Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/bWr5nmv4VNmKHBjAA9NCpe0XBpQ.roa
File: bWr5nmv4VNmKHBjAA9NCpe0XBpQ.roa (raw, json)
Hash identifier: T/ACRacf79HnwyZZZ5ObxYx5/EHdrRm7v0YSFvaC0ic=
Subject key identifier: 6D:6A:F9:9E:6B:F8:54:D9:8A:1C:18:C0:03:D3:42:A5:ED:17:06:94
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019F8521862245A4C1EC8EBBD220EE82E62D
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/bWr5nmv4VNmKHBjAA9NCpe0XBpQ.roa
Signing time: Tue 21 Jul 2026 14:43:14 +0000
ROA not before: Tue 21 Jul 2026 14:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 88.148.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:21:86:22:45:a4:c1:ec:8e:bb:d2:20:ee:82:e6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jul 21 14:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d6af99e6bf854d98a1c18c003d342a5ed170694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:0f:0b:0b:f6:b9:f5:3c:92:09:f9:56:6a:
e0:8c:54:53:2e:ba:4a:ec:21:46:af:ff:e0:1e:12:
33:45:bf:d7:af:52:49:a3:6c:d6:e2:29:be:59:ac:
14:8b:f0:cf:c7:8e:b8:cc:6d:76:ad:29:6a:9b:03:
51:d3:bf:92:67:d2:98:3e:76:61:f9:7e:d8:82:97:
d3:3f:64:62:c2:d2:d9:0b:b1:d3:d4:7a:82:70:6a:
ab:f6:44:aa:90:1d:20:08:09:5c:02:fc:07:2d:be:
32:75:f1:e4:b2:19:11:29:9a:b8:31:e4:b4:01:f4:
47:b1:23:1b:d1:9e:69:0a:fd:bc:cf:2e:dd:87:21:
6d:bc:be:96:bf:5a:69:74:ff:4b:e3:72:5b:24:0c:
f0:07:ba:77:46:17:8a:f7:56:d4:ea:b3:29:c8:ba:
aa:46:ab:7c:e4:0a:93:49:35:b5:81:24:4f:2f:92:
67:e9:28:b8:04:19:f5:60:ac:f5:96:79:1e:1e:38:
34:aa:46:b8:27:f5:a9:03:76:cf:de:80:4d:e5:2e:
8a:94:2d:a1:64:d5:2d:32:f6:58:e1:54:c0:7f:61:
f0:b5:8b:18:8b:72:72:39:22:3f:12:d7:99:9b:1c:
78:f5:77:f1:a5:e4:4c:8b:bd:14:2f:b9:54:5b:52:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6A:F9:9E:6B:F8:54:D9:8A:1C:18:C0:03:D3:42:A5:ED:17:06:94
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/bWr5nmv4VNmKHBjAA9NCpe0XBpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.148.121.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:d0:61:01:89:48:bd:66:8b:3b:73:f8:9a:a3:48:02:20:55:
15:bc:6a:87:e8:bd:04:ab:35:63:f2:ba:54:71:d7:e2:eb:39:
d9:e3:43:be:38:2f:07:30:5d:29:c4:ad:79:c2:32:73:3c:93:
7d:f8:8b:01:aa:ae:7c:40:5a:92:28:90:62:61:6f:96:e2:cb:
df:8a:37:a4:db:ce:4b:72:a2:3b:7a:77:8a:00:10:b6:f7:7b:
15:06:1e:93:70:3a:18:a2:fb:a7:b7:82:e7:95:16:d6:ea:7e:
8a:da:79:b8:10:63:e6:a1:37:df:89:6e:8d:96:a1:7e:bf:1a:
1b:d6:7e:b3:46:b3:e4:1c:1c:36:ec:5e:9f:c4:93:0c:fe:66:
a9:d1:2b:3d:ee:7f:66:7d:84:f3:27:65:86:09:81:b5:3e:ce:
aa:48:71:c3:87:33:4d:10:ca:d5:03:fe:26:be:82:ef:1b:82:
8b:c4:ee:f0:8a:07:65:0f:e4:5f:eb:e4:5c:f3:56:a9:f9:dc:
fa:93:6c:3c:bd:d7:3d:f8:83:d6:6e:6e:57:21:58:88:f6:31:
f6:57:7b:95:ce:76:d7:33:5e:74:84:03:45:77:5f:25:64:ce:
02:27:8e:16:84:d4:5f:f2:6d:23:be:52:02:7d:f0:3a:9a:13:
86:cb:b8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:20:29 2026 by rpki-client