Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/BVqqb8lSIphtFXGqi1sz49tXm0E.roa
File: BVqqb8lSIphtFXGqi1sz49tXm0E.roa (raw, json)
Hash identifier: ccDupErLCJ+UOpMWaTKoluVs74aytETrBSW4WCesOvI=
Subject key identifier: 05:5A:AA:6F:C9:52:22:98:6D:15:71:AA:8B:5B:33:E3:DB:57:9B:41
Certificate issuer: /CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Certificate serial: 019CE7E38223CC4F6A428770561EE40DF8BC
Authority key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/BVqqb8lSIphtFXGqi1sz49tXm0E.roa
Signing time: Fri 13 Mar 2026 15:49:32 +0000
ROA not before: Fri 13 Mar 2026 15:49:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197782
IP address blocks: 195.160.168.0/23 maxlen: 24
2001:67c:275c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:e3:82:23:cc:4f:6a:42:87:70:56:1e:e4:0d:f8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Validity
Not Before: Mar 13 15:49:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=055aaa6fc95222986d1571aa8b5b33e3db579b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:b9:f3:c9:38:c4:ed:ba:cc:31:f7:73:f7:
7d:03:2e:fb:31:42:34:aa:89:a7:cc:6b:ef:7e:e1:
8c:28:6c:e7:b0:b0:81:a2:1e:5f:5a:c7:57:8d:fd:
42:58:f3:d2:0f:af:9c:3b:a9:13:86:bb:f0:1d:b2:
f6:b8:71:8a:49:89:b4:32:11:80:ab:87:dd:cf:e4:
1b:bd:92:fa:a5:b5:29:dc:b8:b0:50:5b:99:50:b1:
a9:7d:b8:21:d9:e4:5f:f5:14:91:73:33:e9:ed:64:
aa:26:b1:ca:50:56:17:35:16:8f:d4:56:23:0d:80:
25:65:12:48:a1:2f:82:dc:c1:1e:cb:98:55:15:4e:
23:40:c8:68:b2:23:8c:e0:08:e4:fd:5b:f2:66:94:
24:c7:58:41:77:32:fb:b0:83:ec:0a:5a:9c:23:07:
9e:ff:b6:cb:45:42:4c:64:43:a3:b8:fc:ee:7c:7b:
44:ee:05:b8:8b:9f:4c:25:4e:0d:03:6e:7d:df:14:
70:17:c0:55:ab:16:84:1f:f3:87:93:18:63:0b:35:
2b:9e:f0:ba:53:06:f5:45:1e:1f:a5:c9:8e:5f:20:
99:64:c4:80:66:27:28:4c:d1:0f:51:e5:bc:c6:04:
f7:8f:6c:f7:32:fe:78:ec:31:72:fa:c3:33:b6:df:
43:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5A:AA:6F:C9:52:22:98:6D:15:71:AA:8B:5B:33:E3:DB:57:9B:41
X509v3 Authority Key Identifier:
keyid:7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/BVqqb8lSIphtFXGqi1sz49tXm0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.168.0/23
IPv6:
2001:67c:275c::/48
Signature Algorithm: sha256WithRSAEncryption
63:91:5d:94:6f:0b:e6:51:e1:28:a2:5b:81:fa:19:81:9e:42:
c0:3c:de:54:81:ca:2c:e6:9d:83:e2:5e:76:c3:ba:6a:26:04:
f6:42:cd:e7:25:26:59:79:13:c2:ad:7d:62:dc:09:88:da:21:
77:e8:37:36:25:d2:5e:cd:c7:7b:d5:71:a1:a9:ec:f8:cd:c7:
c1:58:45:84:74:62:04:e8:bf:bb:bf:e8:b2:6f:f2:b8:cd:69:
42:d0:8a:49:3b:b0:18:07:28:1f:90:a5:09:08:eb:d2:88:56:
e2:7d:c6:66:75:37:fa:68:29:bc:41:6f:9f:39:6a:bb:4a:23:
e9:12:a1:80:89:da:8a:bf:6d:6f:da:96:42:c8:60:ec:bc:f0:
08:01:38:23:78:ac:6c:ae:4e:a8:ec:3f:60:d6:39:da:0b:fd:
de:f4:6b:77:26:65:e3:de:7e:b1:35:73:d0:cb:79:8f:f8:52:
ec:fe:9f:92:a4:a2:e6:15:7f:41:51:da:e8:df:06:61:30:70:
9c:f3:f7:cb:88:5c:4c:79:ae:09:96:12:11:53:a8:36:6c:82:
a1:54:e5:2f:5a:89:67:17:d5:40:74:4e:e6:43:f4:75:c1:b4:
0c:8e:d4:b9:59:7c:ed:bf:90:a0:fe:8a:3f:36:82:c1:3f:9d:
be:dc:4b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:28:28 2026 by rpki-client