Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/BaNWyPJkYMdl4AcgG8334MdnOcE.roa
File: BaNWyPJkYMdl4AcgG8334MdnOcE.roa (raw, json)
Hash identifier: T74jpYeo37fOzj45FGRDC/CZ0GAhyN9geA/QxTHQiHk=
Subject key identifier: 05:A3:56:C8:F2:64:60:C7:65:E0:07:20:1B:CD:F7:E0:C7:67:39:C1
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 019D0668F45C34A681986BF80B734B04E8D4
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/BaNWyPJkYMdl4AcgG8334MdnOcE.roa
Signing time: Thu 19 Mar 2026 14:03:54 +0000
ROA not before: Thu 19 Mar 2026 14:03:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198704
IP address blocks: 91.229.22.0/24 maxlen: 24
91.238.145.0/24 maxlen: 24
185.184.124.0/22 maxlen: 22
185.184.124.0/24 maxlen: 24
185.184.125.0/24 maxlen: 24
185.184.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:68:f4:5c:34:a6:81:98:6b:f8:0b:73:4b:04:e8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Mar 19 14:03:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05a356c8f26460c765e007201bcdf7e0c76739c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:79:e6:b1:d7:71:08:71:2c:a2:89:5f:e2:
44:7a:a3:a7:73:50:e5:e2:5d:62:c7:f8:cb:26:f5:
70:46:6d:9e:c1:a4:c6:df:89:1f:a8:1e:6a:37:e6:
09:4b:68:09:90:12:17:54:49:a4:b7:33:bf:f2:37:
83:d0:a1:99:7c:55:dc:04:1b:c3:f6:c9:86:f5:63:
12:7e:3e:23:30:44:9d:86:ae:81:89:69:55:47:e7:
6d:8b:43:5d:0a:d3:79:37:56:b5:4a:0e:03:09:97:
b4:70:ad:9f:31:d5:e8:5f:4a:80:fa:53:e4:d9:8e:
49:fb:ec:05:ad:79:c7:9d:2b:22:ca:9e:f8:aa:9b:
6f:ce:d9:34:09:8c:02:c9:53:f1:af:61:10:aa:69:
25:42:13:98:5a:d2:94:9d:d6:c9:01:21:6d:d5:91:
a6:47:43:ce:e4:04:b3:d5:2b:a2:6f:be:d3:32:df:
48:93:9d:a4:9b:d1:e8:9f:0b:08:f9:4f:3d:6d:31:
b1:16:f8:b5:7a:2b:93:76:93:21:36:e8:86:ca:88:
82:bc:bf:39:00:1e:77:67:dc:51:fe:4f:dc:57:3b:
9f:65:ed:04:f3:88:13:61:2f:7c:cb:0c:ec:62:7e:
1c:f6:fd:b7:e8:26:5b:d5:83:f4:6b:46:3c:0c:2f:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A3:56:C8:F2:64:60:C7:65:E0:07:20:1B:CD:F7:E0:C7:67:39:C1
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/BaNWyPJkYMdl4AcgG8334MdnOcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.22.0/24
91.238.145.0/24
185.184.124.0/22
Signature Algorithm: sha256WithRSAEncryption
63:2d:35:86:38:04:46:84:8e:47:dd:77:89:b3:51:e7:d7:d9:
25:ff:a0:4b:d8:ca:a3:4d:1e:1e:10:ae:6f:84:1d:a6:b8:fd:
53:5e:0d:53:a1:1d:73:07:67:0a:33:8c:e3:17:4a:ec:84:c1:
16:42:61:d2:35:84:51:ca:3d:65:19:d5:fd:3b:01:60:fb:71:
65:9b:28:5d:1d:94:d1:a7:44:30:65:88:c7:dd:fa:19:e5:f6:
e7:9c:d2:bf:9e:47:d4:9a:29:f3:71:39:36:bc:14:f5:8a:2e:
04:aa:4a:a0:21:39:6e:f0:67:e4:1a:02:d3:fd:aa:fa:56:b1:
b6:35:87:a8:62:9b:cf:ab:a0:de:50:ef:77:53:ce:73:b6:c9:
4c:b2:8b:dd:43:6e:78:4f:0f:f5:a0:f3:b8:e4:57:09:8e:9f:
3b:ae:a9:87:40:50:ed:68:38:f0:6f:e4:e3:15:c5:4b:d5:f8:
18:b5:b3:7e:48:41:9c:9e:61:b8:51:6d:47:a8:8d:03:8b:e8:
c5:31:f8:8a:eb:08:4e:ac:ba:45:13:39:8c:f7:af:0c:60:fd:
28:83:65:3e:a9:a4:39:23:39:3f:05:bc:0b:74:4b:54:8e:20:
aa:1e:f2:fb:25:f6:ba:cb:18:ec:6e:fa:d3:3d:00:91:ef:f1:
eb:3e:40:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:02:07 2026 by rpki-client