Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0fBOVPEVt_Vn70y4H7R92SYVH6A.roa
File: 0fBOVPEVt_Vn70y4H7R92SYVH6A.roa (raw, json)
Hash identifier: AXH0b2vzi3eJ8ZGHrdb03qMvGfl3ImnFJSUpRqXJVtk=
Subject key identifier: D1:F0:4E:54:F1:15:B7:F5:67:EF:4C:B8:1F:B4:7D:D9:26:15:1F:A0
Certificate issuer: /CN=d1a564098ac765d0bed8491880916f61b6b8f18d
Certificate serial: 019C66F93077EC66739181A58E6F2E888E3A
Authority key identifier: D1:A5:64:09:8A:C7:65:D0:BE:D8:49:18:80:91:6F:61:B6:B8:F1:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aVkCYrHZdC-2EkYgJFvYba48Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0fBOVPEVt_Vn70y4H7R92SYVH6A.roa
Signing time: Mon 16 Feb 2026 15:02:12 +0000
ROA not before: Mon 16 Feb 2026 15:02:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214153
IP address blocks: 185.98.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aVkCYrHZdC-2EkYgJFvYba48Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:f9:30:77:ec:66:73:91:81:a5:8e:6f:2e:88:8e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a564098ac765d0bed8491880916f61b6b8f18d
Validity
Not Before: Feb 16 15:02:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1f04e54f115b7f567ef4cb81fb47dd926151fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:09:53:0f:15:3c:07:47:a0:fc:62:ac:b8:08:
a8:42:2c:30:fd:24:3d:31:52:da:e9:4f:06:8d:27:
3b:ca:3c:ee:e8:7f:58:89:a4:6f:a0:c8:43:84:65:
68:e1:c0:78:57:73:16:7d:2e:f5:c1:89:e5:1c:a7:
25:72:58:88:3a:4d:df:00:59:78:f6:b8:da:12:51:
31:15:d8:83:39:dc:28:d8:3c:c8:14:8f:bc:af:84:
b3:33:95:09:4d:bc:17:d1:1f:a5:5f:31:1a:1e:c7:
97:47:62:9c:86:64:fa:75:1a:6c:82:7a:ed:ad:fc:
01:c7:b5:16:68:c1:35:4c:d9:bd:0d:7c:d7:e8:41:
c5:ee:b7:6c:9f:b1:cc:8e:13:d7:61:12:02:71:ff:
bf:d8:8e:2d:22:c9:14:7f:1a:3e:21:ac:a7:53:b7:
03:6b:0c:36:f7:5c:ef:73:57:c5:7e:9d:c4:8c:1b:
32:85:1c:d3:c6:0f:c6:79:2e:80:d5:be:b4:39:1c:
99:bd:ea:53:f9:fc:0f:e6:bc:b0:05:5e:11:ca:36:
34:be:71:f4:25:c9:42:33:43:44:ea:61:6a:d2:57:
88:62:41:4c:b1:e4:43:f9:75:2d:d9:32:c7:4b:27:
57:f2:1d:4c:cf:d0:28:6c:5d:ed:18:35:61:5b:a6:
23:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F0:4E:54:F1:15:B7:F5:67:EF:4C:B8:1F:B4:7D:D9:26:15:1F:A0
X509v3 Authority Key Identifier:
keyid:D1:A5:64:09:8A:C7:65:D0:BE:D8:49:18:80:91:6F:61:B6:B8:F1:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aVkCYrHZdC-2EkYgJFvYba48Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0fBOVPEVt_Vn70y4H7R92SYVH6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.133.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:bc:e2:f0:7a:c7:90:cd:4d:67:ad:bb:80:87:94:44:7a:b0:
22:8c:af:64:e5:32:73:fc:37:3b:de:a1:59:f8:57:90:ac:aa:
07:fc:d5:34:38:4a:93:d9:30:fd:79:cc:65:f6:64:31:64:c7:
7b:60:b3:07:4c:05:f1:e6:15:a6:cb:34:33:a9:84:b4:64:4d:
38:b8:ba:a5:f2:3e:07:26:c3:b2:5d:50:1d:ef:53:00:1a:5b:
05:f8:55:d4:e0:fc:34:84:36:d7:f5:e2:b8:3d:57:47:64:35:
f5:68:ef:91:0b:99:56:5f:44:2b:5b:7a:66:10:c9:6b:2e:ed:
ff:13:7b:b7:d1:3a:99:ad:5d:ee:28:db:a3:c8:db:d5:1d:bd:
2a:64:77:e7:e0:e1:98:28:31:eb:2d:13:21:3c:8d:fc:1e:27:
0e:1b:52:13:db:8a:17:5b:49:55:e0:7a:bd:f8:2f:34:93:03:
22:d7:d0:e6:38:df:f6:57:ec:d6:5b:13:6b:ca:96:e7:c0:58:
95:5f:95:1c:e6:2f:a8:21:09:45:f4:1d:5e:6f:a1:62:61:7f:
e2:05:c7:27:3d:04:8b:ae:2b:f9:00:0e:c6:97:41:7a:03:16:
94:54:96:bf:21:96:b9:66:9c:44:a9:b3:ab:aa:7e:f9:13:5c:
5a:d0:9a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:44 2026 by rpki-client