a8:e3:c8:a2:f4:3f:89:c6:26:4b:5c:3a:b7:34:bc:df:
76:32:5c:7a:bc:78:3d:60:44:42:29:87:13:a9:15:a0:d0:7d:
89:2c:de:c9:02:f1:96:d7:6a:ef:7e:83:20:4a:04:e1:71:d7:
98:84:86:0d:39:f9:63:60:a4:95:ad:82:d4:35:c2:b7:85:03:
e2:41:ed:81:0a:6b:c5:54:d2:ba:8e:de:84:d4:be:8b:6e:89:
e8:2e:a7:84:d4:6b:dc:0d:f2:54:6c:e9:fe:e6:e0:42:2c:ac:
47:a6:a4:51:50:d7:0d:d6:97:44:b5:4e:67:0f:d4:93:a5:5c:
23:37:13:f1:f1:cc:8c:da:c6:5d:6f:c2:de:cd:23:ef:31:05:
64:f3:70:8d:8d:96:12:34:f5:c1:f9:7a:59:f3:79:a7:7a:b8:
69:18:87:d4:c2:50:a9:e9:71:f4:52:04:3a:1c:91:bc:cb:3b:
21:66:f1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:28:01 2026 by rpki-client