Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/Bq6stHEFxMFxnWEoWkNnr2q_nfU.roa
File: Bq6stHEFxMFxnWEoWkNnr2q_nfU.roa (raw, json)
Hash identifier: FRvotk1GU1c0bgTGRLjQpv9XYU8csQF9vIzVahVu7Aw=
Subject key identifier: 06:AE:AC:B4:71:05:C4:C1:71:9D:61:28:5A:43:67:AF:6A:BF:9D:F5
Certificate issuer: /CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Certificate serial: 019CC4117EE25926B4F14D65C2B430B03889
Authority key identifier: DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/Bq6stHEFxMFxnWEoWkNnr2q_nfU.roa
Signing time: Fri 06 Mar 2026 16:53:26 +0000
ROA not before: Fri 06 Mar 2026 16:53:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49985
IP address blocks: 194.12.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c4:11:7e:e2:59:26:b4:f1:4d:65:c2:b4:30:b0:38:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Validity
Not Before: Mar 6 16:53:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06aeacb47105c4c1719d61285a4367af6abf9df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f0:17:7e:3b:9c:ff:71:42:36:33:fa:59:d5:
b2:63:ce:ee:19:21:f7:e4:68:3a:ea:fc:0b:50:98:
7d:70:b0:2a:e3:46:e5:c8:2c:9e:37:38:3e:b4:0f:
cd:55:61:2d:7d:47:32:d3:ec:fe:75:8e:98:11:3c:
96:25:da:4e:36:e0:e2:38:48:8e:78:6a:21:a2:97:
8c:e7:6f:5b:f8:db:33:f9:b1:b0:85:a4:73:b8:9a:
f6:b0:6a:cf:fb:70:ad:c0:57:1e:3c:73:cb:b3:58:
68:2a:47:46:d6:f8:f1:2a:df:3c:35:b4:80:58:ee:
b9:78:97:bc:1a:29:15:44:d4:5f:ac:a5:41:63:f0:
a5:af:23:51:a7:76:a6:8f:04:28:2b:dc:66:86:4e:
3c:b0:70:db:8c:19:07:3b:9c:90:c8:ca:a5:90:6b:
35:94:e9:35:f8:5f:93:da:ff:25:34:a6:85:70:89:
76:1c:b2:a3:b2:e9:02:c9:13:88:c0:96:35:9c:e4:
82:2f:9d:e3:db:ec:81:3a:45:86:aa:e1:5b:8e:87:
08:99:b0:8a:94:c8:64:35:c4:5a:61:75:a1:4c:71:
c6:ad:e2:02:da:15:40:33:83:73:40:f5:88:bd:47:
d4:a8:28:05:2e:df:7b:c7:d7:78:8b:ed:57:11:d9:
e3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AE:AC:B4:71:05:C4:C1:71:9D:61:28:5A:43:67:AF:6A:BF:9D:F5
X509v3 Authority Key Identifier:
keyid:DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/Bq6stHEFxMFxnWEoWkNnr2q_nfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.12.32.0/20
Signature Algorithm: sha256WithRSAEncryption
48:04:65:3c:cd:d9:f7:76:2d:7d:e3:76:36:70:9f:e0:d8:8d:
ee:21:c4:4a:8c:58:5c:dc:65:59:c9:ef:25:6f:a7:b1:45:62:
4b:7c:8f:d5:2a:f7:ba:44:9a:2d:7e:2a:09:15:41:06:51:c6:
4c:2b:f0:a8:b8:a3:40:72:65:1b:0a:9b:cb:cf:d4:64:fe:91:
a8:3d:8d:c1:f4:4f:d2:4c:8d:d6:a8:4c:d9:3f:cc:82:67:aa:
64:b7:9e:27:27:75:0b:2c:25:4a:13:37:ea:67:66:4e:97:24:
b2:46:96:30:34:19:6e:46:d0:35:f1:f1:d2:58:e7:5b:7e:3d:
c8:bc:06:f6:e8:6f:32:4c:5e:62:94:2b:4e:d9:83:2b:6d:13:
63:f1:be:4b:6b:a4:5d:58:dd:48:7f:a7:e2:91:f0:08:92:16:
4a:7e:34:b1:f5:58:6f:6e:3f:b1:44:db:7d:1e:4a:b0:94:46:
ea:54:80:2b:92:a8:6c:ed:c1:fd:db:7a:3b:2f:1d:52:ec:60:
b8:8b:d1:0b:94:85:92:b3:4e:ec:55:4b:71:82:e5:66:7d:48:
b6:a3:32:aa:77:dc:95:b1:ec:97:ba:cf:fc:dc:ce:bf:cb:d8:
08:b1:45:54:69:09:32:69:90:19:02:31:99:79:70:f0:a6:4b:
95:9c:39:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:19 2026 by rpki-client