Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/baR6lnJRVbq7YT7N39EzMkAUjYA.roa
File: baR6lnJRVbq7YT7N39EzMkAUjYA.roa (raw, json)
Hash identifier: w6ZeA/1wcR2/X6FhM1+QyUxlmYKFoCNSNXuJOuu7c1U=
Subject key identifier: 6D:A4:7A:96:72:51:55:BA:BB:61:3E:CD:DF:D1:33:32:40:14:8D:80
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01A1CAFB2ACD687EF1BB518B8A95EFA48DC8
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/baR6lnJRVbq7YT7N39EzMkAUjYA.roa
Signing time: Wed 11 Nov 2026 14:20:20 +0000
ROA not before: Wed 11 Nov 2026 14:20:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203804
IP address blocks: 188.132.130.0/24 maxlen: 24
188.132.165.0/24 maxlen: 24
188.132.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:fb:2a:cd:68:7e:f1:bb:51:8b:8a:95:ef:a4:8d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Nov 11 14:20:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6da47a96725155babb613ecddfd1333240148d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:af:e2:a2:0d:eb:99:27:94:8a:3a:fc:af:
06:52:0d:07:73:1a:01:e8:41:fa:70:9a:db:e4:11:
96:e1:bf:eb:a6:e5:de:f4:db:3f:dc:93:03:ec:5b:
c8:e5:da:c0:6d:ec:9a:f5:06:ae:24:31:32:dd:df:
ed:cb:41:c2:ad:67:cb:49:91:45:79:a7:f6:ae:90:
05:47:4e:da:d9:bb:7e:0d:67:21:07:2c:2b:dd:2b:
7e:1e:16:e1:de:25:9e:ff:2c:95:30:7f:d7:45:2c:
b9:6a:be:0d:30:19:95:bc:91:11:77:b7:68:8d:f3:
f2:54:9d:03:05:1b:bb:39:b0:8d:f3:bf:ba:0b:93:
c2:5a:fd:ab:63:03:66:34:a2:b2:e8:ee:09:6a:f1:
d1:5e:5e:ba:53:cc:4e:60:69:78:dc:d6:29:63:e1:
d6:ed:cb:5e:ca:6c:ed:55:e4:d3:ad:43:be:ff:ea:
45:9c:0d:f6:e4:1e:0b:00:7e:df:09:2f:f5:d3:98:
b0:bf:66:3d:21:58:96:80:ed:9e:a0:24:0d:bf:c2:
9b:ad:7f:3c:86:82:73:f3:3b:a2:3c:0a:91:7c:b2:
86:f5:46:10:d0:b3:e2:fc:ae:5b:2d:60:7b:0f:58:
ef:e0:df:14:8a:89:e8:82:c2:8d:a5:7d:0e:25:1c:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A4:7A:96:72:51:55:BA:BB:61:3E:CD:DF:D1:33:32:40:14:8D:80
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/baR6lnJRVbq7YT7N39EzMkAUjYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.130.0/24
188.132.165.0/24
188.132.202.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e3:81:7f:a4:dd:7b:25:64:44:64:4b:23:21:7a:64:98:d1:
d5:ee:41:26:e9:ac:f5:95:d7:36:eb:70:1f:31:aa:22:6a:bf:
17:b9:e5:90:89:d8:b3:0f:b1:76:01:82:45:00:ac:6a:55:10:
27:c6:e1:b0:d5:54:8e:0d:5c:8c:23:31:55:6f:a3:ac:4f:69:
1f:bc:97:24:03:89:04:f2:1b:1b:c9:2b:86:6b:95:32:9f:da:
de:ec:64:87:73:c6:5b:43:b2:df:c5:d9:ab:6b:62:4f:c6:d4:
2d:35:58:94:df:82:e5:2d:c8:d8:a0:c6:21:8b:48:48:52:3f:
46:4a:a7:94:c8:53:a2:b0:fa:13:d8:95:e8:92:ba:a6:a1:77:
27:5a:ac:43:c8:22:53:88:b7:65:83:a9:85:1c:60:25:22:89:
de:d9:e1:bf:4b:e9:b2:f8:c1:fb:df:d1:50:3a:d4:4c:97:58:
fe:ae:8b:62:4e:d5:80:6b:a1:87:8b:05:01:c6:63:7a:74:7f:
2b:60:47:aa:1a:96:05:ad:87:fa:57:4b:a4:59:39:5e:60:b6:
2f:07:68:92:b6:d4:3d:96:96:14:56:84:96:b7:97:78:d0:5d:
c2:0c:7d:f5:4d:83:4f:48:0f:05:08:e1:f6:99:2a:c6:d8:4d:
ad:1f:bd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:01:41 2026 by rpki-client