Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/B2D-91vraOqAD2d61HoX9ol0zHY.roa
File: B2D-91vraOqAD2d61HoX9ol0zHY.roa (raw, json)
Hash identifier: yFLvnEyO8RjxhWVklr+FYP543VAXIbxwc4Uu/yq5Ch4=
Subject key identifier: 07:60:FE:F7:5B:EB:68:EA:80:0F:67:7A:D4:7A:17:F6:89:74:CC:76
Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial: 01A1C4F424CF714E5F61987E1F105F846EB9
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/B2D-91vraOqAD2d61HoX9ol0zHY.roa
Signing time: Tue 10 Nov 2026 10:14:56 +0000
ROA not before: Tue 10 Nov 2026 10:14:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47377
IP address blocks: 194.62.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:f4:24:cf:71:4e:5f:61:98:7e:1f:10:5f:84:6e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Validity
Not Before: Nov 10 10:14:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0760fef75beb68ea800f677ad47a17f68974cc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:c1:a9:d7:84:67:21:b7:de:d2:bc:5a:1f:
8f:1d:9d:17:37:f9:5d:ba:3e:4a:29:0a:3a:58:b2:
88:98:e6:25:2b:0c:d5:f7:f6:d3:13:37:9b:3f:7d:
2d:ae:4b:a6:1a:92:c3:2e:a5:48:e4:e9:1b:45:7b:
59:82:c1:55:4b:5f:58:ba:24:a9:c0:ae:d7:af:43:
0d:e3:25:a6:dd:cd:d7:9f:1a:ed:51:df:64:a4:a3:
55:58:be:10:c2:a2:7a:61:48:03:cb:30:b3:5b:fc:
f5:4e:41:49:83:3a:d2:d1:49:cc:87:15:c5:2d:fa:
25:ed:33:c9:93:f7:7c:51:ca:e8:21:6a:6a:ab:78:
8e:1b:e4:c2:65:63:05:3c:9f:27:8d:fb:7c:8a:8c:
ab:d2:e9:e8:21:6a:21:4b:98:41:1b:e9:ad:44:0c:
16:6e:fd:3a:7c:d0:07:8c:a7:42:54:f5:ae:f1:11:
0e:09:ef:15:9f:60:3a:62:81:d4:90:ae:ac:29:6f:
3d:d0:df:8b:bb:8c:fe:10:86:d3:7f:89:35:a4:89:
47:da:cb:1f:50:e3:a5:4a:69:04:de:d2:ac:b6:e3:
2c:75:79:a7:d3:5e:74:7a:38:99:83:bf:06:76:4d:
06:3f:37:06:3e:2b:f5:65:80:fe:6f:40:12:95:cd:
e9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:60:FE:F7:5B:EB:68:EA:80:0F:67:7A:D4:7A:17:F6:89:74:CC:76
X509v3 Authority Key Identifier:
keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/B2D-91vraOqAD2d61HoX9ol0zHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.72.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:07:29:db:79:23:dc:3a:51:e3:ad:08:5b:72:a9:a4:75:f3:
5a:7c:7a:96:a8:49:d1:a7:94:96:f2:64:dd:71:ea:db:43:3d:
29:d4:de:1b:ba:02:35:f4:25:ec:d2:ae:79:58:6e:7c:73:9f:
01:2b:cf:f2:aa:27:b9:64:37:18:6b:48:4a:c1:b0:a2:47:ca:
a2:5f:d5:b3:e5:f5:07:5f:49:71:8c:76:4d:44:45:5c:aa:73:
da:cb:18:5d:85:40:2d:c2:9f:c9:88:c2:a4:0a:58:6d:f4:b9:
03:b2:db:08:19:21:01:ff:ae:5e:5d:62:fb:c2:05:18:98:5e:
85:6f:cf:84:d7:37:ec:59:3d:6d:41:09:a6:d6:cf:2c:6e:1f:
96:ef:33:59:76:af:f0:fe:7a:d3:fa:8c:c0:b8:15:30:4b:f1:
b9:19:f0:c5:9c:4f:00:b5:47:75:cd:4f:11:c8:6c:ce:f2:f3:
48:b0:d2:4d:e8:0d:de:a3:ee:c8:61:bb:bd:29:29:e5:da:0c:
7b:54:42:fa:78:e6:aa:62:73:9b:4c:37:53:13:b9:fa:a0:12:
de:24:88:5c:f8:fc:cd:a7:25:c5:af:5b:07:2b:08:1d:e5:b6:
d5:18:80:1a:6f:50:df:4c:15:09:a4:9d:52:64:f0:05:9c:2c:
9c:8d:39:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:29:27 2026 by rpki-client