Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/IWU5vOik01w_NWfHX4A-G0r-5ZM.roa
File: IWU5vOik01w_NWfHX4A-G0r-5ZM.roa (raw, json)
Hash identifier: CKiC3NBglteq1r3AOMYvyLn95+PeazbeHMCDjbAGPZs=
Subject key identifier: 21:65:39:BC:E8:A4:D3:5C:3F:35:67:C7:5F:80:3E:1B:4A:FE:E5:93
Certificate issuer: /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial: 019D06D584B926CC02DE6FA645D0035F1C63
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/IWU5vOik01w_NWfHX4A-G0r-5ZM.roa
Signing time: Thu 19 Mar 2026 16:02:29 +0000
ROA not before: Thu 19 Mar 2026 16:02:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.87.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:d5:84:b9:26:cc:02:de:6f:a6:45:d0:03:5f:1c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Validity
Not Before: Mar 19 16:02:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=216539bce8a4d35c3f3567c75f803e1b4afee593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:87:c7:1c:ad:3f:7f:76:04:55:94:53:55:
7f:d0:13:fb:02:26:d9:07:59:3b:d4:71:94:1f:b2:
fc:a4:47:88:d3:0c:0e:1c:b6:08:d9:d6:c4:87:3e:
3b:1d:bc:ae:54:8b:27:6a:a4:1e:ad:e7:e8:a1:51:
54:0a:94:b6:7c:8c:84:a6:2c:66:b9:e2:20:c0:87:
31:26:00:62:c5:d5:d2:07:08:03:fa:6c:a4:03:4a:
d5:6e:1d:c4:1b:8e:6b:a6:9d:de:8a:1e:4a:df:6c:
9b:c8:a1:e0:24:c2:07:b8:d1:bb:46:f2:af:54:5c:
d2:90:d9:21:07:17:30:8a:fe:01:ae:9f:60:78:73:
ac:9d:9a:cf:cb:7a:1d:b4:7e:03:30:fa:35:2f:2e:
6d:ff:95:ab:23:6e:c2:ca:b8:ce:82:ca:db:35:d5:
66:4a:66:6e:7d:a7:a6:65:ee:70:dc:86:68:03:ad:
3b:96:29:72:af:8d:b2:0b:94:df:5f:6d:35:4f:cb:
b8:f4:a1:cd:d9:24:f6:79:b2:e7:1e:e3:13:d9:3a:
04:ff:bd:8a:c1:97:cd:de:62:ee:57:09:30:d7:80:
6a:30:e2:1e:ff:02:1d:ea:6e:b0:ce:b8:d5:cb:79:
04:12:5a:be:7a:b0:75:cd:28:67:f8:9d:25:ed:b3:
4a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:65:39:BC:E8:A4:D3:5C:3F:35:67:C7:5F:80:3E:1B:4A:FE:E5:93
X509v3 Authority Key Identifier:
keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/IWU5vOik01w_NWfHX4A-G0r-5ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.101.0/24
Signature Algorithm: sha256WithRSAEncryption
94:cb:0c:0f:e5:a8:9b:79:7b:ec:c8:f4:3f:53:32:0b:55:14:
c0:ae:75:e5:d7:c8:c3:a1:79:ce:d6:ad:99:47:73:d8:cc:9f:
35:ad:21:89:f9:83:45:0c:d1:b6:9a:3c:e4:61:b7:2d:8b:97:
6e:80:72:9b:66:41:d5:af:24:13:79:76:c4:ea:1b:1b:5f:a7:
63:55:f7:8f:cf:8b:c1:6c:81:98:6e:ee:90:ee:21:1c:2a:5c:
72:a0:96:d2:b2:88:1a:12:3b:b1:bd:1e:7b:91:9e:39:02:f6:
cb:51:5f:35:15:e2:4f:b9:73:ae:1e:0b:95:b5:a6:67:07:b5:
93:6e:b4:07:5b:55:2d:25:12:50:9d:d0:e5:8c:5f:db:14:48:
7f:73:77:c4:ca:79:94:8b:14:81:ec:ba:fe:e7:55:58:99:2e:
dd:ee:cf:19:e5:aa:f8:c9:6c:d6:e9:76:88:95:d7:2b:d1:58:
d9:1f:2e:2d:a7:42:b8:0f:1a:d1:82:21:1a:93:cb:11:b6:00:
39:63:6f:cf:42:8d:c5:2a:ad:a5:e4:4f:7f:47:69:2d:b1:6e:
e6:e1:0d:8a:ff:47:82:69:66:3d:d6:b2:9a:12:db:54:b7:8f:
20:f0:55:ba:ca:2f:c1:06:be:e3:36:1a:06:65:fc:84:88:00:
fe:a0:60:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:04 2026 by rpki-client