Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0buhRJjHXTiILzpXwukDNlvcl6A.roa
File: 0buhRJjHXTiILzpXwukDNlvcl6A.roa (raw, json)
Hash identifier: dS469I3s9ALuc1j5wYrMGtFrrCgHDmpnkp67+jT2dqk=
Subject key identifier: D1:BB:A1:44:98:C7:5D:38:88:2F:3A:57:C2:E9:03:36:5B:DC:97:A0
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 019F23295EECEF50287B6001FC550284C92D
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0buhRJjHXTiILzpXwukDNlvcl6A.roa
Signing time: Thu 02 Jul 2026 14:09:01 +0000
ROA not before: Thu 02 Jul 2026 14:09:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209483
IP address blocks: 171.22.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:29:5e:ec:ef:50:28:7b:60:01:fc:55:02:84:c9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Jul 2 14:09:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1bba14498c75d38882f3a57c2e903365bdc97a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:ea:f3:0f:36:fb:80:d9:34:3d:0b:47:b7:
3c:21:40:ac:4b:38:11:7c:b7:fc:3d:6f:b5:eb:1f:
39:6d:89:8f:00:42:d0:f1:bb:a5:5e:ad:d5:ab:12:
83:07:75:47:6f:41:36:71:34:bb:9a:c8:cf:63:54:
47:a2:6e:52:5e:6d:2f:4d:04:2a:ec:fd:42:d9:3a:
6e:e2:57:b9:fd:19:ac:a5:00:9f:ff:80:06:5f:a6:
5d:be:ec:4e:bd:9c:ae:e2:7e:a5:44:e4:e8:bc:57:
4a:cd:5a:d2:d7:ba:a9:a9:90:ba:d5:ae:1b:57:95:
a5:c1:8e:ee:bd:f3:55:22:df:68:f6:c9:48:1b:9d:
ae:99:da:b6:68:1b:00:1f:0f:7f:83:cd:da:02:53:
03:ab:8f:84:fe:4f:02:29:3b:0b:65:17:20:0a:d4:
2e:e7:4e:09:73:23:8a:23:fd:42:7e:f4:f9:9e:1c:
7a:0f:4c:a6:87:55:90:de:5a:c7:8e:3d:7d:66:f4:
e0:a8:bc:b4:10:2f:00:37:c1:13:ff:93:4b:da:72:
f1:94:36:82:16:1c:58:32:bf:04:f1:1e:6d:39:d1:
c2:5f:55:ed:eb:07:fe:b6:03:76:49:80:6c:d7:27:
5f:73:9e:44:e5:db:ff:f2:3d:3c:78:0e:cd:f8:e7:
68:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BB:A1:44:98:C7:5D:38:88:2F:3A:57:C2:E9:03:36:5B:DC:97:A0
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0buhRJjHXTiILzpXwukDNlvcl6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.158.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:02:15:e6:86:5f:22:a4:be:ec:f1:20:e9:3b:4b:b6:2a:eb:
5e:95:16:fe:0d:82:a8:7a:95:69:b2:50:b6:53:1b:8b:3d:9f:
61:8b:77:67:64:df:f1:8c:bd:03:e9:4b:dc:c2:24:80:ee:52:
db:46:ad:26:fd:97:75:68:d7:48:26:8d:76:96:76:4d:ea:6d:
c9:da:98:10:44:70:f2:2e:7b:e0:97:8e:0f:e3:9a:f0:af:7f:
55:2d:0d:53:1e:44:1d:a5:eb:29:bd:6c:fc:0b:cb:9f:20:d4:
c4:6a:17:f5:6f:13:f1:38:86:c6:6a:21:8f:00:d2:e2:91:90:
86:50:9c:6b:13:de:23:4a:61:ae:04:0b:bb:e8:a6:89:3c:e8:
46:2f:d4:f0:9b:ac:9c:a6:cb:79:53:00:1c:d0:f4:fb:29:ce:
2b:4d:6e:e3:44:21:09:2e:dc:97:a7:94:b4:9c:45:c0:c7:d8:
41:e1:2a:1e:1b:ff:a4:d6:79:0a:be:9d:df:7a:c2:de:87:62:
02:2a:47:b1:0d:1f:10:dc:e0:0b:a6:11:7a:c5:e1:49:86:aa:
a6:9a:c5:a8:1e:7f:57:24:4e:c7:24:50:c1:de:d3:52:80:9d:
54:7b:12:db:db:8d:b9:f9:4d:3a:e3:11:5b:c3:6d:7a:e3:90:
30:7f:d8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:07 2026 by rpki-client