Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/vxY5YOyQJopbX8qpr14Ux26RkdM.roa
File: vxY5YOyQJopbX8qpr14Ux26RkdM.roa (raw, json)
Hash identifier: fDAHQs3Q5OImjbGfqBRNlC+Qd/ubkf2mMZjSA+aTwZs=
Subject key identifier: BF:16:39:60:EC:90:26:8A:5B:5F:CA:A9:AF:5E:14:C7:6E:91:91:D3
Certificate issuer: /CN=a87ea7eb7a6e9d0d49ac05f25a3793ea6bf9bcd5
Certificate serial: 019D15D9D1D995B72ECC81FDC9CCD0A63893
Authority key identifier: A8:7E:A7:EB:7A:6E:9D:0D:49:AC:05:F2:5A:37:93:EA:6B:F9:BC:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qH6n63punQ1JrAXyWjeT6mv5vNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/vxY5YOyQJopbX8qpr14Ux26RkdM.roa
Signing time: Sun 22 Mar 2026 14:01:29 +0000
ROA not before: Sun 22 Mar 2026 14:01:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209224
IP address blocks: 185.164.84.0/23 maxlen: 24
185.164.86.0/23 maxlen: 24
193.111.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/qH6n63punQ1JrAXyWjeT6mv5vNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/qH6n63punQ1JrAXyWjeT6mv5vNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qH6n63punQ1JrAXyWjeT6mv5vNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:15:d9:d1:d9:95:b7:2e:cc:81:fd:c9:cc:d0:a6:38:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87ea7eb7a6e9d0d49ac05f25a3793ea6bf9bcd5
Validity
Not Before: Mar 22 14:01:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf163960ec90268a5b5fcaa9af5e14c76e9191d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:db:8b:45:87:a1:da:5f:63:00:03:a9:66:
a2:65:24:32:81:f6:c2:7b:cb:57:1f:f0:47:85:4e:
ad:f8:bb:88:a2:91:7f:38:f0:4d:e0:3c:03:0f:df:
a3:fb:74:cf:8a:b5:22:6a:6e:b1:7b:6f:ea:f3:ad:
42:5a:d0:3b:6d:eb:c2:94:32:1b:5f:1c:e2:fd:e0:
7b:79:da:42:89:6f:8d:85:39:87:8d:ed:3d:44:83:
f9:9d:a2:52:8c:e5:17:18:03:ca:b0:e7:82:87:3d:
0a:af:7a:5e:18:63:f7:02:6e:2f:0b:18:5b:aa:da:
1b:fc:2a:fc:9b:67:d1:6d:76:9b:89:d4:a0:7f:ea:
1c:d0:cd:55:80:e8:c1:a2:47:1d:e0:86:97:a1:5d:
0a:16:dd:d0:58:9d:c0:12:c6:50:58:fc:1c:72:2d:
e6:b6:d3:e1:3c:30:15:2f:7c:d7:85:c6:82:12:c4:
51:48:0b:dd:05:12:a9:1a:40:3e:de:0b:cd:94:7e:
aa:36:c1:05:53:67:a0:b2:79:da:21:49:92:a7:0c:
12:39:57:6a:44:8f:97:95:ff:f9:b8:ea:80:d9:8a:
db:11:a2:5a:28:e7:80:52:5c:ab:c2:86:6b:da:dc:
8f:f9:6f:0d:ee:bf:b0:6c:0b:80:cc:16:03:24:2b:
33:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:16:39:60:EC:90:26:8A:5B:5F:CA:A9:AF:5E:14:C7:6E:91:91:D3
X509v3 Authority Key Identifier:
keyid:A8:7E:A7:EB:7A:6E:9D:0D:49:AC:05:F2:5A:37:93:EA:6B:F9:BC:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qH6n63punQ1JrAXyWjeT6mv5vNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/vxY5YOyQJopbX8qpr14Ux26RkdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/qH6n63punQ1JrAXyWjeT6mv5vNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.84.0/22
193.111.169.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:fc:d4:be:19:71:ed:68:1c:b3:5c:fc:31:bf:eb:7f:47:c2:
22:79:4f:fc:8d:58:2d:cc:e2:cc:47:0e:8a:7f:5c:68:79:6d:
63:43:75:91:03:b1:78:3c:e4:81:41:25:88:ff:25:9f:02:89:
34:15:6e:c9:4f:af:d0:73:36:90:16:a5:c9:a4:09:ad:fb:87:
f2:4d:75:5b:2b:39:5b:fe:04:3f:9c:fa:45:67:ac:36:07:88:
f9:23:5b:4b:e9:ec:fa:d7:22:44:92:b4:e0:7c:d0:2d:b7:7d:
4b:5f:ad:a1:d4:ce:73:c4:c0:69:53:8c:4a:3d:41:c3:a7:5f:
6c:62:91:e8:bb:78:31:0b:e2:76:e2:ee:21:ca:33:bf:a3:8a:
ae:f4:35:7e:04:ad:c3:ad:b6:4e:aa:fd:3e:0b:68:ef:3d:59:
58:57:6b:fa:4c:59:a7:ab:49:26:28:fc:40:e0:df:a6:40:fe:
4f:47:42:d6:a3:fc:68:3e:3f:58:84:db:18:10:fb:d4:1e:19:
f3:7b:28:00:55:52:61:dd:85:76:f4:8c:3e:6d:8c:23:a4:6f:
af:59:66:f7:18:51:92:38:36:eb:0b:b6:6f:46:3e:35:98:c2:
cc:13:8e:60:67:6d:17:6a:6c:fc:04:96:88:3c:e6:b3:81:18:
e1:4d:50:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:33:56 2026 by rpki-client