Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c055a4-8962-4d41-8b69-d7e31c0e8f11/1/bW3cNXQ8ETHaIbag1hsdcosAygk.roa
File: bW3cNXQ8ETHaIbag1hsdcosAygk.roa (raw, json)
Hash identifier: wSM1bSinVbIUHrlZvTgxz1Z+hdxPzIJod8hB6qrthCc=
Subject key identifier: 6D:6D:DC:35:74:3C:11:31:DA:21:B6:A0:D6:1B:1D:72:8B:00:CA:09
Certificate issuer: /CN=c71270e2a641ccd823716c74096489af377d7062
Certificate serial: 019CE78D668144AEEB5C7D530E4C77429244
Authority key identifier: C7:12:70:E2:A6:41:CC:D8:23:71:6C:74:09:64:89:AF:37:7D:70:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxJw4qZBzNgjcWx0CWSJrzd9cGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c055a4-8962-4d41-8b69-d7e31c0e8f11/1/bW3cNXQ8ETHaIbag1hsdcosAygk.roa
Signing time: Fri 13 Mar 2026 14:15:29 +0000
ROA not before: Fri 13 Mar 2026 14:15:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202713
IP address blocks: 185.151.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c055a4-8962-4d41-8b69-d7e31c0e8f11/1/xxJw4qZBzNgjcWx0CWSJrzd9cGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c055a4-8962-4d41-8b69-d7e31c0e8f11/1/xxJw4qZBzNgjcWx0CWSJrzd9cGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxJw4qZBzNgjcWx0CWSJrzd9cGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:8d:66:81:44:ae:eb:5c:7d:53:0e:4c:77:42:92:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71270e2a641ccd823716c74096489af377d7062
Validity
Not Before: Mar 13 14:15:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d6ddc35743c1131da21b6a0d61b1d728b00ca09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:cb:45:04:fc:98:c9:ee:c5:d1:a7:7e:cf:
ed:a7:91:f6:78:64:dd:6b:50:df:df:19:90:67:2d:
f0:d0:63:0d:f1:61:ce:c5:ee:af:36:75:1a:45:9c:
01:8f:3b:cd:02:77:23:37:75:42:db:42:b2:3f:f2:
40:e0:7f:08:8a:04:55:6e:09:4d:3a:61:c7:98:82:
14:b8:a5:f9:b3:f0:b4:9f:c4:c3:6a:c5:81:6b:2d:
27:49:5e:d5:2a:4f:f7:63:ee:d2:f4:ca:f7:4f:cd:
59:6f:15:f8:b6:b2:76:ad:1c:0a:86:84:98:49:49:
e9:17:fa:3b:3a:8b:fa:06:c6:e6:48:c0:7c:3f:f2:
b4:db:11:24:05:21:d3:7c:04:9a:2d:1b:19:82:fc:
22:52:2a:46:58:48:9e:52:fa:ea:1b:0a:ce:63:b0:
32:df:22:ec:3d:11:82:f8:6f:f4:39:38:43:f1:5c:
19:8b:2c:da:df:4c:93:48:77:a7:b4:96:12:f3:e6:
43:97:fa:23:1d:9d:65:9c:0a:88:f6:ca:23:cf:a2:
68:7d:92:45:34:7f:14:b1:0c:dc:13:d7:01:21:a2:
8a:54:05:cb:5a:af:17:50:5e:11:2c:c2:91:6d:ee:
f5:ab:96:2e:55:7b:04:2e:78:44:64:ab:2b:9b:82:
5d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6D:DC:35:74:3C:11:31:DA:21:B6:A0:D6:1B:1D:72:8B:00:CA:09
X509v3 Authority Key Identifier:
keyid:C7:12:70:E2:A6:41:CC:D8:23:71:6C:74:09:64:89:AF:37:7D:70:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxJw4qZBzNgjcWx0CWSJrzd9cGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c055a4-8962-4d41-8b69-d7e31c0e8f11/1/bW3cNXQ8ETHaIbag1hsdcosAygk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c055a4-8962-4d41-8b69-d7e31c0e8f11/1/xxJw4qZBzNgjcWx0CWSJrzd9cGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.112.0/22
Signature Algorithm: sha256WithRSAEncryption
af:53:4d:2e:86:74:b3:3d:64:8b:92:a3:a1:eb:c5:ef:fd:5b:
02:1b:f6:cd:d8:bf:d8:2e:50:57:44:62:18:87:c4:a1:f6:4e:
26:2b:d6:78:8b:99:86:c2:11:d7:37:1c:66:d9:92:87:02:76:
00:3c:cf:ea:d4:c5:de:11:13:cb:7c:c3:6a:b2:41:65:83:4b:
14:61:44:0e:19:cd:f3:2e:99:17:fe:a7:ba:0c:b2:51:c2:77:
df:0b:be:f5:59:47:a8:6c:34:90:89:bf:e8:49:c4:38:2d:c4:
71:07:bd:76:5c:0a:46:98:1b:f4:07:54:44:87:96:fe:0e:59:
99:64:9d:41:10:ba:26:f1:81:1d:05:52:48:79:ea:09:19:ca:
da:87:32:ec:81:74:5c:97:3f:b3:27:1f:f2:85:40:68:ab:8a:
a0:40:78:32:d5:0b:47:ad:b2:84:75:d5:10:0f:d8:0d:59:5e:
81:8e:9c:77:69:a2:65:e8:1a:f9:d0:d6:af:af:d3:fd:f1:66:
b0:c2:cb:c1:8b:a3:76:2e:02:08:ed:22:e1:73:c1:8c:c9:76:
b8:38:44:95:4a:7b:fc:77:d7:0b:2f:a8:f8:57:08:62:8c:43:
cc:8c:76:0a:be:c0:f7:05:08:22:6b:ac:a0:f7:af:82:a3:40:
fb:ad:67:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZznjWaBRK7rXH1TDkx3QpJEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MTI3MGUyYTY0MWNjZDgyMzcxNmM3NDA5NjQ4OWFmMzc3
ZDcwNjIwHhcNMjYwMzEzMTQxNTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDZkZGMzNTc0M2MxMTMxZGEyMWI2YTBkNjFiMWQ3MjhiMDBjYTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJDLRQT8mMnuxdGnfs/tp5H2eGTd
a1Df3xmQZy3w0GMN8WHOxe6vNnUaRZwBjzvNAncjN3VC20KyP/JA4H8IigRVbglN
OmHHmIIUuKX5s/C0n8TDasWBay0nSV7VKk/3Y+7S9Mr3T81ZbxX4trJ2rRwKhoSY
SUnpF/o7Oov6BsbmSMB8P/K02xEkBSHTfASaLRsZgvwiUipGWEieUvrqGwrOY7Ay
3yLsPRGC+G/0OThD8VwZiyza30yTSHentJYS8+ZDl/ojHZ1lnAqI9sojz6JofZJF
NH8UsQzcE9cBIaKKVAXLWq8XUF4RLMKRbe71q5YuVXsELnhEZKsrm4Jd+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG1t3DV0PBEx2iG2oNYbHXKLAMoJMB8GA1UdIwQY
MBaAFMcScOKmQczYI3FsdAlkia83fXBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHhKdzRxWkJ6TmdqY1d4MENXU0pyemQ5Y0dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jMDU1YTQtODk2Mi00ZDQxLThiNjkt
ZDdlMzFjMGU4ZjExLzEvYlczY05YUThFVEhhSWJhZzFoc2Rjb3NBeWdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jMDU1YTQtODk2Mi00ZDQxLThiNjktZDdlMzFjMGU4ZjEx
LzEveHhKdzRxWkJ6TmdqY1d4MENXU0pyemQ5Y0dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZdwMA0G
CSqGSIb3DQEBCwUAA4IBAQCvU00uhnSzPWSLkqOh68Xv/VsCG/bN2L/YLlBXRGIY
h8Sh9k4mK9Z4i5mGwhHXNxxm2ZKHAnYAPM/q1MXeERPLfMNqskFlg0sUYUQOGc3z
LpkX/qe6DLJRwnffC771WUeobDSQib/oScQ4LcRxB712XApGmBv0B1REh5b+DlmZ
ZJ1BELom8YEdBVJIeeoJGcrahzLsgXRclz+zJx/yhUBoq4qgQHgy1QtHrbKEddUQ
D9gNWV6Bjpx3aaJl6Br50Navr9P98WawwsvBi6N2LgII7SLhc8GMyXa4OESVSnv8
d9cLL6j4VwhijEPMjHYKvsD3BQgia6yg96+Co0D7rWeN
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:00:26 2026 by rpki-client